Back to home

Privacy Policy

This English version is a courtesy translation. In case of any discrepancy, the Russian-language version is governing and legally binding under the laws of the Russian Federation.
Version dated 5 August 2026
Personal data operator
Name: Dmitry Viktorovich Volkov
INN: 463404496646
Status: payer of professional-income tax (self-employed)
Contact email: support@linkeon.io

This Privacy Policy applies to all personal data that the Operator may receive about the user during the use of the LINKEON.IO Application.

1. Information collected

We collect the following information:

  • Phone number for authentication
  • First name, last name, email (optional)
  • Information about your business, goals and context that you enter
  • History of messages and interactions with AI assistants
  • Technical information about your device and use of the Application

1.1. Signing in through third-party services

In addition to signing in with a phone number or an email address, the Application supports signing in through third-party services: Google, Yandex, Taler ID and Apple.

In that case the Operator receives from the chosen service a persistent account identifier, an email address and a flag indicating whether that address is verified. The password to the third-party account is never transmitted to the Operator and is not known to it.

Apple allows the user to hide their real address. The Operator then receives a relay address of the form ***@privaterelay.appleid.com, or no address at all, and the account is identified solely by its identifier.

The address received is also used to link accounts: if it is verified by the service and already known to the Operator, the sign-in resolves to the existing account instead of creating a new one.

The Operator gains no access to the contents of third-party accounts and performs no actions in them on the user's behalf. The list of linked sign-in methods is available in the Application; any of them can be removed unless it is the only one left.

2. Use of information

  • Providing and improving the Application's services
  • Processing user AI requests
  • Personalizing assistant responses
  • Ensuring security and preventing fraud
  • Contacting the user regarding important matters

2.1. Processing of payment information

The Application DOES NOT process and DOES NOT store bank card data (card number, expiry, CVV). All payment data is processed exclusively by certified PCI-DSS-compliant payment aggregators.

Payment history is stored for 5 years per the tax legislation of the Russian Federation.

3. Data processing via artificial intelligence

The Application uses AI technologies provided by the following third-party vendors:

  • OpenAI (ChatGPT, GPT-4, GPT-5) — processing of text requests. Country of operation: USA
  • Anthropic (Claude) — processing of text requests. Country of operation: USA
  • Google (Gemini — request processing and analysis of an uploaded voice sample; Imagen 4.0 Ultra and Nano Banana — image generation; Veo — video generation). Country of operation: USA
  • ElevenLabs — creation of a voice model from an uploaded voice sample and narration of videos with that voice. Country of operation: USA
  • DeepSeek — generation of greeting messages in chats with AI assistants. Country of operation: People's Republic of China
  • Kling (Kuaishou) — video generation and processing. Country of operation: People's Republic of China
  • Yandex SpeechKit — speech recognition for voice input. Country of operation: Russian Federation
  • Other AI services engaged for particular features of the Application

Data transmitted: the text of the user's requests and messages, the history of the conversation with the assistant and the profile context; for generation features — text prompts together with images and audio uploaded by the user; for voice input — the audio stream from the microphone. The profile context transmitted to AI vendors includes the user's first and last name, together with their interests, values, skills and intentions. The content of the conversation and of the profile is transmitted as-is and is not anonymized. The user identifier, the phone number and payment data are NOT transmitted to AI vendors.

Voice cloning. In the video creation section the user may enable narration in their own voice. In that case the voice sample they upload is transmitted to Google (the Gemini model) to produce a textual description of the voice, and to ElevenLabs to create a voice model that is then used to narrate the generated video. The sample is uploaded solely at the user's initiative and only where the user has confirmed a separate consent; without such confirmation no upload takes place. The audio file of the sample itself is not retained by the Operator — what is retained is the identifier of the voice model held by ElevenLabs and the textual description of the voice. The user may delete the voice model within the Application, upon which it is also deleted on the ElevenLabs side.

Once data has been transmitted to an AI vendor, the Operator does not control its further processing. By using the Application the user expressly agrees to the transfer of their data for processing by means of AI technologies.

