RMAGENT
Sign in

Privacy policy

Effective since May 31, 2026. Version 1.1.

1. General provisions

This Policy defines how personal data of users of the “RMAGENT” service (available at rmagent.ru, the “Service”) is processed and protected. The personal data operator is Individual Entrepreneur Anton Sergeevich Lantsov, TIN 325750000308, OGRNIP 318325600012390, legal address: 358000, Republic of Kalmykia, Elista, V.I. Lenina St., 284, apt. 38 (the “Operator”). The Policy is prepared in accordance with Russian Federal Law No. 152-FZ “On Personal Data”. By using the Service (including signing in via Telegram or email), you confirm that you have read this Policy.

2. Data we process

  • Sign-in data: Telegram identifier (id, username, chat_id), Telegram Mini App initData, email address, one-time verification codes (stored as hashes).
  • Profile data: name, Telegram photo (if available), account settings, workspace and subscription links.
  • API keys and tokens added by the user: Wildberries (statistics, reviews, buyer chats), Ozon (Client-Id and Api-Key) — to access marketplace cabinet data via official APIs.
  • Seller cabinet data from marketplace APIs: orders, sales, stock, ads, financial reports, reviews and buyer questions, chat messages, prices and product cards.
  • User-generated content: reply templates and drafts, fulfillment requests, uploaded files and reports, saved lists and module settings.
  • Payment data: subscription status, YooKassa payment and receipt identifiers. Card details are processed by the payment provider; the Operator does not store them.
  • Support requests: messages in the support Telegram bot and on-site chat widget.
  • Technical data: IP address, User-Agent, API request logs, session cookies and auth cookies.

3. Purposes of processing

  • Registration, authentication and access to Service features.
  • Sync and display of Wildberries and Ozon analytics, automated review and chat replies, SEO checks, price monitoring and other Service modules.
  • Generating reply drafts and analytics using artificial intelligence services.
  • Subscription billing, plan and limit management.
  • User technical support and Service reliability improvements.
  • Account security, abuse prevention and legal compliance.

4. Legal bases

The Operator processes personal data on the following bases:

  • Performance of a contract (public offer) with the user — to deliver the Service.
  • User consent — when signing in, connecting API tokens, using AI modules and receiving email codes.
  • Legitimate interest of the Operator — security, anonymized statistics and fraud prevention.
  • Compliance with mandatory requirements of Russian law (including payment accounting and tax records).

5. Transfer to third parties

The Operator transfers data to third parties only to the extent required to deliver the services:

  • Wildberries and Ozon (official APIs) — to retrieve and publish data and replies on the user's behalf.
  • OpenAI and other AI providers — review, question and chat texts to generate reply drafts and analysis (marketplace API tokens are not shared).
  • YooKassa (YuMoney NCO) — to accept subscription payments.
  • SMTP provider configured by the Operator — to send email sign-in codes.
  • Hosting and infrastructure contractors — to run the Service, database and backups (list and server location to be finalized in the final document version).

6. Cross-border transfer

When using AI modules, certain texts (reviews, questions, chat excerpts) may be processed on servers outside the Russian Federation (e.g. OpenAI). By enabling such features and continuing to use the Service, the user consents to this transfer to the extent required for the feature. The Operator does not transfer marketplace API tokens or card payment details abroad.

7. Retention period

Personal data is stored for the duration of the user's account plus 12 months after deletion, unless a longer period is required by law. API tokens are removed when the user disconnects a cabinet or deletes the account. Security logs may be kept for up to 6 months.

8. Cookies and browser local storage

The Service uses essential cookies to maintain the auth session. Some settings (e.g. cost prices in analytics) may be stored in the browser's localStorage and are not sent to the server until the user uploads them. Disabling cookies may prevent sign-in.

9. Data subject rights

Users may: obtain information about processing of their data; request correction, blocking or deletion; withdraw consent; lodge a complaint with Roskomnadzor. Send requests to Telegram bot @rmagenthelp_bot or email welcome@rmagent.ru. The Operator responds within 30 calendar days.

10. Security

The Operator applies technical and organizational measures: HTTPS, access control, token storage in a secured database, backups, and need-to-know access for staff and contractors.

11. Policy changes

The Operator may update this Policy. The current version is always available at rmagent.ru/privacy. Material changes may be communicated via the Service or email. Continued use after publication means acceptance of the changes unless otherwise required by law.

12. Operator contacts

Individual Entrepreneur Anton Sergeevich Lantsov, TIN 325750000308, OGRNIP 318325600012390, legal address: 358000, Republic of Kalmykia, Elista, V.I. Lenina St., 284, apt. 38. Personal data requests: @rmagenthelp_bot, email: welcome@rmagent.ru.