Privacy Policy
Version of 01.10.2026. Faithful counterpart of the Russian text; in case of conflict the Russian original prevails. This policy is published under Article 18.1(2) of Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (152-FZ).
1. Who processes your data
The operator is individual entrepreneur Aleksei Konstantinovich Sergeev (ИП Сергеев Алексей Константинович; INN 331621149370, OGRNIP 320774600247076, contact email: hello@lecta.space), referred to below as “Lecta”. Its details are entered in the Roskomnadzor register of personal data operators (notification of 2026-09-30, No. 100442427).
The operator is an individual entrepreneur registered in Russia, and the operator’s processing of personal data is governed by 152-FZ.
For questions about personal data, to withdraw consent, or to make a request about your data, write to hello@lecta.space.
2. What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Respond to a request for access or a sales enquiry | name, work email, company, role, team size, message text; the date and time of the request, the form used, and the version, language and time of the consent given | consent (152-FZ, Art. 6(1)(1)) |
| Create an account and give access | email, name, Teams and roles | contract: the terms of use (Art. 6(1)(5)) |
| Take payment and issue a receipt | payer’s email, amount, date; card details are processed by the acquiring bank, and Lecta does not receive them | contract; Federal Law No. 54-FZ |
| Run a model | the inputs of a Run; they may contain images of people and other personal data | contract |
| Protect the Service and investigate breaches | IP address, browser data, activity log | legitimate interest (Art. 6(1)(7)) |
| Protect the site’s forms from spam | IP address, held only in the memory of the forms service and used to limit the number of requests from one address within 10 minutes; the forms service does not write it to disk (the web server log is covered in section 7) | legitimate interest (Art. 6(1)(7)) |
| Operate the site and detect and investigate abuse | web server access log: IP address, time, page address, referring page and browser, for every request to the site, including form submissions | legitimate interest (Art. 6(1)(7)) |
| Understand how the site is used | Yandex Metrica cookies and identifiers, page address, referring page, actions on the page (Webvisor session recording; the contents of form fields are not recorded) | consent given in the cookie banner (Art. 6(1)(1)) |
The site itself sets no cookies; Yandex Metrica, provided by Yandex LLC, sets _ym*
cookies on the lecta.space domain, and only after consent. Until you give consent,
lecta.space loads nothing from third-party addresses: the site loads Yandex Metrica only
when you press “Accept” in the cookie banner. You can withdraw that consent at any time
through “Cookie settings” at the bottom of every page. Details are in the Cookie
Policy.
Lecta does not process special categories of personal data or biometric personal data within the meaning of Articles 10 and 11 of 152-FZ. Lecta does not use images of people that a User uploads as inputs to identify anyone.
3. What we do with the data
Collection, recording, systematisation, accumulation, storage, clarification (updating, correction), retrieval, use, transfer (provision, access), anonymisation, blocking, deletion and destruction, using automated means.
4. Where the data is stored
The personal data of Russian citizens is recorded, systematised, accumulated, stored, clarified and retrieved in databases located in Russia (152-FZ, Art. 18(5)). The site and the requests sent through it are hosted on a Timeweb Cloud virtual server in Russia: a request is recorded in the database on that server before any email about it is sent. The Service’s data is stored with Timeweb Cloud (Russia).
5. Who receives the data
- Model providers: the inputs of a specific Run: fal.ai, OpenRouter, Google, OpenAI, Anthropic, xAI, Black Forest Labs, Kling (Kuaishou), Tripo, Alibaba, Tencent, Shengshu, Moonshot, Deemos, Meshy, Uthana, ByteDance (Seedream, Seedance). The list is not exhaustive and may change; the current version is in this policy with its date.
- Acquiring bank: YooKassa (Russia): the data needed for payment and the receipt.
- Hosting: Timeweb Cloud (Russia): the site, the requests sent through it, and the Service.
- Email: Timeweb (Russia): notifications of requests to Lecta staff, the Service’s emails, and the hello@, sales@ and support@ mailboxes.
- Web analytics: Yandex LLC (Yandex Metrica), only after you accept cookies: the data listed for that purpose in section 2.
Each recipient receives only what it needs for its task.
6. Cross-border transfer
Some model providers are located outside Russia: the USA, China, Singapore and Germany. The data of the site’s forms (name, email, company, message text) is not transferred outside Russia. Only the inputs of a specific Run go to a provider, and the User decides what to include in them: Lecta cannot check, and technically cannot verify, either the link between uploaded photos, videos and other materials and a real person, or whether they were generated. If the User includes personal data in the inputs, passing them to such a provider is a cross-border transfer. Lecta notifies Roskomnadzor of cross-border transfer before it begins (152-FZ, Art. 12) and transfers only the inputs of the Run.
To keep personal data from leaving Russia, a User may keep it out of the inputs — for example, not upload images of real people. This is about real individuals, not portraits as such: a generated likeness not tied to a real person is not personal data. No model providers in Russia are connected as of this version.
7. How long we keep the data
- request data: 180 days from the date of the request, then deleted from the database automatically; the request database is backed up daily and only the latest 14 daily copies are kept, so a request remains in the backups until the last copy that contains it is removed; a copy of the notification email stays in Lecta’s mailbox for no longer than 90 days, is removed by automatic cleanup, and is deleted at once on request;
- account data and files: for as long as the contract is in force and 30 days after it ends;
- payment data: for the period required by tax and accounting law;
- security log: 12 months;
- the site’s web server access log (IP address, time, page address, referring page and browser, for every request to the site, including form submissions), kept to operate the site and to detect and investigate abuse: 30 days.
When the period ends, the data is deleted or anonymised.
8. Your rights
Under 152-FZ (Articles 14 and 17) you have the right to:
- obtain information about the processing of your data, including the personal data we hold about you; for a request sent through the site’s forms we can provide a copy of the stored record;
- have your data corrected if it is incomplete, outdated or inaccurate;
- have your data blocked, which restricts its processing;
- have your data destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose;
- withdraw your consent at any time;
- complain about Lecta’s actions to Roskomnadzor or to a court.
Send requests to hello@lecta.space. When we receive a request to delete a request sent through the site, we delete it from the database at once, together with its copies in the database backups. We reply within 10 working days; this period may be extended by no more than 5 working days, and if it is, we tell you why.
9. How the data is protected
Encryption in transit (TLS/HTTPS); the request database and its backups are files accessible only to the forms service process. Access is separated by Teams and roles; support staff get access only with the User’s consent, and every such access is logged; activity logging. The person responsible for organising the processing of personal data is the individual entrepreneur Aleksei Konstantinovich Sergeev.
10. Changes
A new version is published on this page with its date. Previous versions are provided on request via hello@lecta.space.