Privacy policy

1. Who processes your data

The data controller is the owner of the workshop and of this website ("the workshop", "we"). For any question about your data, reach us through the contact page.

The website and all its data are hosted on the workshop's own server in Russia.

2. What we collect

We collect only what the site and our orders need:

• Visitors: your IP address, browser type and the pages you request are written to the web server's technical logs. They are kept for about two weeks and used only for security and troubleshooting.
• Finishes section statistics: page views are counted without cookies. A visitor is counted by a code derived from IP address and browser that changes every day; the IP address itself is not stored for statistics and the code cannot identify you.
• Questions to the AI assistant: the text of your questions, follow-ups and the answers, the time, your IP address and browser. We use this to improve answers, correct product data and prevent abuse (including blocking addresses that misuse the service).
• Customers: name, phone, e-mail or messenger, project details, messages in the customer area, photos of the work, invoices and payments — to perform the contract and stay in touch about the order.
• Staff and partner accounts: username, a password hash (never the password itself), sign-in times, the IP address and browser of active sessions, and a log of actions in the admin area.

3. The AI assistant and transfer abroad

Answers in the Finishes section are written by the Claude language model of Anthropic, PBC (USA). To answer, it receives only the text of your question and the earlier turns of the same conversation, together with reference data about the products. Your IP address, name and contact details are not sent to Anthropic.

The request travels over an encrypted connection through an intermediate server outside Russia. By asking a question you consent to this cross-border transfer of its text. Please don't include names, phone numbers or other personal details in questions — the assistant doesn't need them.

Conversations with the assistant are kept for no longer than one year and then deleted automatically.

4. Cookies

The site uses no advertising or analytics cookies, no third-party trackers and no external fonts. Only these technical cookies are set:

5. Purposes and legal grounds

Customer data is processed to enter into and perform the contract (Art. 6(1)(5) of 152-FZ) and for accounting as the law requires. Technical logs, statistics and the assistant's conversation log serve the operation and security of the site and the improvement of the service (the operator's legitimate interest). Sending question text to Anthropic is based on your consent, given by submitting the question.

We don't sell data, don't share it for advertising and don't make automated decisions about you that affect your rights.

6. Retention and security

• Web server technical logs — about 2 weeks.
• AI assistant conversations, including IP address — up to 1 year.
• Customer data — while the order and its warranty last; invoices and payment records — as long as accounting and tax law requires.
• Backups are encrypted and kept for 30 days.

The site is served only over HTTPS, passwords are stored as a strong hash, the owner's sign-in is protected by a hardware key or a confirmation code, and access to data is limited by role.

7. Your rights

You can ask what data we hold about you, have it corrected or deleted, and withdraw your consent. Write to us or call — we reply within 10 working days. If you believe your rights have been violated, you can complain to Roskomnadzor, the Russian data protection authority.

8. Changes

We update this policy when the way the site works changes. The date of the current version is shown at the top of the page.