OG Studio
CreateRU
Document

Privacy Policy

Courtesy translation. The Russian version prevails.

Version of November 7, 2026

1. General provisions

This Policy sets out how personal data of users of the OG Studio online service (the “Service”) is processed and protected, in accordance with Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”.

The personal data operator is a self-employed individual, Tax ID (INN) 262609377836 (the “Operator”).

2. What data we collect

The Operator processes the following personal data:

DataPurposeLegal basis
EmailSign-in, communicationUser’s consent
Telegram IDOperation of the botUser’s consent
Yandex ID data (when signing in with Yandex): email address, name, Yandex account identifierSign-inUser’s consent
IP addressCurrency, protectionRussian Federal Law No. 152-FZ, Art. 6
Payment dataPaymentsAgreement with YooKassa

3. Purposes of processing

  • Providing access to the Service
  • Sign-in via magic link, Telegram or Yandex ID
  • Processing payments and managing subscriptions
  • Saving projects and generation history
  • Collecting anonymous visit statistics
  • Protection against abuse (rate limits)
  • Meeting tax obligations

4. Data storage

The Service’s main server and the PostgreSQL database are hosted on a Selectel VPS (Russia). The following are also used:

  • Vercel (EU/US) — backup server and gateway for AI requests
  • Resend (US) — sending email (sign-in links, replies to inquiries)
  • YooKassa (Russia) — accepting payments

Retention period: until the account is deleted, then 30 days.

5. Data sharing

Data is shared only with the following services:

  • YooKassa — payment processing. Shared: email, payment amount, plan description.
  • Resend — sending email (magic link, notifications). Shared: email, email text.
  • Yandex ID (Yandex LLC, Russia) — sign-in with Yandex, at the user’s choice. We receive the email address, name and account identifier from Yandex; Yandex receives only the fact of a sign-in request to our site. We do not store Yandex access keys.
  • GigaChat (Sber, Russia) — the main AI provider: headline generation and the AI assistant in the editor. Shared: the topic text or the user’s message to the AI assistant (or the article/page title when importing a URL). Not shared: email, personal data, images.
  • YandexGPT (Yandex Cloud, Russia) — a backup AI provider. Shared: the topic text only. Not shared: email, personal data, images.
  • OpenRouter (EU/US) — a backup AI provider in case the main one fails. Shared: the topic text only. Not shared: email, personal data, images. OpenRouter does not use your data to train models.
  • Vercel — backup hosting and AI request gateway. Shared: IP address (to keep the service running and protect it from abuse).
  • Sentry (Functional Software, Inc., servers in the EU) — site error monitoring. Only anonymized technical error data is shared: the error text, the page address without personal parameters (values of parameters such as token/code/email are replaced), the browser and the device. Not shared: email, IP address, cookies, form data.

On a legal request — the Federal Tax Service and the Ministry of Internal Affairs.

6. Data protection

  • HTTPS (TLS 1.3)
  • Magic link (no passwords)
  • SHA-256 token hashing
  • HttpOnly + Secure cookies
  • Rate limiting

7. User rights

  • Request information about your data (what we store, why and for how long)
  • Correct your data: you can turn off the newsletter yourself in your account or in one click from an email; we change an email address on a written request sent from the address linked to the account
  • Delete your data (the “right to be forgotten”)
  • Withdraw your consent
  • Lodge a complaint with Roskomnadzor

Send all requests to: ad.minov@yandex.ru

7.1. How to delete your data or account

Right to deletion (Russian Federal Law No. 152-FZ, Art. 17)

You can request deletion of all your personal data at any time. To do so:

  1. Write to ad.minov@yandex.ru with the subject “Data deletion”.
  2. Include the email linked to your OG Studio account.
  3. We will delete: your email, Telegram ID, subscription history and payment history (within 30 days).
  4. Financial documents (receipts, tax records) are kept for 5 years under the Tax Code of the Russian Federation — they cannot be deleted before that.
  5. Anonymous data (an IP hash used for statistics and rate limits) is deleted automatically 30 days after your last visit.
  6. Until you save a project, uploaded images stay only in your browser (localStorage). In saved projects, images are stored on our server and are deleted together with the account. For Pro short links with the “Photo background” and “Product and price” templates, the photo is stored on our server for as long as the link exists and is deleted together with it.

Processing time: up to 30 days. A deletion confirmation will be sent by email.

Withdrawing consent to data processing

You can withdraw your consent at any time. Withdrawing consent = deleting your account (see above). After withdrawal:

  • Your session ends immediately (the cookie is deleted)
  • Your Pro subscription is canceled; the paid period is not refunded — deleting the account is your unilateral refusal of the service
  • The editor remains available (without signing in), but without Pro features

8. Cookies

  • og_session — sign-in session (7 days)
  • og_last_login — the method you used to sign in last time (email, Telegram or Yandex ID), to suggest it on the sign-in page (180 days; contains no email or personal data)
  • og_ya_oauth — a service cookie for signing in with Yandex: protection against request forgery (10 minutes, deleted right after sign-in)
  • og_sid — an anonymous browser identifier: promo codes, guest payment without registration, protection against abuse (180 days; contains no email or personal data)
  • _ym_* — Yandex Metrica, anonymous statistics (can be blocked in the browser without losing functionality)

The theme (light/dark) is stored in your browser’s localStorage and is not a cookie. There are no advertising or third-party tracking cookies. By continuing to use the site after the notice, you agree to the use of cookies; you can turn them off in your browser settings.

9. Operator details

Operator: Aleksandr Aleksandrovich Marchenko

Status: Individual on the professional income tax (NPD)

Tax ID (INN): 262609377836

City: Yessentuki, Russia

Contact address: email ad.minov@yandex.ru

10. Changes to this Policy

The Operator may amend this Policy unilaterally without additional notice to Users (except where notice is expressly required by law). The new version takes effect from the moment it is published on this page; the current version and the date of the last update are always shown here. Continued use of the Service means acceptance of the new version.

Last updated: 7 November 2026.