Personal Data Processing Policy

Version of October 21, 2026

This is an English translation provided for convenience. The legally binding version is the Russian original; in case of any discrepancy the Russian version prevails.

1. Operator

The personal data operator is Sviatoslav Lvovich Gavrilov, TIN 732900158313 (the “Operator”). Contact for personal data matters: chilovegsaundtreg@gmail.com. This Policy applies to all data the Operator receives through the website https://ai-bookreader.com.

2. Data processed

• email address;
• password — only as an irreversible hash;
• technical data: IP address, browser information, session cookies required to sign in;
• payment information: amount, date, status. Bank card details are processed by the payment service; the Operator does not receive them;
• uploaded texts and resulting audio files — to the extent they contain personal data.

3. Purposes of processing

• registration and sign-in, provision of the narration service;
• accepting payments, keeping the balance, issuing receipts;
• sending service emails: email confirmation, password reset, notifications about finished and deleted books;
• replying to requests and preventing abuse.

Service news and special offers are sent only with a separate consent to the newsletter (checkbox at registration). The consent can be withdrawn at any time in the “Newsletter” section of the account or via the link in the email.

4. Legal grounds

Performance of the agreement (public offer) to which the user is a party, and the user’s consent given at registration (Article 6 of Russian Federal Law No. 152-FZ “On Personal Data”). For users in the EU/EEA and the UK: Art. 6(1)(b) and (a) GDPR.

5. Transfer to third parties

Data is transferred only to the extent necessary to provide the service:

• Robokassa (Robokassa LLC) — payment processing and receipts (Russia);
• Google — speech synthesis: only the text of fragments to be narrated is transmitted;
• Cloudflare — storage of uploaded texts and audio files;
• Resend — delivery of service emails (email address and message text).

Account data (email, password hash, sessions) is primarily recorded and stored in a database on a server in the Russian Federation. A backup copy of this data is stored on the Operator’s server outside Russia. Some of the services listed are also located outside Russia, so cross-border data transfer may take place. By registering, the user consents to it.

6. Cookies

The website uses only necessary cookies: the session cookie for signing in and a record of your choice in the cookie banner (stored in the browser). Sign-in does not work without them. The website currently sets no third-party analytics or advertising cookies. Should they appear, for visitors from the EU, the UK, Switzerland and the USA they are enabled only after consent in the banner, for others — with notice in the banner. You can delete cookies in your browser settings; you will then need to sign in again.

7. Retention periods

• account data — until the account is deleted;
• uploaded texts and audio — 30 days from the last action with the book or until the end of a paid storage extension;
• payment information — for the periods required by tax law.

8. User rights

The user may obtain information about the processing of their data, request its correction or deletion and withdraw consent by sending a request to chilovegsaundtreg@gmail.com. We reply within 10 business days. Withdrawal of consent may make further provision of the service impossible.

9. Data protection

The connection to the website is encrypted (HTTPS), passwords are stored as hashes, access keys to external services are stored encrypted, and access to the servers is restricted.