Privacy Policy

Version of September 19, 2026

The short version

We collect only what we need to answer your request, plus anonymous visit statistics.
The website and the server that receives requests are located in Russia (Moscow).
We never sell your data, use it for ads or send spam.
Chat messages are processed by Google's AI service — so please don't share passport details, passwords or card numbers there.
You can have your data deleted with a single message — see section 12.

At the time of publication the operator acts as a private individual, without a registered company. Once a company is registered, its details will be added here and the version date updated. The Russian version of this policy prevails in case of any discrepancy.

1. General

1.1. This policy explains how personal data of visitors to devunit-lab.ru and its subdomains (the "Website") is processed: what is collected, why, where it is stored, who receives it and how to stop it.

1.2. It is prepared under Russian Federal Law No. 152-FZ "On Personal Data" of 27.07.2006.

1.3. By ticking the box in the request form or sending a message in the chat, you consent to the processing of the data you provide, on the terms described below.

2. Definitions

Operator — the person who organises personal data processing on the Website (contacts in section 12).
User — any visitor to the Website.
Personal data — any information relating directly or indirectly to a user.
Processing — any action with data: collection, recording, storage, use, transfer, deletion, etc.
Cross-border transfer — transfer of data to the territory of a foreign country.

3. What data we process and why

Source	Data	Purpose
Request form (brief)	Name, contact (Telegram and/or phone), industry, budget, urgency, current infrastructure, task description	Contact you, analyse the task, prepare a proposal on timing and cost
AI consultant chat	Message text and anything you include in it (e.g. name and contact); technical data: browser type, screen size, language	Answer your question, hand the conversation to an engineer, prepare a proposal
Automatically, via Yandex Metrica	IP address, cookies, browser ID, device and OS, screen resolution, referrer, pages visited, visit time, clicks, scrolling and cursor movement (Webvisor)	Traffic statistics, finding usability issues, measuring advertising
Automatically, on our server	IP address, request time, page address, browser type (server logs); count of chat messages per IP	Protection against attacks, spam and automated scraping; troubleshooting

3.1. We do not collect special categories of data (health, beliefs, ethnicity, etc.) or biometrics. Please don't enter passport details, passwords or card numbers — they are not needed for a request.

3.2. The Website is not intended for persons under 18. If you learn that a child has left their data with us, let us know and we will delete it.

4. Legal grounds

your consent (Art. 6(1)(1) of 152-FZ) — for form and chat data, and for analytics;
steps taken at your request before entering into a contract (Art. 6(1)(5)) — preparing a proposal;
the operator's legitimate interest in protecting the Website (Art. 6(1)(7)) — server logs and spam protection.

5. What we do with data

5.1. Collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), blocking, deletion and destruction — both automated and manual.

5.2. The AI consultant replies automatically but makes no decisions with legal effect for you (Art. 16 of 152-FZ): price, timing and terms are always agreed by a human.

6. Where and how long we store data

6.1. The Website and the server receiving requests and chat messages are hosted in a data centre in Moscow. Data of users from Russia is first recorded in Russia (Art. 18(5) of 152-FZ).

Data	Period
Requests and related correspondence	While the discussion and project are ongoing, then no longer than 3 years after the last contact — or until consent is withdrawn
Chat history on our server	In memory only, never written to disk, erased when the service restarts
Chat block for spam or abuse	Up to 1 hour, in memory only
Chat message counter (per session and IP)	One day, then reset
Server logs	Size-limited and overwritten automatically
Yandex Metrica data	Under Yandex rules — Yandex privacy policy

6.2. After the period expires or consent is withdrawn, data is deleted within 30 days unless the law requires longer storage.

7. Who we share data with

Data is never sold or shared for advertising. To run the Website it is shared, to the extent necessary, with:

Recipient	What	Why	Where
Yandex LLC (Yandex Metrica)	Visit data	Web analytics	Russia
Google LLC (Gemini API)	Chat message text and current conversation history	Generate the AI consultant's reply	USA — cross-border
Telegram (Telegram FZ-LLC)	Requests and chat conversations	Deliver them to the operator and reply to you	UAE and other countries — cross-border
Hosting provider	Everything stored on the server	Hosting the Website	Russia

7.1. Cross-border transfer is limited to what the purpose requires and is based on your consent. If you don't want your text to reach Google, don't use the chat — message us on Telegram or use the request form.

7.2. Data may be disclosed to public authorities only in cases and in the manner expressly provided by law.

8. Cookies and browser storage

8.1. The Website stores only what it needs in your browser:

your chosen theme (light or dark) and language;
the ID of the current chat conversation — until the tab is closed;
the chat window size and a flag that you've seen the cookie notice.

8.2. Yandex Metrica sets its own cookies for statistics. You can disable them in your browser settings or install the Metrica opt-out add-on — the Website will keep working.

9. How we protect data

all traffic goes over HTTPS with modern encryption;
only the operator has administrative access to the server;
each site and service runs in its own container and network — a failure or breach of one does not expose another's data;
service access keys are stored separately from code and never committed to repositories;
only the operator can access requests;
we collect the minimum — we don't store anything we don't need.

9.1. In the event of a data breach, we will notify Roskomnadzor within the time limits set by Art. 21(3.1) of 152-FZ and inform affected users.

10. Your rights

At any time you may:

find out what data we hold about you, where it came from and why (Art. 14 of 152-FZ);
ask us to correct, block or delete it;
withdraw your consent;
complain to Roskomnadzor (rkn.gov.ru) or to a court.

10.1. How: write to any contact in section 12 and tell us how to identify you (for example, the contact from your request). We reply within 10 working days and delete data within 30 days of consent withdrawal.

11. Other terms

11.1. The Website links to other resources (Telegram, project demos). Their data rules are set by their owners.

11.2. The operator may update this policy. The current version is always available at this address, with the version date shown at the top.

12. Operator contacts

Telegram: @tosha_DevUnit
Email: heitorgto1@gmail.com

Политика (русская версия) Back to home