kibin.pro

Privacy policy

Last updated 14 August 2026

This policy explains what personal data kibin.pro collects, why, who it is shared with, how long it is kept and how you can have it deleted. It is written to comply with Russian Federal Law No. 152-FZ of 27 July 2006 on personal data; a separate section below covers rights under the GDPR for visitors in the European Economic Area.

You don’t have to read all of it. The short version: data is collected only to answer your enquiry and to understand site traffic, it is never sold, and it is deleted on request to the address below.

1. Data controller

The controller is Индивидуальный предприниматель Кибин Александр Александрович (Alexander Kibin, sole proprietor registered in Russia), TIN 521901801928, state registration number 317527500051082.

For any question about the processing of personal data, including withdrawal of consent and deletion: aa@kibin.pro.

2. What data is collected

Only data you supply yourself, plus anonymised visit statistics. No special categories of personal data and no biometric data are collected.

Through the contact form:

  • your name, if you provide one;
  • a contact — email address, phone number or messenger handle;
  • the text of your message and anything you choose to include in it.

Through the AI assistant:

  • the full text of your conversation with the assistant, including everything you wrote;
  • the contact and short project summary the assistant compiles from that conversation;
  • a specification file, if you attached one as a PDF, and the text extracted from it.

Automatically, on each request:

  • your IP address — stored only as an irreversible hash used for rate limiting and spam protection; the address itself is not retained;
  • the User-Agent string (browser and operating system);
  • the date and time of the request.

Through Yandex Metrica web analytics (counter no. 111596299):

  • cookies set by the Yandex Metrica service;
  • anonymised visit data: pages viewed, referrer, device type, screen resolution, approximate region;
  • Webvisor session recording — cursor movement, scrolling, clicks and typing in form fields. The contact form’s field contents are excluded from the recording by counter configuration, but you should be aware that your actions on the site’s pages are recorded;
  • click maps and outbound link statistics.

3. Purposes and legal grounds

Personal data is processed only for the following purposes:

  • handling and answering your enquiry and preparing a proposal — grounds: your consent (art. 6(1)(1) of 152-FZ) and performance of a contract you are party to or intend to enter into (art. 6(1)(5) of 152-FZ);
  • protecting the site against automated abuse and spam (hashed IP, User-Agent) — grounds: the controller’s legitimate interest in keeping the site operational;
  • traffic statistics and improving the site — grounds: consent, expressed by continuing to use the site after the cookie notice has been shown.

Your data is not used for automated decision-making with legal effect, is not used for marketing mailings unless you ask for them, and is not sold to third parties.

4. Sharing with third parties

The following processors are used, each receiving only what its service requires:

  • Yandex LLC — Yandex Metrica web analytics; receives the data listed in section 2, processed on the terms published by that service;
  • OpenRouter — the language-model gateway powering the AI assistant; receives the text of your conversation and of any attached specification. Processing takes place outside the Russian Federation (United States);
  • Telegram Messenger — used to alert the controller to a new enquiry; receives your name, contact and a short summary. Processing takes place outside the Russian Federation;
  • the hosting provider supplying the server that runs the site and the enquiry database.

Note that the assistant and the Telegram alert involve cross-border transfer of personal data. If you would rather your data not leave the Russian Federation, use the contact form instead of the chat and state in your message that you prefer to be contacted by email.

Otherwise, data is disclosed to third parties only on lawful demand from competent state authorities.

5. Retention and deletion

Enquiries are kept until the purpose of processing is met, and in any case no longer than three years from the last interaction with you, after which they are deleted. Enquiries marked as spam are deleted within 30 days.

Yandex Metrica cookies are kept for the periods that service defines; you can delete them in your browser at any time.

You may request deletion of your data at any time by writing to aa@kibin.pro. Data is deleted within ten working days of the request, and you receive confirmation.

6. Your rights

Under art. 14 of 152-FZ you have the right to:

  • obtain information about the processing of your personal data, including the categories of data, the purposes and the retention period;
  • require correction, blocking or destruction of data that is incomplete, outdated, inaccurate or unlawfully obtained;
  • withdraw your consent to processing;
  • complain to Roskomnadzor or bring court proceedings.

To exercise any of these, write to aa@kibin.pro stating what you need. A reply follows within the statutory period.

7. Cookies

The site uses cookies and similar browser storage:

  • technical — remembering that the cookie notice has been shown and your interface preferences, such as reduced motion. This data stays in your browser and is not sent to the controller;
  • analytics — Yandex Metrica cookies, required for visit counting and Webvisor.

You can block or delete cookies in your browser settings, or use Yandex Metrica’s official opt-out. The site keeps working with cookies disabled; some interface preferences simply won’t persist between visits.

8. Safeguards

Reasonable and sufficient measures are taken to protect personal data:

  • traffic between your browser and the site is protected with TLS;
  • IP addresses are stored only as an irreversible hash;
  • access to the enquiry database is restricted and password-protected; the admin interface is unavailable without authentication;
  • secret keys and tokens are stored outside publicly served directories and outside the source repository.

10. For visitors in the EEA (GDPR)

If you are in the European Economic Area, the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) is Индивидуальный предприниматель Кибин Александр Александрович, contactable at aa@kibin.pro.

Legal bases: your consent (art. 6(1)(a) GDPR) for analytics and for processing your conversation with the assistant; necessity for entering into and performing a contract (art. 6(1)(b) GDPR) for handling your enquiry; legitimate interest (art. 6(1)(f) GDPR) for protecting the site against automated abuse.

You have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Your data is processed and stored outside the European Economic Area — in the Russian Federation and, for the assistant and alerting, in the United States. There is no European Commission adequacy decision in respect of the Russian Federation; by submitting data through this site you accept that transfer. If that is not acceptable to you, contact the controller by email directly rather than through the site’s forms.

You have the right to lodge a complaint with the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.

11. Changes to this policy

This policy may be amended. The current version is always available at kibin.pro/en/privacy/, and the date of the latest revision is shown at the top. Material changes take effect on publication.