Privacy Policy

1. Data Controller

The data controller is Gorbunova Polina Vladimirovna, educational platform ExplainLLM (website explainllm.ru). Registration number in the Roskomnadzor personal data operators registry: 63-26-060038. Contact email: support@explainllm.ru. This Policy defines the procedures for processing and protecting personal data of users in accordance with Russian Federal Law No. 152-FZ "On Personal Data" and GDPR.

2. Information We Collect

When using the platform, we may collect the following data:

• Email address (upon registration or newsletter subscription)
• Learning progress: completed lessons, quiz results and challenge scores
• Usage data: pages visited, time spent, interactions with visualizations
• Device information: browser type, operating system, screen resolution
• Payment data: transaction information is processed by the payment provider (YooKassa); we do not store bank card details
• Preferences: language, theme, depth level

3. Purposes of Data Processing

We process personal data for the following purposes:

• Providing access to the educational platform and user account
• Saving and syncing learning progress across devices
• Processing payments for premium features (AI attempts)
• Sending informational newsletters (with your consent)
• Improving the service based on anonymized analytics

4. Legal Basis for Processing

Personal data processing is carried out based on: consent of the data subject (Art. 6, Part 1, Clause 1 of 152-FZ), performance of a contract for platform services (Art. 6, Part 1, Clause 5 of 152-FZ). Consent is given during registration by checking the corresponding checkbox.

5. Data Storage

Personal data is stored and processed on servers located in the Russian Federation, in accordance with Art. 18, Part 5 of 152-FZ. The frontend part of the website is hosted on Vercel servers and does not contain personal data.

6. Local Storage

Some data is stored locally in your browser (localStorage) and is not transmitted to our servers. This includes: API keys for the playground, interface settings, learning progress cache. You can clear this data at any time through your browser settings.

7. Cookies and Analytics

We use session cookies for authentication. Basic anonymous analytics (page views, device type) is collected without cookies. With your consent, we enable analytics via PostHog and Yandex Metrica. You can manage your preferences using the cookie consent banner.

8. Payments

Subscription payment is made via SBP (Fast Payment System) bank transfer. We DO NOT store or process bank card data. When we transition to an automated payment system, a certified payment aggregator will be used.

9. Data Sharing with Third Parties

We share data with the following services to ensure platform operation:

• Resend: sending email notifications (email address is shared). US servers, transfer based on your consent
• PostHog: analytics (anonymized data). EU servers
• Yandex Metrica: web analytics (anonymized data). Russia servers
• Vercel: frontend hosting (no personal data is shared)
• Anthropic/OpenAI/OpenRouter: LLM APIs (only when you use the playground with your own API keys)

10. Your Rights

Under 152-FZ and GDPR, you have the right to:

• Obtain information about the processing of your personal data
• Request access to, correction or deletion of your data
• Withdraw consent for personal data processing
• Delete your account and all associated data
• Unsubscribe from informational newsletters

11. Data Retention

Personal data is stored until the user deletes their account. Newsletter subscription data is stored until unsubscription. Payment data is retained in accordance with tax legislation requirements. Upon withdrawal of consent, data is deleted within 30 days.

12. Data Security

We implement necessary measures to protect personal data: data encryption in transit (HTTPS/TLS), database access control (RLS policies), server access control (SSH key authentication, firewall), regular backups. Playground API keys are stored only in your browser.

13. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children.

14. Changes to Privacy Policy

We may update this Privacy Policy. We will notify you of significant changes by posting a notice on the platform. By continuing to use the service after changes, you accept the updated Policy.

15. Contact Us

For questions about personal data processing: support@explainllm.ru. You also have the right to contact the Russian Federal Service for Supervision of Communications (Roskomnadzor, https://rkn.gov.ru) if your rights are violated.