Personal data policy

Service provider and personal data controller: individual entrepreneur Alexander Vladimirovich Sheremet, INN 380122798724, OGRNIP 326385000085292. Address: 664009, Russia, Irkutsk Region, Irkutsk, Kultukskaya Street, 16, apartment 185. Legal enquiries: semax.semax@yandex.ru. Support: support@claudexia.tech.

Account management, authentication, API access, support, security, billing and statutory obligations require user data processing. Data depends on the chosen feature: account identifier, contact email, sign-in details, IP address and technical events, model usage, payments and enquiries. Do not send passwords or keys in support messages.

Necessary processing supports contract formation and performance, statutory duties and legitimate interests subject to user rights. When consent is required, it is requested separately, specifically and without preselected controls. Advertising and optional analytics are not conditions for core service access.

Infrastructure outside Russia is used, including a server in Germany according to the owner. Requests may be processed by third-party API suppliers. The complete chain of legal entities, processing territories, each recipient’s retention practices and controller notification procedures require verification. This document does not certify Russian data localisation and does not replace cross-border transfer requirements.

Standard API use is not designed for third-party personal data, sensitive categories, biometrics or confidential secrets. De-identify content before sending. A contractual prohibition does not eliminate actual account and network metadata processing. There is no blanket promise that third-party suppliers never retain data or use it for training; each route’s practices require verification.

Data is retained for its purpose and mandatory statutory periods. Actual log, backup and supplier deletion periods have not yet been verified; automatic deletion within a fixed period is not promised. Access and protection measures apply, without an absolute security guarantee. On an incident, the provider follows statutory notification and mitigation duties.

Users may request processing information, correction, blocking or deletion where legally applicable, withdraw optional consent and contact the controller, Roskomnadzor or a court. Account deletion does not erase records that must be retained by law or to resolve a dispute.

Identify your account, contact method and request when contacting us. Never send a password, API key, CVV/CVC or full card number. Identity checks must be proportionate to the request. Withdrawing optional consent does not stop processing required to perform the contract, settle payments or meet statutory obligations.