stasGeneral
This Policy sets out how personal data of visitors to stasweb.com (the "Website") is processed and protected. The operator is based in Russia, and the Policy is prepared in line with Russian Federal Law No. 152-FZ "On Personal Data".
The Policy applies to data you submit through the Website forms and the AI assistant, as well as to technical information generated automatically when you visit the Website.
The operator does not aim to process special categories of personal data, criminal records or biometric data. Please do not include such information in free-text fields or in the AI assistant conversation.
The Russian version of this Policy is available at stasweb.com/privacy-policy.html.
Operator
Data we process
Data you provide
- your name or how you'd like to be addressed;
- email address, phone number;
- a username or link to your profile in a messenger or social network;
- information about your business, project, budget, timeline and required features;
- links to existing websites, examples and other materials;
- the text of your request, comments and AI assistant conversation.
Technical data
- IP address, date and time of the request;
- browser type, operating system, device and screen information;
- visited page, referrer and actions on the Website;
- cookies and similar identifiers;
- technical logs of forms, the AI assistant and anti-abuse tools.
Purposes and legal grounds
| Purpose | Data | Ground |
|---|---|---|
| Replying to your request and discussing the project | Name, contacts, request content | Your consent; steps taken at your request before a contract |
| Preparing an estimate, proposal or contract | Contacts and project details | Steps before and performance of a contract |
| Running the AI assistant | Conversation text, technical session context | Your consent and the feature you requested |
| Security and abuse prevention | IP address, request logs, technical identifiers | Legitimate interests of the operator, respecting your rights |
| Analytics and improving the Website | Cookies, device, referrer and on-page actions | Consent to optional cookies and analytics |
Your contact details are not used for marketing emails without separate consent. Sending a request does not by itself mean consent to receive advertising.
Processing and retention
Processing may include collection, recording, organization, storage, updating, retrieval, use, transfer to authorized processors, anonymization, blocking, deletion and destruction of data — automatically and, where needed to handle a request, manually.
- request and correspondence data is kept until the conversation ends and then for no more than three years to resolve possible questions and confirm agreements, unless the law or a contract requires otherwise;
- data related to a contract is kept for the periods required by applicable law;
- security logs are kept no longer than needed to detect errors and abuse;
- analytics data is kept within the settings of the respective service and the stated purposes.
Once the purpose is achieved, the period expires or consent is validly withdrawn, data is deleted or anonymized unless another legal ground for keeping it exists.
Services and third parties
Some operations may be entrusted to hosting, email, analytics and API providers. They receive only the information needed for their function and must keep it confidential and secure.
Hosting the Website, storing technical files, delivering request notifications.
Yandex Metrica, counter No. 111422453: visit statistics, click map and Session Replay (Webvisor).
Generating AI assistant replies based on the conversation text. Name and contacts from the request form are not sent to the AI API.
Text you type into the AI assistant conversation may be processed by the AI API provider. Please don't enter passport, payment, medical or other sensitive information in the conversation.
Data may also be disclosed to public authorities where and as expressly required by law.
Your rights
You have the right to:
- get information about how your personal data is processed;
- request correction, blocking or deletion of incomplete, outdated, inaccurate or unlawfully processed data;
- withdraw your consent to processing;
- object to processing where provided by law;
- file a complaint with the competent data protection authority or a court.
A request must allow us to identify you and the data concerned. The operator may ask for information needed to confirm your identity and prevent access by third parties.
Data protection
The operator takes the necessary legal, organizational and technical measures: restricts access, uses HTTPS, protects forms and the admin area, monitors event logs, updates software and makes backups as needed.
No transmission over the internet can be fully protected against all threats. If an incident is detected, the operator acts to limit its consequences and fulfils the obligations set by law.
Requests and changes
To request, correct or withdraw consent, email zakaz@stasweb.com with the subject "Personal data". Tell us how to reach you and which request it relates to.
The operator may update this Policy when the Website, the services used or legal requirements change. The current version is always available at:
stasweb.com/en/privacy/