OctoJinn Privacy Policy

1. General provisions

This privacy policy (the "Policy") applies to the personal data that OctoJinn (the "Service", "we") receives from users of the octojinn.ru website and of the OctoJinn service. The Policy is drawn up in accordance with Federal Law No. 152-FZ "On Personal Data".

2. What data we collect

Name, work email, phone number, company name, Telegram account, the content of requests and messages, and technical information about the use of the website and the service: cookies, IP address, browser and device data.

If a user connects a third-party account to the service — a Google calendar, for example — we additionally receive the data they granted access to: the list of calendar events and their content, to the extent the connected feature needs.

3. Purposes of processing

We process data to contact a user about their request or message, to provide access to the service and its features, to improve the quality of our work and support, and to send informational materials — with the user's consent.

Data from a connected calendar is used to carry out the user's request in the conversation with the assistant: showing events, creating or changing a meeting — and for nothing else.

4. Legal grounds for processing

Data is processed on the basis of the user's consent, for the purpose of performing a contract with the user, and by virtue of the Operator's legitimate interest connected with providing the services.

5. Disclosure to third parties

We do not sell and do not disclose personal data to third parties for marketing purposes. Data may be passed to contractors who support the service's operation — hosting, analytics, email and Telegram messaging — to the extent needed to provide the services, and subject to confidentiality requirements.

To compose a reply, the text of the user's request and the calendar events relevant to it are sent to a language model, which writes the reply. This is the only transfer of such data outside the installation, and it happens only while the request is being processed.

Data received from a connected Google account is not used to train models and is not shared with third parties for advertising purposes.

Processing of data received through the Google API follows the Google API Services User Data Policy, including its Limited Use requirements.

6. Storage and protection of data

Data is stored on servers located in the Russian Federation, for the period needed to achieve the purposes of processing, or until the user withdraws consent. We apply organisational and technical measures to protect data against unauthorised access, alteration, disclosure or destruction.

Access tokens for connected services are stored encrypted in the installation's database. Neither the user nor the assistant ever sees them: a token is bound to the provider's own servers — Google, for example — and cannot be sent anywhere else.

The administrator of the organisation the installation belongs to sees the fact of a connection — which service, which account, which permissions were granted — but never the content of the conversation or the tokens themselves.

7. User rights

A user may request access to their personal data, its correction, blocking or deletion, and may withdraw consent to processing, by sending a request to privacy@octojinn.ai.

Access from a connected service can be revoked at any time: through the assistant — it revokes the tokens at the provider and deletes them here — or directly in the account's own settings, for example at myaccount.google.com/permissions for Google.

On request to privacy@octojinn.ai, we will also delete the user's conversation history and account.

8. Cookies

The website uses cookies and similar technologies for traffic analytics and to improve the service. A user may restrict or disable cookies in their browser's settings — this may affect how some features of the website work.

9. Changes to the Policy

We may update this Policy from time to time. The current version is always posted on this page; in case of material changes, we will notify users through the means available to us.

10. Contact

For any question about the processing of personal data, write to privacy@octojinn.ai.