Privacy policy

1. Data we process

What you enter in a request: name, contact (Telegram username, phone number or e-mail), business name or field, comment.

Technical data: an anonymised visitor key derived from the IP address (the IP address itself is not stored in our database), date and time of requests, a cookie with your language. Hosting server logs may contain IP addresses and browser details.

The reply demo: the messages and terms you type are sent to AI to prepare replies and are not stored. Please do not enter names, phone numbers or other personal data of your customers.

The MonAiLock Telegram bot: your name and Telegram username and your conversation with the bot. The conversation is kept for no longer than 30 days so the bot understands the context, and is sent to AI to prepare replies. The bot passes a request to the MonAiLock team only after you press the consent button.

2. Purposes

Responding to your request, consulting and preparing an offer.

Concluding and performing a contract for an AI front desk.

Limiting demo attempts and protecting the site from abuse.

3. Legal grounds

Your consent (art. 6(1)(1) of Law 152-FZ), given by ticking the box in the request form.

Concluding and performing a contract to which you are a party (art. 6(1)(5) of Law 152-FZ).

4. How data is processed

Automated processing: collection, recording, organisation, accumulation, storage, clarification, use, blocking, deletion and destruction.

Data is stored in databases on servers in the Russian Federation. No cross-border transfer takes place.

Data is kept until the purposes are achieved or consent is withdrawn, but no longer than 3 years after your last contact, and then destroyed.

5. Who receives data

We do not sell or pass your data to third parties for their own purposes.

Data is stored with our hosting provider (Timeweb Cloud, servers in Russia). Demo messages and Telegram bot conversations are sent to the Cloud.ru AI service (GigaChat model) on servers in Russia to prepare replies. Telegram messages travel through the Telegram service.

Data may be disclosed to public authorities only where the law requires it.

6. Your rights

You may request information about the processing of your data, its correction, blocking or destruction, and withdraw your consent.

To exercise your rights, contact the Operator in writing to 3 bldg. 1 Orbitalnaya St., St Petersburg 196140, Russia or by e-mail to info@mon-ai-lock.ru; you can call +7 (812) 614-04-01 to ask how to send a request. We reply within 10 working days.

You may complain to Roskomnadzor or a court.

7. Security

Organisational and technical measures: restricted access, passwords and access keys kept separately from code, encrypted connections.

8. Cookies

Necessary cookies are always used: to remember your language and, if you sign in, to keep you signed in.

Analytics cookies of Yandex Metrica (YANDEX LLC, Moscow) are set only after you press “Accept” in the cookie notice. Metrica collects anonymised visit data: pages viewed and the referral source (including utm tags), device and browser type, IP address, approximate location, date and time, and actions on pages (scrolling, clicks, pointer movements — Session Replay and Click Map). Text typed into form fields is not recorded; recording is off on order status pages. Data is processed by YANDEX LLC on servers in Russia under Yandex terms. No advertising cookies are used.

You can change your choice at any time with “Cookie settings” at the bottom of the page or delete cookies in your browser settings.

9. Changes

The Operator may update this policy. A new version applies from publication on this page; the version date is shown at the top.

10. Data of customers of businesses using MonAiLock

When a salon, clinic, car service or another business connects the MonAiLock AI front desk, that business remains the operator of its customers' personal data. The Operator (MonAiLock) processes such data on the business's behalf and only to run the AI front desk and the AI manager.

Processed: the customer's name and Telegram username, the conversation with the business's bot, and bookings (service, staff member, date and time). Conversations are kept for no more than 30 days, bookings for no more than 90 days after the visit.

If the business uses the AI manager, a visit history is kept: the customer's name, the service and the date of the visit. It is kept for 13 months and then deleted. It is used to remind the customer about a repeat visit; an invitation is sent only after the business owner confirms it. Every invitation has a “Don't send these again” button; after it is pressed, no more invitations are sent to that customer.

For cosmetology and medical services no visit history is kept and no invitations are sent. The AI front desk and the AI manager do not request or store health information.

A customer may request deletion of their data from the business they booked with or from the Operator using the contacts above.