Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter referred to as the "Policy") has been developed in accordance with federal law and defines the procedure for processing and protecting the personal data of users within the framework of using the sobes.tech website and desktop application (hereinafter referred to as the "Service").

2. Basic Concepts

For the purposes of this Policy, the following terms are used:

Personal data - any information relating to a directly or indirectly identified individual (subject of personal data), including email address, password, voice data, and text obtained as a result of speech recognition.

Processing of personal data - any action or set of actions performed with personal data, including collection, recording, systematization, storage, use, transfer, depersonalization, blocking, deletion, and destruction.

Operator - a legal or natural person who organizes and carries out the processing of personal data (sobes.tech Service).

Depersonalization of personal data - actions as a result of which it is impossible to determine the ownership of data by a specific user without additional information.

3. Processed Data

The following types of data are processed within the framework of the Service:

User's personal data - information provided by the user during registration:

  • email address;
  • password (in encrypted form).
  • User's IP address
  • information about some components of the user's computer (to combat multi-accounting)

This data is not transferred to other services and is used exclusively for creating and managing an account, providing access to the functionality of the Service, and for feedback.

Data obtained during the program's operation - information processed in the course of using the Service's functions:

  • voice fragments received from the device's microphone or speakers;
  • text obtained as a result of speech recognition;
  • technical data, such as program settings, user preferences, data on interaction with the Service's functionality, IP address, browser type, device data, and anonymized information about its use.

This data may be transferred to external services to perform speech recognition and response generation tasks. The user's personal data is not transferred, except in cases where it was spoken aloud by the user during the operation of the speech recognition function.

The site also uses analytics systems (e.g., Yandex.Metrica) to collect depersonalized visit statistics.

If the user records the voice data of third parties (e.g., during a conversation) for subsequent processing in the Service, they are obliged to:

  • notify such persons of the fact of recording and using the Service;
  • obtain their consent to the processing of personal data in accordance with this Policy.

The Operator is not responsible for the user's failure to comply with the requirements for obtaining the consent of third parties.

4. Principles of Personal Data Processing

The processing of personal data is carried out on a lawful and fair basis.

Processing is limited to the achievement of specific, predetermined, and legitimate purposes. Processing that is incompatible with these purposes is not permitted.

The volume and content of the processed data correspond to the stated purposes and are not excessive.

The accuracy, sufficiency, and relevance of personal data are ensured. If inaccuracies are identified, the Operator takes measures to clarify or delete them.

Data is stored for no longer than is required for the purposes of processing, unless otherwise provided by the legislation.

5. Purposes of Processing

User's personal data is used exclusively for the following purposes:

  • user registration and identification;
  • providing access to the functionality of the Service;
  • activating paid functions;
  • feedback via email;
  • ensuring security and preventing unauthorized access.

6. Measures to Protect Personal Data

The Operator takes legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, including:

  • encryption of personal data (e.g., passwords);
  • restricting access to data only to authorized employees;
  • using secure servers and data transfer protocols;

7. Use of Third-Party Services

The Service uses external APIs for speech recognition and text response generation. Such APIs include artificial intelligence platforms provided by third parties. The list of used services is provided in the Terms of Use.

Voice fragments and text obtained as a result of speech recognition are transferred to third-party services. This data may contain the personal data of the user or third parties (e.g., interlocutors) if such information was voiced in the audio stream. The user is responsible for the content of the voice fragments and is obliged to comply with the requirements specified in the 'Processed Data' section, including obtaining the consent of third parties.

Data transferred to third-party services is processed in accordance with their own privacy policies and terms.

The Service does not store the transferred data.

8. Transfer to Third Parties

Personal data is not transferred to third parties, except for:

  • cases provided for by the current legislation;
  • transfer of data to third-party services to perform the functions of the Service, as specified in the 'Use of Third-Party Services' section.

Data is transferred to third-party services in accordance with their privacy policies and with the observance of data protection measures.

9. Payment Processing

Payment is made through third-party payment systems. The Service does not process or store bank card data.

10. User Rights and Obligations

10.1. The user has the right to:

  • receive information about what personal data is processed by the Service, in the manner prescribed by law;
  • demand clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, or not required for the purposes of processing;
  • withdraw consent to the processing of personal data by sending a request to support@sobes.tech

10.2. The user is obliged to:

  • provide reliable personal data;
  • inform the Operator about changes or clarifications to their personal data.

11. Data Deletion and Consent Withdrawal

The user has the right to request the deletion of their account or withdraw consent to the processing of personal data by sending a request to support@sobes.tech with the subject 'Account Deletion' or 'Withdrawal of consent to the processing of personal data'. Data processing is terminated within the time limits established by law, unless otherwise provided by law.

In case of changes to personal data (e.g., email address), the user can update it independently through their personal account or by sending a request to support@sobes.tech with the subject 'Personal Data Update'.

12. Data Retention Period

Personal data is stored for the period necessary to achieve the purposes specified in this Policy, or until it is deleted at the user's request, unless otherwise required by law.

13. Confidentiality of Personal Data

The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties and not to distribute it without the user's consent, unless otherwise provided by the legislation.

14. Use of the Service by Minors

The Service is not intended for use by persons under the age of 18.

15. Updates

This Policy may be amended without prior notice. The current version is always available on the website at: https://sobes.tech/privacy.

16. Contacts for Inquiries

For any questions related to the processing of personal data, the user can contact the Operator at: support@sobes.tech.