Privacy Policy
Version of October 19, 2026
This is an English translation provided for convenience. The legally binding document is the Russian version. If the two versions differ, the Russian version prevails.
This policy describes what data the Vexic service (the vexic.ru website and the app) collects, why, and how it handles that data. The policy is written in accordance with Russian Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”. The personal data operator is named at the end of this page.
1. What data we process
- Account data. Your email address and name. When you sign in with Yandex ID or VK ID, we receive from them an identifier, a name and an email address, if you allowed them to be shared. Passwords for those services are not passed to us.
- Chat content. Your messages, answers, uploaded and created files, project instructions and what the assistant remembered at your request or in the course of work.
- Usage information. Selected models, limit usage, request times, your plan and payment history (amount, date, status).
- Mobile app statistics. The app sends anonymized information to the AppMetrica analytics service (Yandex LLC): the device model and system version, the app version, launches and crashes, and usage events (sign-in, sending a message, dictation, going to payment) with technical attributes, for example which model is selected. Message text, files, the assistant’s answers, your email address and name are not sent to analytics. Location is not collected.
- Connected services. If you choose, you can connect Yandex Disk, email, a calendar and third-party MCP servers to Vexic. For this, the service stores access keys: the Yandex Disk token, the mailbox address and an app password for email and calendar, MCP server addresses and keys. The keys are stored in the database in encrypted form and used only to carry out your requests: the assistant accesses a service when you ask it to in a chat or in a scheduled task. You can disconnect any connection in the settings, after which its keys are deleted.
- Telegram and MAX bots. If you linked your account to the Vexic bot in Telegram or MAX, the service stores the identifier of your messenger account. Messages you send to the bot are processed as regular tasks: they go into a chat and to the selected model, and the answer and files come back to the messenger. The bot does not see your conversations with other people in the messenger. You can unlink it in the settings.
- Scheduled tasks. If you created a task that runs on a schedule, the service stores its text, schedule and selected model, and puts the result of each run into a new chat. You can change or delete the task at any time.
- Desktop app (Windows). If you installed the Vexic app for Windows and signed in to it, the computer is connected to your account. The service stores the computer name, the system and app versions, the access mode and the log of the assistant’s actions on the computer (what was done and when, allowed or declined). When you give the assistant work on the computer, what is needed for that work is sent to our server: command results, the content of opened files, screenshots of the screen and browser pages, folder paths. This data becomes part of the chat and is processed the same way as its content. The assistant acts only in chats the computer is connected to, and only within the access mode you chose in the app. You can disconnect the computer in the app or in the account settings.
- Our own service statistics. The website and the app report usage events to our server: opening, sign-in, sending a message, dictation, going to payment, as well as the platform and app version. Message content is not part of these events. Before sign-in, events are tagged with a random device number not linked to your identity.
- Technical data. IP address and information about requests to the server in technical logs, which are needed to protect against abuse and to find problems.
We do not receive bank card details: payments are accepted by YooKassa.
2. Why
- to make the service work: sign-in, storing chats and files, carrying out your requests;
- to count limits and accept payments;
- to issue receipts and comply with the law;
- to protect the service from abuse and fix errors;
- to understand which app features are used and to find failures.
We do not sell your data and do not show ads based on it.
3. Legal grounds
Data is processed on the basis of Articles 6 and 9 of Federal Law No. 152-FZ: with your consent, which you give when you register and first sign in, and to perform the user agreement to which you are a party. Payment information is also processed to fulfill obligations imposed on the operator by law. Website statistics (Yandex Metrica, the VK pixel and the Google Ads tag) are processed only with separate consent, which you give in the cookie notice.
You can withdraw your consent at any time by writing to the email for inquiries given at the end of this page. After withdrawal, we stop processing and delete the data, except data we are required to keep by law. The service cannot be used without processing account and chat data, so withdrawing consent means deleting the account.
4. Who data is shared with
- Language model providers. To get an answer, the text of your request, the chat history and attached materials are sent to the selected model through a model access provider. This is a cross-border transfer: the models were developed by foreign companies, and requests to them are processed on the model providers’ servers outside the Russian Federation. Do not send information to the chat that you are not ready to share this way.
- Services you connected (Yandex Disk, your mail server, calendar server, MCP servers) and the Telegram and MAX messengers, if you linked the bot: only what is needed to carry out your request or deliver the answer goes there.
- The YooKassa payment service when you pay for a plan.
- Sign-in services Yandex ID and VK ID, if you sign in with them.
- VK Ads (the Top.Mail.Ru pixel) to measure advertising effectiveness: information about website visits and ad clicks, the browser and device, registrations, going to payment and payment confirmations. The pixel uses cookies and network data, including the IP address. We do not include your name, email, account identifier, message texts, files or the assistant’s answers in the goal code.
- Google LLC (Google Ads) to measure advertising effectiveness in Google: information about website visits and ad clicks, the browser and device, registrations. The tag uses cookies and network data, including the IP address. This is a cross-border transfer: the data is processed on Google’s servers outside the Russian Federation. The tag loads only with your consent in the cookie notice. We do not include your name, email, account identifier, message texts, files or the assistant’s answers in the goal code.
- Yandex LLC as the provider of the AppMetrica and Yandex Metrica analytics services: the anonymized mobile app and website statistics listed in section 1.
- Government authorities in cases directly provided for by law.
5. How the assistant works with the internet and code
At your request, the assistant can search for information on the internet, open pages and run code. Code runs in an isolated environment on our server, and each chat has its own working folder that other users cannot access.
If you connected a computer through the Windows app, the assistant can run commands and work with files, programs, the screen and the browser on that computer. It makes changes within the mode you chose; risky actions (payments, passwords, permanent deletion, turning off protection) require your separate consent on the computer itself. You can interrupt the assistant with the Stop button or the Ctrl, Alt, End key combination.
6. How long data is kept
- Chats, files and memory are kept while the account exists or until you delete them.
- A deleted chat is erased together with its working folder.
- Keys for connected services are kept until the connection is turned off or the account is deleted. A link to the Telegram or MAX bot is kept until you remove it.
- When an account is deleted, all its chats, files, memory, scheduled tasks, connections and links are erased immediately. Payment information is kept to the extent required by law.
- Technical server logs, including IP addresses, are kept for up to 30 days.
- Your choice in the cookie notice is kept in the browser until you clear the site data.
7. Your rights
At any time you can change your name, erase individual memory entries, delete a chat or the whole account, disconnect connected services and unlink bots in the app settings. You also have the right to request information about your data, demand that it be corrected, blocked or deleted, and withdraw your consent to processing by writing to the email for inquiries. Requests are reviewed within 10 days. If you believe your rights have been violated, you can contact Roskomnadzor (the Russian data protection authority) or a court.
8. Data protection
The connection to the service is encrypted. Access to the server is restricted. Account data, chats and files are stored on a server in the Russian Federation. Keys for connected services and bots are stored in encrypted form.
Only the service administrator has access to conversations, and it is used to handle support requests and investigate failures and abuse. Each such view is recorded in the administrator action log.
9. Changes to the policy
We may update this policy. A new version takes effect from the moment it is published on this page.
Provider and operator: Artem Maksimovich Kamaltynov, self-employed (registered professional income tax payer in Russia), taxpayer number (INN) 482306180701, Lipetsk, Russia.
Email for inquiries: acamaltynov@gmail.com