Personal Data Processing Policy

Edition of May 15, 2026

This Policy defines how personal data of Users of aistre.io (the «Site») is processed. The data operator is Individual Entrepreneur Borzenkov Nikita Yurievich, OGRNIP 317385000055729, INN 381296670594, registered address: 664081, Russia, Irkutsk Region, Irkutsk, Yubileiny microdistrict, 12, apt. 89.

1. What data we collect

In the course of providing the service we may process the following data categories:

• Identification data: email, name; for Telegram sign-in — username and numeric id.
• Astrological data: date, time, and place of birth, and the same data for a partner (for a compatibility chart — with the partner's consent).
• Technical data: IP address, browser User-Agent, visit timestamps, UTM tags of the traffic source, session identifier (cookie).
• Payment data: payment identifiers from the provider (YooKassa, Tinkoff), 54-FZ fiscal receipt. We do not receive or store bank-card details — they are handled exclusively by the payment provider.

2. Purposes of processing

• Delivering the ordered service (natal chart calculation, PDF generation).
• Identifying the user on subsequent sign-ins.
• Communicating with the user about contract performance.
• Complying with tax, accounting, and other applicable Russian law.
• Protecting against fraud and attacks (rate-limiting, fraud detection).
• Marketing communications — only with explicit User consent (a separate opt-in).

3. Legal basis

• Consent of the data subject (Article 6, part 1, item 1, 152-FZ).
• Performance of a contract (Article 6, part 1, item 5, 152-FZ).
• Compliance with legal obligations (Article 6, part 1, item 2, 152-FZ).

4. Storage period and location

Data is stored on servers in the Russian Federation (Yandex Cloud or an equivalent Russian provider) under Article 18, part 5 of 152-FZ. Retention periods:

• Identification and contact data — until the user withdraws consent.
• Order and payment data — 4 years from the date of the transaction (Article 23 of the Russian Tax Code).
• Technical logs — 90 days.
• Finished PDFs in S3 — until the user requests deletion or until a full refund is processed.

5. Sharing with third parties

We share the minimum necessary data with the following processors, each under a separate agreement:

• Payment provider (JSC Tinkoff Bank) — for processing payment.
• Cloud infrastructure provider (Yandex Cloud) — for data and file storage.
• Email delivery provider (Unisender or an equivalent Russian provider) — for sending confirmation codes and notifications.
• LLM-generation provider (YandexGPT or equivalent) — only anonymized astrological data without user identifiers.

Data is not transferred outside the Russian Federation. A confidentiality agreement is in place with each processor.

6. Security

Technical and organizational protection measures are applied, including TLS encryption on all communication channels, Argon2 hashing of one-time codes, restricted access for operational staff, and audit logging of all administrative actions.

7. Rights of the data subject

The user may at any time:

• Receive information about the data being processed.
• Demand correction, deletion, or blocking of the data.
• Withdraw consent to processing (this entails deletion of the account).
• Export their data in a machine-readable format (JSON).
• File a complaint with Roskomnadzor: rkn.gov.ru.

To exercise these rights, send a request to info@aistre.ru. Response time — 30 days.

8. Cookies and analytics

The Site uses session cookies for authentication (with HttpOnly and Secure flags). Yandex Metrica is also used for aggregated visit statistics; personal data is not transferred to it.

9. Policy changes

The current edition is always available on this page. For material changes, users are notified by email at least 7 days before the changes take effect.

10. Contact

Operator: Individual Entrepreneur Borzenkov Nikita Yurievich, OGRNIP 317385000055729, INN 381296670594. Email for 152-FZ requests: info@aistre.ru. Full details are on the Contacts & Details page.