Privacy Policy

1. General Provisions This policy describes how PartyGen processes personal data in accordance with Federal Law No. 152-FZ. The Operator and person responsible for organizing processing is self-employed individual Vladislav Aleksandrovich Oleynik, Tax ID 771402421981. Contact: vlad575@mail.ru, phone +7 (926) 317-72-26. The Operator's correspondence address must be added to the published details before release.

2. Data processed The Operator may process names, email, phone number, protected password data, IP address, technical logs and access codes; account and invitation owner data; RSVP guest data (name, attendance status, comments and other answers); photos, audio files, event addresses and schedules; Wishlist content (titles, descriptions, links, prices and photos); quiz answers and texts submitted for AI processing; and order/payment details (amount, status, identifier and email). PartyGen does not store bank-card data.

3. Purposes and legal bases Account data is processed to register, authenticate and operate the account, based on contract performance and/or consent. Invitation websites, seating, quizzes, Wishlist and Secret Santa data is processed to create, publish, edit and provide the selected function, based on contract performance and the User's actions to conclude it. RSVP and gift-reservation data is entered by a guest or organizer to send to the organizer and display the result; the organizer is responsible for the lawful sharing of guest data. Email, phone and messages are used for support and delivery to the address selected by the User. Order and payment details are used for contract performance, receipts and accounting. IP address and security logs are used to protect the service and prevent abuse.

4. AI, messaging and public access Texts, names, questions and participant answers may be sent to the selected AI provider to generate or analyze a result. Optional marketing messages are sent only with separate consent. A site, Wishlist, RSVP or Secret Santa link may expose data to anyone who receives the link or code; the User chooses recipients and is responsible for the content and sharing. When a result is sent to a selected email recipient, the relevant data is transferred to that recipient on the User's instruction.

5. Retention and deletion Data is kept no longer than necessary for the purpose, contract performance, protection of the Operator's rights and mandatory legal duties. Paid-object access periods are set by the Public Offer: invitation website — 12 months, but no later than 30 days after the event; Date and couple quiz — 30 days; other products — according to the selected tariff. After the purpose ends, data is deleted, anonymized or blocked, except data required by law or needed for a dispute. The User may request correction or deletion.

6. Processors and recipients PartyGen may use Beget/S3 (hosting and file storage; contact address: 8B Karla Faberge Square, office 723, Saint Petersburg, Russia, 195112), an SMTP provider (email delivery), the payment provider configured at checkout, selected AI providers (submitted text processing), Yandex.Metrica and Top.Mail.Ru/VK (optional analytics), and map/calendar services when used. Beget/S3 and Russian payment and analytics services are expected to process data in Russia while the current configuration remains unchanged. Exact countries, data centers and processors must be checked against contracts and live settings before launch. Before a cross-border transfer, the Operator must identify the countries, purposes and data categories and comply with Article 12 of Federal Law No. 152-FZ, including notification to Roskomnadzor where required.

7. Analytics and Cookies Yandex.Metrica, Top.Mail.Ru/VK and Google Analytics (only if later enabled) do not start or receive data before separate consent to «Allow analytics». The choice is stored in Cookie Settings and may be withdrawn at any time. Essential technologies for language, security and sessions operate without that consent. Details are in the separate Cookie Policy.

8. User rights The User may request confirmation of processing, access, correction, blocking or deletion, information about purposes, data categories, retention periods and recipients, and may withdraw consent where processing is consent-based. Requests should be sent to vlad575@mail.ru with the subject "Personal-data request"; the Operator responds within the period required by law. Withdrawal does not affect processing that was lawful before receipt and may make the relevant function unavailable.

9. Minors and guest data The service is not intended for minors to independently submit special categories of data. An organizer entering guest data must have a lawful basis and inform guests about the sharing. If the Operator learns of unlawful processing of a minor's data, the Operator will take steps to block and delete it.

10. Security and incidents The Operator applies appropriate organizational and technical safeguards, restricts access for staff and contractors, and uses access control and backups. If an incident involving unlawful transfer or access to personal data is identified, the Operator will contain the consequences, conduct an internal investigation and notify the competent authority within statutory time limits, including 24 hours for the initial notice and 72 hours for investigation results where applicable.

11. Changes The current version is published on this page. Changes do not apply retroactively to processing based on earlier consent where they worsen the User's position; a new consent is required when the purposes or scope of processing changes and the law requires it.