3.1. Cross-border transfer of personal data

Several of the vendors listed in Section 3 are located outside the Russian Federation. Processing of user requests therefore entails a cross-border transfer of personal data within the meaning of Article 12 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

Please note in particular: part of the user's data is transferred to the People's Republic of China. The following is transferred to the PRC: the text of the user's messages to an AI assistant together with their profile context when greeting messages are generated (vendor DeepSeek), and the text prompts, images and audio used to generate and process video (vendor Kling / Kuaishou). The People's Republic of China is not a party to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data and is not included in the list of foreign states providing adequate protection of the rights of personal data subjects. The level of legal protection of personal data in the PRC differs from that established by the legislation of the Russian Federation.

Data is also transferred to the USA (OpenAI, Anthropic, Google, ElevenLabs), including the user's voice sample where the feature narrating videos in the user's own voice is used. Speech recognition for voice input is performed within the Russian Federation (Yandex SpeechKit).

By using AI assistants, the image- and video-generation features and voice input, the user consents to such cross-border transfer, including transfer to the PRC. If such a transfer is unacceptable to the user, they should refrain from using the corresponding features of the Application. Do not disclose to AI assistants any information whose transfer outside the Russian Federation is unacceptable to you.

4. Transfer of data to third parties

We do not sell or transfer your personal data to third parties, except:

  • With your explicit consent
  • As required by the legislation of the Russian Federation
  • To protect our rights and the safety of users
  • To service providers acting on our behalf (subject to confidentiality)

5. Data protection

We apply modern encryption and security technologies (TLS, secured token storage). Access to personal data is limited to authorized personnel only.

6. Your rights

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Restrict the processing of data
  • Withdraw consent to the processing of data

7. Data retention

  • Active accounts: indefinitely until deleted by the user
  • Deleted accounts: 30 calendar days, then fully removed
  • Payment history: 5 years (tax-legislation requirement)
  • Security logs: 6 months
  • Backups: overwritten every 30 days

7.1. Processing of photographs

By uploading photographs to the Application, the user:

  • confirms that they hold the rights to the image
  • grants the Operator a non-exclusive licence to use it
  • warrants that no third parties appear in the images without their consent

8. Cookies and analytics

The linkeon.io website uses cookies, browser local storage (localStorage, sessionStorage) and the counters of the following third-party web analytics and advertising services:

  • Yandex Metrica, counter No. 105902201 — visit statistics and goal tracking. Session Replay (recording of user actions on the page), click map, outbound link tracking and accurate bounce rate are enabled. The counter script is loaded upon the user's first interaction with the page (scroll, touch, mouse movement, key press, click) or no later than 6 seconds after the page has loaded.
  • VK Ads / top.Mail.Ru, pixel No. 3773048 — records the visit (pageView event) so that an ad click can be matched to a site visit. The pixel is initialised on every page load, without any prior user action and without a separate consent request.

First-party telemetry. The linkeon.io website sends the following events to the Operator's server (my.linkeon.io, endpoint /webhook/events/track): landing_view — the fact of a site visit; landing_cta_click — a click on the button leading to the Application; landing_engagement — a summary of the visit. The events carry: the tab session identifier, the traffic source (utm_* and ref parameters, or the domain name of the referring site), the advertising campaign name, the referrer page address, the time spent on the page, the maximum scroll depth, and whether the button leading to the Application was displayed to the user and whether it was clicked.

Local storage. The attribution parameters taken from the page address (utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref) are stored in the browser's localStorage under the key ll_attribution and reused on subsequent visits. The tab session identifier and a flag indicating that the visit has already been counted are stored in sessionStorage.

Cookies can be managed in your browser settings; local storage data is cleared together with the site data by browser means. Disabling cookies and third-party counters may limit the operation of certain features.

9. Policy changes

We may update this Policy. We will notify you of material changes through the Application or by other means.

10. Contacts

For questions about this Policy or the processing of your data: support@linkeon.io.