Privacy Policy

1. Data Controller

Data controller: "Research Institute of Systems Synthesis" ANO (OGRN 1267700083617, registered in Moscow, Russian Federation). Full corporate details are available in the public registry at rusprofile.ru/id/1267700083617. Website: isslab.ru. Platform: sutra.center.

This policy is issued in compliance with Federal Law No. 152-FZ "On Personal Data" of the Russian Federation and, where applicable, the EU GDPR (Art. 6 legal grounds).

2. What We Collect

Astrology data (birth date/time/place): used only to compute the chart. Not stored in the database in guest mode. Stored in your profile only when you explicitly click "Save chart".

Technical logs: IP address, user-agent, referer, cookies — kept 90 days for security purposes.

Account data: email (required), name (optional). Passwords stored as argon2id hashes.

Payment data: not processed on our side. All transactions go through YooKassa (PCI-DSS Level 1) or Stripe where applicable.

3. Legal Basis

Consent (152-FZ Art. 6 §1 ¶1 / GDPR Art. 6(1)(a)): registration, chart saving, newsletter, analytics.

Contract (152-FZ Art. 6 §1 ¶5 / GDPR Art. 6(1)(b)): PRO/Elite subscription fulfillment, PDF report delivery.

Legitimate interest (152-FZ Art. 6 §1 ¶7 / GDPR Art. 6(1)(f)): platform security, fraud prevention.

4. Cookies

Essential (functional): language, consent record, session — cannot be disabled.

Analytics (opt-in): Yandex.Metrica and Google Analytics — loaded only after you accept in the cookie banner.

Third-party: YooKassa (payment page only), Telegram login (only when you authorize via OAuth).

5. Retention

Account data: until you delete it or 3 years of inactivity (then anonymized).

Saved charts: until you delete them.

Web server logs: 90 days.

Payment receipts: 5 years (Russian Tax Code requirement).

6. Your Rights

Access, rectification, erasure, restriction, portability, objection, withdraw consent (152-FZ Art. 14 / GDPR Art. 15-22).

To exercise: email a@afischuk.ru with subject "Data subject request". We will reply within 30 days.

7. International Transfers

For users in the Russian Federation: data is stored exclusively on servers located in Russia (152-FZ Art. 18 §5).

For users outside the RF: data may be processed on servers in Germany or Russia. Cross-border transfer is performed only with your explicit consent.

8. Security

TLS 1.3 on all connections (HSTS with max-age=1y). Passwords hashed with argon2id. Production and staging environments separated. SSH-key-only access. Encrypted backups (AES-256).

9. Contact

"Research Institute of Systems Synthesis" ANO (isslab.ru)

Data Protection Officer: Alexander Fishchuk

Email: a@afischuk.ru

Telegram: @afischuk