Audiodoc Studio

Personal Data Processing Policy

Version dated 3 June 2026

1. General Provisions

1.1. This Personal Data Processing Policy (hereinafter the "Policy") has been developed in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (hereinafter "FZ-152") and other regulatory legal acts of the Russian Federation in the field of personal data protection.

1.2. Individual Entrepreneur Andrey Valeryevich Platonov, OGRNIP 319028000023147, INN 027408960228, hereinafter the "Operator", is:

  • the operator of the personal data of Users of the "Audiodoc Studio" Service, located at https://studio.audiodoc.co (hereinafter the "Service");
  • the processor of personal data that may be contained in the Content uploaded by Users (audio and video files for transcription), acting on behalf of the User in accordance with Part 3 of Article 6 of FZ-152.

1.3. Personal data processing is carried out by automated means strictly for the purposes specified in this Policy.

1.4. Cross-border transfer of personal data is not carried out. All of the Operator's servers and databases are located in data centers within the territory of the Russian Federation.

1.5. When processing audio and video recordings, the Operator adheres to the position of Roskomnadzor: voice qualifies as biometric data only where it is used for the purpose of identifying a person. Since the Service does not pursue such a purpose and is intended solely for transcription, special consents for the processing of biometric personal data are not required. The Operator does not process biometric personal data.

2. Terms and Definitions

2.1. Personal data — any information relating to a directly or indirectly determined or determinable natural person (personal data subject).

2.2. Personal data subject — a natural person whose personal data is processed by the Operator.

2.3. Processing of personal data — any action (operation) or set of actions performed with personal data with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, updating (clarification), extraction, use, transfer, depersonalization, blocking, deletion, and destruction.

2.4. Content — audio and video files uploaded by Users to the Service for transcription.

2.5. User — a natural person registered in the Service and having concluded an agreement with the Operator by way of acceptance of the Public Offer.

3. Categories of Subjects, Composition and Purposes of Personal Data Processing

3.1. Users of the Service

Categories of processed data:

  • Email address — for registration, authorization, and the sending of service notifications. Stored until deletion of the account.
  • Surname, first name, patronymic (if provided upon registration) — for personalization of the interface and generation of cashier's receipts. Stored until deletion of the account.
  • Technical data (IP address, browser data) — to ensure the security and operability of the Service. Stored for no more than 12 months.
  • Data on the use of the Service (transcription history, volume of use) — for the accounting of services and settlements. Stored until deletion of the account.

3.2. Subscribers to informational newsletters

Categories of processed data:

  • Email address — for the sending of informational and advertising newsletters. Stored until consent is withdrawn (unsubscribing from the newsletter).
  • Surname, first name, patronymic (if provided) — for personalization of the newsletter. Stored until consent is withdrawn.

Consent to receive informational newsletters is executed as a separate document and is provided by the User voluntarily. Refusal of the newsletter does not affect the ability to use the Service.

3.3. Personal data in the Content

Content may contain personal data of third parties. With respect to such data, the User is the operator, and the Operator (Contractor) is the processor acting on behalf of the User. Processing is carried out solely for the purposes of transcription. Content is stored on the Operator's servers until it is deleted by the User through the Personal Account interface, by written request, or upon deletion of the account.

4. Legal Grounds for Processing

4.1. Consent of the subject — the User gives consent to the processing of their personal data upon registration in the Service by ticking the corresponding box and confirming that they have reviewed a separate document — the Consent to the Processing of Personal Data (Article 6, Part 1, Clause 1 of FZ-152). Consent to receive informational newsletters is executed as a separate document and is not a condition of registration in the Service.

4.2. Performance of a contract — processing is necessary for the performance of a contract to which the personal data subject is a party (Article 6, Part 1, Clause 5 of FZ-152).

4.3. Instruction of the operator — the processing of data in the Content is carried out on behalf of the User (operator) in accordance with Part 3 of Article 6 of FZ-152.

5. Principles of Personal Data Processing

5.1. Lawfulness and fairness: processing is carried out on a lawful basis.

5.2. Conformity with purposes: only such data as is necessary for the stated purposes is processed.

5.3. Data minimization: the volume of processed data corresponds to the stated purposes and is not excessive.

5.4. Storage limitation: data is stored no longer than is necessary to achieve the purposes of processing.

5.5. Inadmissibility of combining databases: it is not permitted to combine databases containing personal data whose processing is carried out for incompatible purposes.

6. Localization of Personal Data

6.1. In accordance with Part 5 of Article 18 of FZ-152, the Operator ensures the recording, systematization, accumulation, storage, updating, and extraction of the personal data of citizens of the Russian Federation using databases located within the territory of the Russian Federation.

