policy

Privacy Policy

Edition of 10 October 2026

In short: we collect the minimum, keep it isolated, never sell it and never train on your data models that other customers use. Details below, including your rights under the Russian Law «On Personal Data» and the GDPR.

Who processes your data

The personal-data operator is ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ «АУКОР ТЕХНОЛОГИИ» (INN 0500056308, OGRN 1260500009879), address: 367901, Республика Дагестан, г. Махачкала, пгт. Ленинкент, ул. Совхозная, зд. 6. We process data under the Russian Federal Law «On Personal Data» (152-FZ). Full details are at the bottom of this page.

What we collect

Account
name, email, phone, username, profile photo
Knowledge base
files and links you have uploaded to the employee
Conversations
the employee's conversations with customers in every channel, your messages to employees and to the in-app helper
Support requests
the text, attachments, and the page and device you wrote from
Technical data
IP, device and browser type, request times, error reports
Actions in the cabinet
a recording of what was on screen during guided tips, before an error and when you contact support — details below
Visit statistics
if Yandex Metrica is enabled on the site: pages, navigation, clicks, scrolling — details below
Payments
date, amount and plan; we never receive or store card details — the bank processes them

Why

  • So the employee answers from your materials and remembers the context of a conversation.
  • So we can show you results: how many leads, how many payments, where a customer was lost.
  • To find failures — the action log is fully available to you.
  • To see where the cabinet is hard to use and fix errors: for that we watch action recordings and visit statistics.
  • To issue invoices and meet tax law requirements.

Legal basis

  • Your consent to personal-data processing. It is a separate document: you give it in the cabinet, separately from accepting the terms. Consent text
  • Our contract with you — the Terms of use: we cannot provide the service without account data. Terms of use
  • Legal requirements — for example, tax and accounting.

What we do not do

We do not sell or pass your data to third parties for marketing. We do not train models available to other customers on your knowledge base. We do not read your conversations by hand — except when you ask us to look into a problem. The exception is your conversations with the in-app helper: our support staff see them, to answer questions and fix errors.

Recording actions in the cabinet

When you go through guided tips («First steps», section tours), when an error happens in the cabinet and when you write to support, we keep a recording of what was on screen: cursor movement, clicks, scrolling and page changes. It is not video or screenshots — the page is rebuilt from its markup.

  • What you type into fields is not recorded — only the number of characters is visible. Passwords are never recorded.
  • On pages with your customers' data — inbox, contacts, conversations, logs — all text is hidden in the recording.
  • Recordings are kept for 30 days, ones marked as a bug for up to 90 days. They are deleted with the account.
  • Recordings stay on our servers and are not passed to third-party services. Only platform administrators watch them — to fix errors and improve the tips.

Yandex Metrica and cookies

We use technical cookies and browser storage: to keep you signed in and to let the cabinet remember your workspace and your progress through the tips. The site does not work without them.

The site may use the Yandex Metrica statistics service, including Webvisor. It collects anonymised visit data — pages, navigation, clicks, scrolling, device and browser type, IP — using cookies, and passes it to YANDEX LLC, which processes it on our behalf. Fields you type data into are hidden in Webvisor. We use this data only for statistics and to improve the site. You can block collection in your browser settings or with the Yandex Metrica opt-out: Yandex Metrica opt-out

Google user data

Connecting a Google account is optional. If you connect one, we request only the Google API permissions an employee needs in order to work, and only the ones you granted.

  • Google Calendar — check availability and create or change events when an employee books you a meeting.
  • Gmail — read the threads you handed to an employee, draft replies, and send the ones you approved.
  • Drive, Docs, Sheets and Forms — read files added to the knowledge base and write back documents the employee produced.
  • Contacts and Tasks — identify the person an employee is talking to and create tasks off the back of a conversation.

Google access tokens and connection settings are stored encrypted. Google user data is used only for the action you connected the service for, and is passed to nobody else.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google API Services User Data Policy

You can disconnect Google at any time in the dashboard, which revokes the stored token. Access can also be revoked on Google's side: Google account permissions page

Where it is stored

Passwords, tokens and access keys for connected services are stored encrypted. Each account's knowledge base is isolated: one company's employee cannot reach another company's material.

The server and the main database are in Russia (hosting: just-host.ru). Uploaded files are kept in Yandex Object Storage — Yandex Cloud, Russia.

Requests to language models go to model providers; the list, and which of them your plan includes, is in the employee's settings. Some providers are outside Russia, so such requests are a cross-border transfer of data. We send only what is needed for the answer.

Who we pass data to

Only those the service cannot work without, and only what their part of the work needs:

  • Hosting and storage: just-host.ru (server and database, Russia), Yandex Cloud (files, Russia). Email, the error log and file storage run on our own server.
  • Language-model providers: OpenAI, Anthropic, OpenRouter and Cerebras (USA); through OpenRouter — DeepSeek, Qwen, GLM and Kimi models (China), Gemini (Google) and Grok (xAI). They receive the request needed for the answer — a cross-border transfer. Requests to them may pass through proxy servers outside Russia.
  • The Steel cloud browser (USA) — when the employee works on websites in a browser on your behalf.
  • Daytona cloud sandboxes (USA) — when the employee runs a program or builds a file on your behalf: the data and files needed for it go there. This is a cross-border transfer.
  • Sign-ins to websites that you save yourself for the employee's browser work are kept by us encrypted and are passed only to the cloud browser while it signs in to that site. You can delete them at any time with «Sign out everywhere».
  • Sign-in services, if you sign in with them: Yandex ID, VK ID, Mail.ru.
  • Messengers and services you connect yourself: Telegram, WhatsApp, MAX, Google, Yandex (Disk, Mail), Mail.ru, Instagram, Facebook, CRMs. The messages and data you asked the employee to send or read pass through them.
  • YANDEX LLC — if Yandex Metrica is enabled on the site.
  • The acquiring bank, T-Bank JSC — to take payments.

Security

We apply reasonable technical and organisational safeguards. That said, no method of transmission over the internet and no storage system is absolutely secure, and promising otherwise would not be honest.

How long we keep it

Conversations
until you delete them
Knowledge base
until you delete it
Conversations with the in-app helper
90 days after the last message
Action recordings
30 days, ones marked as a bug up to 90 days
Action log
7 days
After the account is deleted
30 days, then permanently

Your rights

Under the Law «On Personal Data» you have the right to know which of your data we process and why, and to control it. If you are in the European Economic Area, you also have rights under the GDPR — we honour them for everyone.

Access
learn which of your data we process and get a copy
Correction
have inaccurate or incomplete data corrected
Deletion
have your personal data and account deleted
Withdrawing consent
withdraw your consent to processing; we then stop processing and delete the data, and the cabinet can no longer be used
Complaint
challenge our actions with Roskomnadzor (the Russian data-protection authority) or in court

Send requests to info@anyworker.ai with the subject «Data Deletion Request». We answer within 10 working days; if we need longer, we will tell you why and extend by no more than 5 working days. You can also download a copy of your data yourself: Settings → Account → «Download my data» (once a day; the link works for 7 days). «Delete account» is in the same place.

How to reach us

Email
info@anyworker.ai
Legal entity
ООО «АУКОР ТЕХНОЛОГИИ»
INN (tax number)
0500056308
OGRN (registration number)
1260500009879
Address
367901, Республика Дагестан, г. Махачкала, пгт. Ленинкент, ул. Совхозная, зд. 6
Still have questions?info@anyworker.ai