policy
Privacy Policy
Edition of 10 October 2026
In short: we collect the minimum, keep it isolated, never sell it and never train on your data models that other customers use. Details below, including your rights under the Russian Law «On Personal Data» and the GDPR.
Who processes your data
The personal-data operator is ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ «АУКОР ТЕХНОЛОГИИ» (INN 0500056308, OGRN 1260500009879), address: 367901, Республика Дагестан, г. Махачкала, пгт. Ленинкент, ул. Совхозная, зд. 6. We process data under the Russian Federal Law «On Personal Data» (152-FZ). Full details are at the bottom of this page.
What we collect
- Account
- name, email, phone, username, profile photo
- Knowledge base
- files and links you have uploaded to the employee
- Conversations
- the employee's conversations with customers in every channel, your messages to employees and to the in-app helper
- Support requests
- the text, attachments, and the page and device you wrote from
- Technical data
- IP, device and browser type, request times, error reports
- Actions in the cabinet
- a recording of what was on screen during guided tips, before an error and when you contact support — details below
- Visit statistics
- if Yandex Metrica is enabled on the site: pages, navigation, clicks, scrolling — details below
- Payments
- date, amount and plan; we never receive or store card details — the bank processes them
Why
- So the employee answers from your materials and remembers the context of a conversation.
- So we can show you results: how many leads, how many payments, where a customer was lost.
- To find failures — the action log is fully available to you.
- To see where the cabinet is hard to use and fix errors: for that we watch action recordings and visit statistics.
- To issue invoices and meet tax law requirements.
Legal basis
- Your consent to personal-data processing. It is a separate document: you give it in the cabinet, separately from accepting the terms. Consent text
- Our contract with you — the Terms of use: we cannot provide the service without account data. Terms of use
- Legal requirements — for example, tax and accounting.
What we do not do
We do not sell or pass your data to third parties for marketing. We do not train models available to other customers on your knowledge base. We do not read your conversations by hand — except when you ask us to look into a problem. The exception is your conversations with the in-app helper: our support staff see them, to answer questions and fix errors.
Recording actions in the cabinet
When you go through guided tips («First steps», section tours), when an error happens in the cabinet and when you write to support, we keep a recording of what was on screen: cursor movement, clicks, scrolling and page changes. It is not video or screenshots — the page is rebuilt from its markup.
- What you type into fields is not recorded — only the number of characters is visible. Passwords are never recorded.
- On pages with your customers' data — inbox, contacts, conversations, logs — all text is hidden in the recording.
- Recordings are kept for 30 days, ones marked as a bug for up to 90 days. They are deleted with the account.
- Recordings stay on our servers and are not passed to third-party services. Only platform administrators watch them — to fix errors and improve the tips.
Yandex Metrica and cookies
We use technical cookies and browser storage: to keep you signed in and to let the cabinet remember your workspace and your progress through the tips. The site does not work without them.
The site may use the Yandex Metrica statistics service, including Webvisor. It collects anonymised visit data — pages, navigation, clicks, scrolling, device and browser type, IP — using cookies, and passes it to YANDEX LLC, which processes it on our behalf. Fields you type data into are hidden in Webvisor. We use this data only for statistics and to improve the site. You can block collection in your browser settings or with the Yandex Metrica opt-out: Yandex Metrica opt-out
Google user data
Connecting a Google account is optional. If you connect one, we request only the Google API permissions an employee needs in order to work, and only the ones you granted.
- Google Calendar — check availability and create or change events when an employee books you a meeting.
- Gmail — read the threads you handed to an employee, draft replies, and send the ones you approved.
- Drive, Docs, Sheets and Forms — read files added to the knowledge base and write back documents the employee produced.
- Contacts and Tasks — identify the person an employee is talking to and create tasks off the back of a conversation.
Google access tokens and connection settings are stored encrypted. Google user data is used only for the action you connected the service for, and is passed to nobody else.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google API Services User Data Policy
You can disconnect Google at any time in the dashboard, which revokes the stored token. Access can also be revoked on Google's side: Google account permissions page
Where it is stored
Passwords, tokens and access keys for connected services are stored encrypted. Each account's knowledge base is isolated: one company's employee cannot reach another company's material.
The server and the main database are in Russia (hosting: just-host.ru). Uploaded files are kept in Yandex Object Storage — Yandex Cloud, Russia.
Requests to language models go to model providers; the list, and which of them your plan includes, is in the employee's settings. Some providers are outside Russia, so such requests are a cross-border transfer of data. We send only what is needed for the answer.
Who we pass data to
Only those the service cannot work without, and only what their part of the work needs:
- Hosting and storage: just-host.ru (server and database, Russia), Yandex Cloud (files, Russia). Email, the error log and file storage run on our own server.
- Language-model providers: OpenAI, Anthropic, OpenRouter and Cerebras (USA); through OpenRouter — DeepSeek, Qwen, GLM and Kimi models (China), Gemini (Google) and Grok (xAI). They receive the request needed for the answer — a cross-border transfer. Requests to them may pass through proxy servers outside Russia.
- The Steel cloud browser (USA) — when the employee works on websites in a browser on your behalf.
- Daytona cloud sandboxes (USA) — when the employee runs a program or builds a file on your behalf: the data and files needed for it go there. This is a cross-border transfer.
- Sign-ins to websites that you save yourself for the employee's browser work are kept by us encrypted and are passed only to the cloud browser while it signs in to that site. You can delete them at any time with «Sign out everywhere».
- Sign-in services, if you sign in with them: Yandex ID, VK ID, Mail.ru.
- Messengers and services you connect yourself: Telegram, WhatsApp, MAX, Google, Yandex (Disk, Mail), Mail.ru, Instagram, Facebook, CRMs. The messages and data you asked the employee to send or read pass through them.
- YANDEX LLC — if Yandex Metrica is enabled on the site.
- The acquiring bank, T-Bank JSC — to take payments.
Security
We apply reasonable technical and organisational safeguards. That said, no method of transmission over the internet and no storage system is absolutely secure, and promising otherwise would not be honest.
How long we keep it
- Conversations
- until you delete them
- Knowledge base
- until you delete it
- Conversations with the in-app helper
- 90 days after the last message
- Action recordings
- 30 days, ones marked as a bug up to 90 days
- Action log
- 7 days
- After the account is deleted
- 30 days, then permanently
Your rights
Under the Law «On Personal Data» you have the right to know which of your data we process and why, and to control it. If you are in the European Economic Area, you also have rights under the GDPR — we honour them for everyone.
- Access
- learn which of your data we process and get a copy
- Correction
- have inaccurate or incomplete data corrected
- Deletion
- have your personal data and account deleted
- Withdrawing consent
- withdraw your consent to processing; we then stop processing and delete the data, and the cabinet can no longer be used
- Complaint
- challenge our actions with Roskomnadzor (the Russian data-protection authority) or in court
Send requests to info@anyworker.ai with the subject «Data Deletion Request». We answer within 10 working days; if we need longer, we will tell you why and extend by no more than 5 working days. You can also download a copy of your data yourself: Settings → Account → «Download my data» (once a day; the link works for 7 days). «Delete account» is in the same place.
How to reach us
- info@anyworker.ai
- Legal entity
- ООО «АУКОР ТЕХНОЛОГИИ»
- INN (tax number)
- 0500056308
- OGRN (registration number)
- 1260500009879
- Address
- 367901, Республика Дагестан, г. Махачкала, пгт. Ленинкент, ул. Совхозная, зд. 6