Privacy Policy

1. Who is responsible

Controller

Individual Entrepreneur Ruslan Siradze

Identification No.

61001000252

Registered address

Georgia, Batumi city, Selim Khimshiashvili street, N12, floor N7, auxiliary space N13 (under construction)

Contact email

pinvel77@gmail.com

2. What data is collected

• Name and email address.
• Birth details (date, and where you choose to give them, time and place) when the selected product uses them.
• Your questionnaire answers and your written question.
• Selected language and selected product.
• Order and payment references and payment status received from the payment provider.
• Support messages you send us.
• Security and anti-abuse metadata, stored in a privacy-preserving form (for example irreversible hashes rather than raw identifiers).
• Uploaded images, where the selected product requires them.
• Temporary voice recordings and the resulting transcribed text, where you choose to use voice input.

3. Why the data is processed

• To create, review, voice and securely deliver the purchased or free result.
• To provide customer support and to handle refund or access requests.
• To prevent abuse, fraud and automated attacks, and to keep the service available.
• To keep transaction records and to comply with legal and accounting obligations.

4. Payment data

Payment card details are entered with, and handled by, the payment provider and the acquiring bank. ZARINA AI never receives or stores full card numbers. We store only order references and payment status.

5. Processors

Personal data may be processed by the following categories of service providers, and only as actually configured for the service at the time:

• Secure hosting and database services.
• AI text generation services.
• Voice synthesis and voice transcription services.
• Email delivery services.
• Payment provider and acquiring bank.
• Security, anti-bot and basic analytics services.

Providers are used strictly to operate the service. Where a category is not currently in use, no data is sent to it.

6. No sale of data

Personal data is not sold, rented or traded. Public marketing pages may use advertising analytics such as the Meta Pixel to measure campaign performance and audience response; questionnaire contents, personal questions or context, private results and your email, name or birth data are never sent to those advertising tools and are not used for advertising profiling.

7. International processing

Technology providers may process data outside your country. Where that happens, it is done under the provider's contractual data-protection commitments and applicable safeguards.

8. Security

Data is stored in private storage, results are reachable only through private, signed or hashed links, and administrative actions are protected by authentication. No online service can promise absolute security, and we do not claim it.

9. Retention and deletion schedule

We keep personal data only for as long as it is needed for the purpose it was collected for. The periods below are the ordinary retention periods. At the end of a period the data is deleted or irreversibly anonymised, unless applicable law, an open dispute, a fraud or security investigation, a refund or chargeback case, or a legal hold requires a longer period.

• Temporary voice recordings: deleted immediately after successful transcription and in any case no later than 30 minutes after the voice session ends or expires. Only the transcript text needed for your result is kept.
• Unverified free-reading submissions and verification data: ordinarily retained for up to 30 calendar days, then deleted or anonymised where the email address was never confirmed and no security reason requires longer.
• A verified free reading, its question and context, the generated answer and the free audio: ordinarily retained for up to 90 calendar days after the result is ready, then deleted or anonymised, apart from minimal anti-abuse and conversion records.
• Paid questionnaire answers, personal narrative and source data, generated text, MP3, PDF and video artifacts: the customer result link is normally available for 90 days, and the underlying personalized content is normally retained for 12 months after delivery for support, re-delivery and dispute handling, then deleted or irreversibly anonymised.
• Uploaded source images: ordinarily kept no longer than 30 calendar days after delivery, or deleted earlier once they are no longer needed, unless a legal hold or an open dispute applies.
• Support, complaint, refund and chargeback correspondence and evidence: ordinarily retained for 24 months after the case is closed.
• Security, abuse-prevention and access-event logs: ordinarily retained for 12 months from collection, unless a live investigation requires longer.
• Basic analytics and attribution data that contains no questionnaire narrative: ordinarily retained for 12 months from collection, then aggregated, anonymised or deleted.
• Transaction, order, payment-status, consent-version, refund and chargeback records and accounting records: retained for 6 years from the end of the relevant accounting or reporting period, or longer only where mandatory law or an unresolved dispute requires it. Only the minimum personal data necessary for this purpose is kept in this category.

A deletion request can therefore be fulfilled by deleting or anonymising your personalized content while we keep the minimal transaction, accounting and evidence record that the law requires us to keep.

These periods describe the retention policy and practice applied by the operator. They are not a statement that an automatic technical deletion scheduler is in place, and no specific backup retention period is claimed here. Payment card data is never stored by ZARINA AI: it stays with the payment provider and the acquiring bank. Personal data is not sold; questionnaire contents, private results and your contact or birth data are never sent to advertising tools or used for advertising profiling.

10. Your rights

Subject to applicable law you may request access to your data, correction, deletion, restriction of processing, or object to certain processing, and you may lodge a complaint with a competent supervisory authority.

Send requests to pinvel77@gmail.com or through the support form. Identity and order verification may be required before a request is fulfilled.

11. Age

The service is for adults aged 18 and over. We do not knowingly collect data from children.

12. Updates and contact

This policy may be updated; each revision carries a version date. Questions: pinvel77@gmail.com.