Privacy Policy
Last updated: 22 October 2026
1. General
1.1. This Policy (the “Policy”) describes how Evgeny Aleksandrovich Dubrovin (the “Operator”), acting as a sole proprietor, processes personal data and the measures taken to protect it.
1.2. The Policy applies to all information the Operator may obtain about visitors and users of the AIsup service at https://aisup.pro and https://app.aisup.pro (the “Site” / “Service”), including cabinet registration, plan payments, connecting third-party services (including Google), and support requests.
2. Personal data processed by the Operator
2.1. We collect only the data needed to contact you, provide the Service and support:
name / display name;
email address;
phone number (optional);
account and plan data;
sign-in data via third-party services (if used), including Google account identifier and email when you sign in with Google;
site and access data you provide for the AI agent (URL, admin, FTP/SSH and related details — as needed to perform the contract);
Google Search Console and Google Analytics data that you explicitly authorize when connecting those services in the cabinet (see section 5);
agent chat, support tickets and uploaded files.
2.2. The Site may collect anonymized data (cookies) for Service features, analytics (for example, Yandex Metrica) and the cookie-consent banner.
3. Purposes of processing
3.1. Data is processed in order to:
register and maintain the user cabinet;
place, pay for and perform the selected plan;
run the AI agent and related Service features;
display Search Console / Analytics metrics in the cabinet and use them as site knowledge for the agent (only when you connect those services);
send service notices about the account, plan and tasks;
respond to requests via forms, tickets and on-site chat.
4. Data protection mechanisms (including for sensitive data)
4.1. Processing is based on the user’s separate consent to personal data processing (https://app.aisup.pro/consent), given by a separate tick when signing up, placing an order or paying, sending the support form, or on the consent screen after the first sign-in with Yandex ID, VK ID or Google; on the need to perform the contract (Public offer) for access to the Service; and on Russian legal requirements. Consent to receive AIsup news and offers is separate and optional (https://app.aisup.pro/consent-marketing). Boxes are never pre-ticked; the fact, date, version and text of each consent are recorded.
4.2. Data in transit between your browser/client and the Service is protected with TLS (HTTPS).
4.3. Sensitive credentials and tokens (including Google Search Console and Google Analytics OAuth access/refresh tokens, and other stored agent access credentials) are stored encrypted at rest on the server using AES-256-GCM with a server-side key (only ciphertext is kept in the database). AIsup account passwords are never stored in plaintext; they are stored as cryptographic hashes (bcrypt).
4.4. Access is limited: each authenticated user can view and manage only their own data in the cabinet; the Operator / support staff may access data only as needed to provide support and operate the Service, upon the user’s request or for security.
4.5. We do not sell personal data or Google user data to third parties.
5. Google user data
5.1. What Google data we access. Google sign-in: basic profile information under the openid and email scopes (identity and email). Google Search Console connection: read-only Search Console access (scope https://www.googleapis.com/auth/webmasters.readonly) — verified sites, search queries, clicks, impressions, CTR, positions, and sitemap list. Google Analytics connection: read-only Analytics access (scope https://www.googleapis.com/auth/analytics.readonly) — summaries and metrics for the selected property (sessions, users, page views and related metrics for the selected period).
5.2. How we use it. Search Console and Analytics data are shown in the user cabinet on the Services page for the connected site and may be provided to the AI agent as site knowledge so the agent can rely on your real metrics instead of inventing them. We do not use Google user data for advertising, credit scoring, or sale.
5.3. How we store it. Google OAuth tokens are stored in the Service database only in encrypted form (AES-256-GCM). Cached reports/summaries for a site are stored bound to your account and site for cabinet display and agent use.
5.4. Sharing and subprocessors. Google user data is not sold and is not shared with third parties for their own purposes. Sharing is limited to subprocessors needed to run Service infrastructure (hosting/VPS, backups, email delivery, payment provider — where applicable), and to LLM providers only to the extent of text/summaries needed for the agent to answer about your site, under confidentiality obligations.
5.5. Retention and deletion. Google data is used while the service remains connected to your site. Disconnecting Search Console / Analytics for a site in the cabinet removes that site’s binding and stops fetching Google data for that site. When your AIsup account is deleted, related encrypted OAuth tokens and bindings are removed from the database (cascade delete). You may also request deletion by emailing support@aisup.pro.
5.6. Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Sharing and retention (general)
6.1. Personal data is not shared with third parties except as required by Russian law, or where sharing is needed to perform the contract (for example, a payment provider / acquiring, hosting, email, analytics and LLM providers — only as needed to run the Service). The full list of recipients and cross-border transfers (AI model requests via AITunnel, Telegram notifications) is in section 5 of the Consent to personal data processing (https://app.aisup.pro/consent). Special rules for Google user data are in section 5.
6.2. Data is kept while needed for the processing purposes, contract performance and legal requirements, or until the user withdraws consent / deletes the account (unless law requires otherwise). Periods: payment and invoice records — 5 years; the consent log — 3 years after withdrawal; data of deleted websites — 90 days after deletion; Site chat assistant conversations — 1 year.
7. User rights
7.1. The user may request information about processing of their data and demand correction, restriction or deletion as provided by Russian law, and may disconnect Google integrations and delete the AIsup account.
8. Contacts
Sole proprietor Evgeny Aleksandrovich Dubrovin
INN: 773128205353
OGRNIP: 326774600535500
Email: support@aisup.pro
Phone: +7 985 116-82-10
Service site: https://aisup.pro, https://app.aisup.pro