This Consent to Personal Data Processing (the "Consent") is issued in accordance with Russian Federal Law No. 152-FZ "On Personal Data" and governs the processing of personal data of users of the AACFlow.io service.
For the Russian-language authoritative version, see /legal/consent (RU).
1. Data Controller
LLC «AACHIBILYAEV» TIN 5031135504, PSRN 1195081066432 Address: 142407, Russia, Moscow Region, Noginsk, ul. Klyuchik 5–47 Privacy email: privacy@aacflow.io General email: info@aacflow.io
2. Purposes of Processing
By registering on aacflow.io or using the service, the User consents to processing of their personal data for:
- Identification and access to the service
- Performance of the public offer agreement
- Payment processing via acquiring bank LLC «Bank Tochka»
- Billing and statutory financial reporting
- Service notifications and security
- Marketing communications (only with separate explicit opt-in)
- Compliance with Russian law
3. Categories of Data
Name, email, phone (optional), company/title (optional), TIN (for B2B billing), IP and device technical data, service logs. Payment card data is never stored by the controller — it is processed directly by the acquiring bank under PCI DSS.
4. Third Parties
Personal data may be disclosed to:
- LLC «Bank Tochka» (TIN 9721194461) — acquiring bank for Mir cards and SBP (Russian instant-payments system)
- State authorities upon lawful request
Personal data is never sold or shared for marketing purposes outside the controller's perimeter.
5. Retention
Throughout the contract term plus 3 years for tax/accounting purposes (Article 23 of the Russian Tax Code) and 5 years for payment records (FZ-402 "On Accounting").
6. Rights
The User may at any time withdraw consent by emailing privacy@aacflow.io. The controller will cease processing within 30 calendar days, except for data required to meet statutory obligations.
Complaints may be addressed to Roskomnadzor (https://rkn.gov.ru) or a competent court.
7. Security
TLS 1.2/1.3 for in-transit data, PCI DSS Level 1 + 3D-Secure 2.0 at the acquiring bank, least-privilege access for staff with audit logging.
8. Contact
privacy@aacflow.io — 142407, Russia, Moscow Region, Noginsk, ul. Klyuchik 5–47.