Privacy policy

1. Operator and contacts

The personal data operator is the operator of the Vio service (company details are published here once registered; until then all requests are accepted via the contacts below). Any questions about data processing, and requests for access, correction, blocking or deletion, go to support@vio-agi.ru or Telegram @d_gerasimovv. We reply within 30 days at the latest.

This policy covers the site vio-agi.ru, its Russian version and the Telegram bot @vioNotes_bot. They are one service sharing one account.

2. What data is processed

We collect exactly what the service cannot work without. Data you provide yourself is listed separately from technical data that appears automatically.

Data you provide yourself:

• Access request: your name, email address and, optionally, your Telegram username and a free-form comment about your needs.
• Account: email address and password (stored as an irreversible hash; the plain password is never kept).
• Telegram identifier — if you linked the bot to your account.
• The content of your space: notes, tasks, calendar events, uploaded files and documents, AI conversations, habits, dictionaries.

Data collected automatically:

• IP address, browser type and version, operating system, screen resolution, interface language.
• Date and time of requests, addresses of requested pages, referring page address.
• Cookies and browser local storage — see the separate cookie notice.

3. Purposes and legal grounds

• Reviewing your access request and contacting you about it — ground: your consent, given by submitting the form.
• Creating and maintaining your account and sign-in — ground: performance of the contract (terms of use).
• Storing and processing your material, search, reminders and AI features — ground: performance of the contract.
• Security, protection from automated abuse — ground: the operator's legitimate interests.
• Aggregated visit statistics — ground: your consent, given in the cookie notice and revocable at any time.

We do not use your material for advertising and do not sell it to third parties. The content of your space is not used to train AI models.

4. Sharing with third parties

To make the service work, some data goes to contractors. Only what a specific operation requires is transferred.

• AI model providers (Google, OpenAI, DeepSeek) — receive the text of your request and the fragments of material needed for the answer, at the moment you call the AI. Which models handle what is listed on a separate page.
• Telegram (Telegram Messenger Inc.) — messages and notifications, if you connected the bot.
• Analytics services: Yandex.Metrica (Yandex LLC) and Google Analytics (Google LLC) — only after you consent to analytics cookies.
• The hosting provider whose servers run the service.

5. Cross-border transfer

Some of the contractors above are located outside the Russian Federation, so using AI and analytics features involves cross-border data transfer. By sending a request to the AI you agree to such transfer to the extent needed to get an answer.

If you would rather your material never leaves the service, turn off the «Knowledge» and «Web» tools in the chat settings and avoid the buttons marked with AI. Notes, tasks, calendar and habits keep working.

6. Retention periods

• Access request data — up to 12 months from submission if access was not granted.
• Account data and the content of your space — while the account exists.
• After account deletion the material is removed within 30 days, including backups within their rotation window.
• Technical request logs — up to 12 months.

7. Your rights

At any time you may:

• Obtain information about the processing of your personal data.
• Demand correction, blocking or deletion of data that is incomplete, outdated or processed unlawfully.
• Withdraw your consent by contacting us via section 1.
• Export your material: any note, task, meeting and document can be exported to DOCX or PDF.
• Appeal the operator's actions to Roskomnadzor or in court.

8. Security measures

• Traffic between you and the service is encrypted over HTTPS.
• Passwords are stored as irreversible hashes.
• Access to material is limited to your account: other users cannot see it.
• Staff access to production systems is restricted and granted only to fix incidents.

9. Changes to this policy

We may update this document. The current version is always available at this address and its date is shown at the top of the page. We will announce material changes by email or in the service interface.