Privacy Policy
Last updated: August 8, 2026
1. General Provisions & Consent
By using AIOS Travel (the "Service") and creating an account, you voluntarily consent to the processing of your personal data in accordance with this Policy. If you do not agree with these terms, please refrain from using the Service.
2. Data Controller
The data controller (Operator) is:
- Operator: Obukhov A.V. (Sole Proprietor)
- Tax ID: 500301909788
3. Data We Collect
When registering and using the Service, we process:
- Email — for login, password recovery, and important notifications
- Name — for personalization (optional)
- Phone number — for contact (optional)
- Avatar — automatically loaded from Google/Yandex/Discord OAuth
- Favorite cities — for your saved destinations list
- Language and currency preferences — for display convenience
4. AI Interaction History
When you use AI-powered features (AI Travel Agent, city analysis, comparison, travel plans, etc.), we store:
- Prompt — the text of your request or question to the AI
- Response — the AI's answer or generated content
This history is stored for your convenience — so you can review past analyses, travel plans, and recommendations in your personal account. You can delete individual AI history entries or clear your entire AI history at any time through your profile settings.
AI interaction data is stored on the same secure infrastructure as the rest of your account data and is permanently deleted if you delete your account.
5. Purposes of Data Processing
Your data is used exclusively for:
- Operating the Service (authentication, saving settings)
- Personalizing content (language, currency, city recommendations)
- Providing access to your AI interaction history in your personal account
- Communicating with you about account-related matters
- In anonymized form — for improving city-matching algorithms and traffic analysis (Yandex.Metrika)
6. Legal Basis for Processing
Processing is based on your consent (given at registration), in accordance with applicable law.
7. Data Storage and Deletion
- Data is stored on our own servers located in the Russian Federation, using Supabase technology.
- Passwords are securely hashed (bcrypt algorithm); we do not have access to your password in plain text.
- Retention period: while your account is active. If you delete your account (manually or by request), all associated data is permanently deleted within 30 calendar days.
8. Third-Party Data Sharing
We do not sell or share your personal data with advertisers or commercial partners. However, to operate the Service, we use third-party services that receive access to data in the minimum necessary scope:
- Google OAuth / Yandex OAuth / Discord OAuth — for identification and login (name, email, and avatar are transmitted)
- Yandex.Metrika — for collecting anonymous visit statistics. Data is transmitted in anonymized form (not linked to email or phone)
9. Your Rights as a Data Subject
You have the right to:
- Access your data (in the "Profile" section)
- Edit or update your information
- View and delete your AI interaction history
- Export all your data in a readable format
- Withdraw consent or delete your account (via "Delete Profile" button or written request)
To exercise these rights (except self-editing), send a request to: aios@aios-travel.ru. We are obliged to respond within 30 days.
10. Cookies
We use the following types of cookies:
- Essential — to maintain sessions (auth token) and remember your selected language. The Service cannot function without them.
- Analytics (Yandex.Metrika) — for collecting visit statistics. These cookies are activated only upon your consent via a popup banner.
There are no advertising tracking cookies on the site.
11. Contact
For any questions regarding personal data processing, write to us:
- Email: aios@aios-travel.ru