Personal Data Processing Policy

Document 2. Personal Data Processing Policy

This Policy defines the procedure for processing and protecting personal data of users of the "Levsha" service, provided by individual entrepreneur Kulishova Rusiyana Sergeevna (INN 236100333979) (hereinafter — the "Operator").

1. What Data We Collect

To ensure the operation of the Service, the Operator collects the following data:

• Identification data: email address, username, social network profile identifiers (when authorizing via OAuth).
• User content: text prompts, uploaded images (including face photographs for the character consistency feature), audio files, and generated materials.
• Technical data: IP address, device and browser information (User Agent), cookies, transaction history, and "Credits" usage history.

Financial data (bank card numbers) is not collected or stored by the Operator and is processed exclusively on the side of partner payment systems.

2. Purposes of Data Processing

• Creation and administration of the User's account.
• Fulfilling obligations under the Terms of Service (providing access to AI generation tools).
• Processing payments and maintaining internal billing ("Credits").
• Improving the quality of the Service and analyzing user experience.
• Sending transactional and marketing notifications (subject to the User's consent).

3. Transfer of Data to Third Parties

To ensure content generation, the prompts and references uploaded by the User may be transmitted via secure APIs to third-party providers of neural network computing resources. The transfer is carried out solely to the extent necessary to fulfill a specific User request.

4. Storage and Security

Databases containing personal data of citizens of the Russian Federation are located on the territory of the Russian Federation. The Operator takes the necessary technical and organizational measures to protect data from unauthorized access.

5. User Rights

The User has the right at any time to request information about their processed data, demand its clarification, blocking, or deletion, by submitting an appropriate request to the Service's support team.

This is an unofficial English translation provided for convenience only. The legally binding version of this Policy is the original Russian text, available at /legal/privacy.html. In the event of any discrepancy between the Russian and English versions, the Russian version prevails. This Policy is governed by the laws of the Russian Federation, including Federal Law No. 152-FZ "On Personal Data".