Personal data processing policy
This English text is a translation provided for convenience. The Russian version is the legally binding one; if the two differ, the Russian text applies.
Date: 08.11.2026
1. Operator
Personal data operator: Anna Alekseevna Derevenskaya, self-employed, INN 253402095301, email 59638289@bk.ru, Telegram @Anna_Derevenskaya.
This policy applies to the Telegram bot @the_babybook_bot (the "Bot").
2. What data is processed
| Data | Whose | Why |
|---|---|---|
| Telegram ID, username, interface language | Customer | operating the bot, communication, delivering books |
| Child's name, gender, age, interests, theme, wishes | child (entered by the parent) | creating the story |
| Giver's name, dedication text | Customer | designing the book |
| Child's photo (optional) and appearance description derived from it | child | creating illustrations that resemble the child |
| Payment data: payment ID, amount, status | Customer | payment records, refunds. Card data is received only by YooKassa |
| Support messages | Customer | answering requests |
| Technical logs (without questionnaire answers or photos) | Customer | fixing errors |
The Operator does not request special categories of data (health, religion, etc.) and asks you not to enter them. The photo is used to create illustrations, not to identify a person.
3. Purposes and legal grounds
3.1. Purposes: accepting and fulfilling orders, creating and delivering the Book, accepting payments and refunds, support, protection against abuse, compliance with the law.
3.2. Grounds: consent of the data subject (for the photo and the child's data it is given by the parent or legal representative), performance of the contract (the offer), legal requirements.
4. Disclosure to third parties
To operate the Bot, data is passed to:
- Telegram (the messenger the Bot runs on);
- YooKassa (payment processing);
- artificial intelligence services via the AITUNNEL aggregator (story, illustrations, photo checks, text moderation, narration). The aggregator may use models located outside the Russian Federation.
The Operator does not sell data or use it for advertising.
5. Cross-border transfer
The artificial intelligence models used by the Bot are located outside the Russian Federation. The Operator obtains consent to such transfer through a separate consent in the Bot. Country and recipients: USA (Meta, OpenAI, Google).
6. Storage periods
- Original photo: 48 hours, then deleted.
- Intermediate book images: 7 days.
- Finished PDF and MP3: 21 days.
- Questionnaire and order data (without photo), payment information: 3 years. Technical logs: 30 days.
- On request data is deleted earlier, except data that must be kept by law (payment information).
7. Security measures
Server access is restricted, secrets are stored outside the code, payment webhooks are accepted only from YooKassa addresses and verified via the API before any action, personal data is stripped from logs, files are deleted on schedule. Absolute protection cannot be guaranteed.
8. Rights of the data subject
You may request information about processing, correction or deletion, and withdraw consent. To do so, write to 59638289@bk.ru or @Anna_Derevenskaya. We respond within 10 business days. Withdrawing consent does not cancel processing required by law and does not refund payment for a service already provided.
9. Children
The Bot is intended for adults. A child's data is provided by a parent or legal representative, who confirms their right in the Bot. If you believe a child's data was entered without the right to do so, write to us and we will delete it.
10. Changes
A new version is published at the same address with a new date.