Privacy and personal data
Personal Data Processing Policy
This policy defines how FoodDuck AI processes users' personal data.
This version is effective from publication on the FoodDuck AI website.1. General Provisions
This policy applies to personal data processed when using the FoodDuck AI website, Telegram bot, paid plans, payment scenarios, and support requests.
The policy is prepared taking into account Federal Law of the Russian Federation No. 152-FZ dated July 27, 2006 "On Personal Data" and other applicable requirements of Russian law.
By continuing to use the Service, the User confirms that they have read this policy.
2. Data That May Be Processed
- Telegram ID, username, profile name, and technical chat identifiers.
- Photos, photo captions, and text messages that the User sends to the bot for analysis.
- Email, phone number, or other contact details if the User provides them for support or payment.
- Information about the plan, payment, subscription status, limits, and Service usage history.
- Technical data: request date and time, service logs, IP addresses of server requests, and payment notification data.
3. Processing Purposes
- Providing access to the Telegram bot and performing analysis at the User request.
- Activating plans, accounting for limits, and processing payments.
- Responding to support requests and investigating technical errors.
- Ensuring Service security, preventing abuse, and complying with legal requirements.
4. Legal Grounds for Processing
- Performance of the User Agreement and the Public Offer, including Service access, request processing, and paid plan activation.
- The User's consent to personal data processing expressed when using the website, Telegram bot, paying for a plan, or contacting support.
- Compliance with Russian legal requirements, including payment, fiscal receipt, accounting, and tax requirements.
- The Contractor's legitimate interest in Service security, abuse prevention, technical error investigation, and operational stability improvement.
5. Processing Methods, Storage, and Deletion
Processing may include collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, anonymization, blocking, deletion, and destruction of data with or without automated tools.
Photos, captions, text messages, and analysis results are stored no longer than required to process the request, display usage history, support the User, ensure Service security, and comply with applicable law.
Payment, plan, fiscal receipt, and payment support data is stored for the periods required to perform the agreement, keep accounting and tax records, review claims, and comply with legal requirements.
Service logs and technical data are used to diagnose errors, protect against abuse, and maintain Service stability. When processing purposes are achieved, data is deleted, anonymized, or archived if further storage is required by law.
6. Transfer to Third Parties and Cross-Border Transfer
Data may be transferred to infrastructure providers, the Robokassa payment service, Telegram, storage services, queue services, and AI processing services only to the extent necessary for FoodDuck AI operation, payment processing, receipt generation, user support, and compliance with legal requirements.
The Contractor does not sell users' personal data to third parties.
If Service providers located outside the Russian Federation are used, data is transferred only to the extent necessary to provide the Service and where applicable legal grounds exist.
7. Technical Data, Logs, and Cookies
When visiting the FoodDuck AI website, browser and device technical data, request date and time, IP address, requested page addresses, and similar information may be processed if available to the server infrastructure.
The website may use cookies or similar technical mechanisms for interface operation, user preference storage, technical stability analysis, and abuse prevention.
When using the Telegram bot, instead of cookies the Service processes Telegram chat technical identifiers, Telegram ID, username, and bot action data necessary for Service scenarios.
8. Data Protection
The Contractor takes organizational and technical measures to protect data against unauthorized access, alteration, disclosure, or destruction.
Data access is limited to persons and providers that need it for Service operation, payment processing, user support, security, and compliance with legal requirements.
9. User Rights
- Request information about the processing of their personal data.
- Ask to clarify, block, or delete data if this does not contradict legal requirements.
- Withdraw consent to personal data processing, understanding that this may make further use of the Service impossible.
- Challenge the Contractor's actions or inaction before the authorized personal data protection authority or in court.
10. Operator Contacts
Name: ИП Изудинов Мухамед Махмутович; Status: Индивидуальный предприниматель; Registration details: ИНН 051703155756, ОГРНИП 323057100132738; Support email: [email protected]; Phone: +7 977 989-57-88