Personal Data Processing Policy
This is a translation provided for convenience. The Russian version of this document is legally binding and prevails in case of any discrepancy: Russian version.
Version of 2 October 2026
1. General Provisions
1.1. This Policy sets out how Mezhdunarodnye internet resursy LLC (OOO «MIR») (OGRN 1167847147511, INN 7807115235, address: 20-115 Chekistov St., St Petersburg, 198329, Russia; the "Operator") processes and protects the personal data of users of the KONTEON service (the websites konteon.ru, konteon.com and its subdomains en, de, es, pt, fr; the "Service"). The Policy has been adopted pursuant to Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" (the "Law").
1.2. Contact for personal data inquiries: support@konteon.ru, or the Operator's postal address.
1.3. The Policy is publicly available at konteon.ru/legal/privacy.html.
2. Principles
We process data lawfully and fairly, only for purposes defined in advance; we do not collect more than necessary, do not keep data longer than the purpose requires, and ensure its accuracy and protection. Databases containing personal data of Russian citizens are located on servers in the Russian Federation.
3. Purposes, Data and Legal Grounds
| Purpose | Data | Legal ground |
|---|---|---|
| Registration and operation of the account | email, name (as you provide it), password hash, website language, country (determined by IP at registration or selected by you), registration IP address, registration and last sign-in dates, records of consents | contract (Terms of Use), consent |
| Password recovery and notifications via Telegram | Telegram chat ID | consent, contract |
| Storing projects and calculating estimates | projects and their parameters; data of your clients, if you have entered it (processed on your instructions) | contract, user's instructions |
| Sale of paid services, receipts, accounting | orders: plan, amount, currency, country, state/province (for the USA and Canada), card issuing country, payment status, email for the receipt; for companies — name, address, tax number and the result of its verification | contract, law (Federal Law No. 54-FZ, Tax Code of the Russian Federation, accounting legislation) |
| Security and abuse prevention | IP address, browser and device information, sign-in history, matches between accounts (IP, device, Telegram), hash of the email address of a deleted account | legitimate interest of the Operator, consent |
| Responding to inquiries and feedback | email, text of the inquiry, screenshot (if you attach one), country and language | consent |
| Waitlist and early access | email, country, plan of interest, survey answers (role, what you are building, willingness to pay) | consent |
| Informational and promotional mailings | email, name | separate consent (optional) |
| Forwarding a request to a partner (supplier, builder) | name, phone number, email, city, project parameters | separate consent for each transfer |
| Referral program | the referral code through which you arrived | contract, legitimate interest |
| Website traffic statistics (Yandex Metrica) | cookies, browser identifier, IP address, information about actions on the website | the operator's legitimate interest (improving the service); no separate consent is required |
We do not process special categories of personal data (concerning health, beliefs, etc.) or biometric data. Please do not include such information in projects, inquiries or render prompts.
4. Processing Operations
Collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion and destruction, with or without the use of automation tools.
We do not make decisions that produce legal effects for you based solely on automated processing. Only technical restrictions may be applied automatically: limits on trial features and request frequency. Account blocking is decided by a human.
5. Recipients
5.1. The following may receive or process data on the Operator's behalf:
- the Service's hosting provider, with servers in Russia;
- YooKassa (NCO YooMoney LLC), when you make a payment: you enter your payment details on the YooKassa side, and we do not receive card data other than the issuing country and the masked card number;
- YANDEX LLC — the Yandex Metrica service (website traffic statistics);
- the Telegram messenger — if you have linked Telegram, and for delivering inquiries to the support team;
- partners — only with your separate consent for a specific request;
- public authorities — in cases expressly provided for by law.
5.2. Renders. To create a render, only a snapshot of the 3D model and the prompt text are sent to foreign AI services, without email, name, phone number or account identifier. Do not include personal data in a render prompt.
6. Cross-Border Transfer
Cross-border transfer occurs when Telegram is used (chat ID, password recovery codes, the text of an inquiry and a screenshot sent via the feedback form). The Operator carries it out after notifying Roskomnadzor (the Russian data protection authority) in accordance with Article 12 of the Law. If you do not want such a transfer, do not link Telegram and write to us at support@konteon.ru.
7. Retention Periods
| Data | Period |
|---|---|
| Account data and projects | while the account exists; after deletion, deleted within 30 days. Projects published in the showcase remain there without the author's name |
| Hash of the email address of a deleted account (the email itself is not stored) | 24 months, to prevent trial features from being granted again |
| Sign-in history | 12 months; the IP address in it is truncated after 90 days |
| Orders, payments, invoices, company information | 5 years after the end of the year in which the transaction took place (tax and accounting records) |
| Records of consents | while the consent is in effect and for 3 years after its withdrawal, to demonstrate the lawfulness of processing |
| Inquiries and feedback | 3 years |
| Waitlist, survey answers | until payment opens in your country or until consent is withdrawn, but no longer than 3 years |
| Mailings | until consent is withdrawn |
| Administrator activity log | 5 years |
When the period expires or the purpose is achieved, the data is deleted or depersonalized.
8. Your Rights
You have the right to:
- obtain information about the processing of your data and a copy of it;
- require that data be clarified, blocked or deleted if it is incomplete, outdated, inaccurate or processed unlawfully;
- withdraw your consent to processing — by writing to support@konteon.ru; consent to mailings can also be withdrawn in your profile. Analytics cookies can be disabled in your browser settings or via the Yandex opt-out (see the Cookie Policy). Withdrawing consent to the processing necessary for the account to function means deleting the account; processing based on law or contract (for example, retention of payment documents) will continue within the periods set out in Section 7;
- appeal against the Operator's actions to Roskomnadzor or in court.
We respond to requests within 10 business days of receipt; this period may be extended by no more than 5 business days, with notice of the reasons.
9. How We Protect Data
Encrypted connections (HTTPS) on all websites; passwords are stored only as hashes; access to the database is limited to authorized persons; administrator actions are logged; access keys and passwords are stored separately from the code and rotated regularly; backups are made; no personal data is sent to AI services. A person responsible for organizing personal data processing has been appointed by order of the Operator.
In the event of a data breach, the Operator notifies Roskomnadzor within the periods established by Article 21 of the Law (within 24 hours of the incident and within 72 hours of the results of the investigation).
10. Cookies
Which cookies and browser storage are used, and how to disable statistics, is described in the Cookie Policy.
11. Changes
We may update this Policy. A new version takes effect upon publication on this page; the version date is shown at the top.
12. Operator Details
| Company | Mezhdunarodnye internet resursy LLC (OOO «MIR») |
| Taxpayer ID (INN) / KPP | 7807115235 / 780701001 |
| State registration no. (OGRN) | 1167847147511 |
| Address | 20-115 Chekistov St., St Petersburg, 198329, Russia |
| support@konteon.ru |