6.2. All of the Operator's servers and databases are located in data centers within the territory of the Russian Federation.

7. Personal Data Protection Measures

7.1. Technical measures: encryption of communication channels (TLS); use of access control tools and firewalls; regular software updates; data backup; monitoring and logging of operations with personal data.

7.2. Organizational measures: identification of threats to the security of personal data; restriction of access to personal data; assessment of the harm that may be caused to personal data subjects.

7.3. The Operator may disclose personal data to third parties in the cases provided for by the legislation of the Russian Federation (upon a reasoned request from state authorities), as well as in cases of engaging third parties to perform the contract with the User.

7.4. The Operator has the right to entrust the processing of personal data to third parties on the basis of concluded agreements containing conditions on the confidentiality and protection of personal data:

  • Yandex.Cloud LLC (INN 7704458262) — storage and processing of data in cloud infrastructure within the territory of the Russian Federation;
  • CloudPayments LLC (INN 7708806062) — processing of payers' data for the purpose of conducting settlements and generating cashier's receipts.

8. Use of Cookies

8.1. The Service's website uses cookies — small text files stored in the User's browser that make it possible to ensure the correct operation of the Service and to analyze its use.

8.2. On the first visit to the website, the User is shown a notification (cookie banner) with the option to accept or reject the use of analytical cookies.

8.3. Analytical cookies are not set until the User's explicit consent is obtained (by clicking the "Accept" button in the cookie banner).

8.4. Where the use of cookies is refused (by clicking the "Reject" button), analytical cookies are not set. Technical cookies necessary for the functioning of the website may continue to be used.

8.5. Consent to the use of cookies is executed separately from consent to the processing of other personal data (email, name, etc.), since these are different processing purposes.

8.6. Cookies are stored in the User's browser. The Operator does not transfer data from cookies to third parties.

8.7. The Operator does not use third-party analytics services that transfer data outside the Russian Federation.

8.8. The User may delete cookies at any time through the browser settings; however, this may affect the functionality of the Service.

9. Rights of Personal Data Subjects

9.1. Right of access: to obtain information as to the Operator's possession of their personal data, and to review such data.

9.2. Right to rectification: to demand the clarification, blocking, or destruction of personal data where it is incomplete, outdated, inaccurate, or unlawfully obtained.

9.3. Right to withdraw consent: to withdraw consent to the processing of personal data at any time by sending a written application to the Operator.

9.4. Right of appeal: to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor) or through the courts.

9.5. To exercise their rights, the personal data subject may contact the Operator by the email address specified in Section 14 of this Policy. The Operator reviews requests and responds to them within the time limits established by the legislation of the Russian Federation.

10. User's Liability for Content

10.1. The User guarantees the existence of all necessary legal grounds (consents, contracts) for uploading Content containing personal data of third parties.

10.2. The User confirms that they do not use the uploaded audio and video recordings to identify natural persons by voice or other biometric characteristics.

10.3. In the event of claims by personal data subjects or supervisory authorities in connection with the Content, the User assumes the settlement of such claims and liability for possible violations of personal data legislation.

10.4. The User undertakes to compensate the Operator for documented losses incurred as a result of the User's violation of this section.

11. Deletion of Personal Data

11.1. The User has the right at any time to delete uploaded Content and Transcriptions through the Personal Account interface or by sending a written request to the Operator.

11.2. Upon deletion of the account, all data associated with it (the User's personal data, Content, Transcriptions) is deleted.

11.3. Upon withdrawal of consent to the processing of personal data, the Operator ceases processing and deletes the data within the time limits established by the legislation of the Russian Federation, except in cases where processing is necessary for the performance of the contract or is provided for by law.

11.4. Personal data may be stored beyond the specified periods in the cases provided for by the legislation of the Russian Federation (for example, for the purposes of accounting or dispute resolution).

12. Amendments to the Policy

12.1. The Operator has the right to amend this Policy unilaterally. The new version enters into force from the moment of its publication on the Service's website.

12.2. The current version of the Policy is always available at: https://studio.audiodoc.co/legal/policy.

12.3. Continued use of the Service after publication of the new version of the Policy signifies the User's agreement with the changes.

13. Applicable Law and Dispute Resolution

13.1. This Policy is governed by the legislation of the Russian Federation.

13.2. All disputes related to this Policy are resolved in the manner established by the legislation of the Russian Federation.

14. Contact Information

Operator: Individual Entrepreneur Andrey Valeryevich Platonov

Person responsible for organizing the processing of personal data: Individual Entrepreneur Andrey Valeryevich Platonov

Contact email: support@studio.audiodoc.co

Effective date: 15 May 2026