Privacy Policy

1. General

The data is operated by the INSO team (“we”). Contact for requests: support@insoweb.ru. This Policy applies to the Site els.insoweb.ru. We follow the principles of transparency and applicable personal‑data law.

2. What data we collect and how

We collect the minimum necessary amount of data. Sources of collection:

2.1. Technical and analytics data (collected automatically):

• URLs and addresses of visited pages; date and time;
• referrer (traffic source); browser language;
• browser, operating system and device type and version;
• screen and viewport size; an anonymous session identifier;
• IP address.

These data are collected by two systems working in parallel:

(a) Our own service, INSO ELS (Event Logs Service). We use it to collect usage events and technical errors — including uncaught errors together with their message, stack trace and the technical context listed in 2.1 — in order to diagnose problems, keep the service stable and improve it. This data is sent to api.insoweb.ru/els.

(b) Yandex.Metrica — web analytics. Please note that Session Replay (Webvisor) is enabled: it records on‑page actions (mouse movements, clicks, scrolling, input into non‑sensitive fields) to analyse usability; click maps and outbound‑link tracking are also used.

2.2. Authentication data (if you sign in):

• account identifier; email address; name; avatar (where provided by the authentication service).

Sign‑in is performed through the single INSO authentication service (auth.insoweb.ru). Access tokens are stored locally in your browser and are not stored on our servers (they are only used for requests to the authentication service and to confirm your session).

2.3. AI code‑adaptation assistant data:

• the code snippet you voluntarily paste; the selected SDK; the interface language.

The submitted snippet is sent to an external AI service (a third party) for processing. To speed up repeated identical requests, the result may be temporarily cached (in anonymised form — by a hash fingerprint of the request) for up to 48 hours. The fact of a request is recorded in logs (account identifier or anonymised IP, processing volume) to enforce limits and prevent abuse. Please do not paste secrets or personal data.

2.4. Browser storage:

• localStorage — sign‑in session data (els_token, els_refresh_token, els_user);
• sessionStorage — temporary technical values of the sign‑in process;
• cookies and other identifiers may be set by Yandex.Metrica in accordance with its own policy.

3. Purposes of processing

• operating and improving the Site and the product;
• usage and usability analytics;
• authentication and personalisation;
• operating the demo tools (AI assistant);
• security, abuse prevention and limit enforcement.

4. Legal basis and consent

Processing is carried out on the basis of your consent given when using the Site, and to provide the features you request. Consent to analytics (including Session Replay) is deemed given by your continued use of the Site; you can withdraw it using the methods in section 7.

5. Sharing with third parties

We do not sell your data. We share it with third parties only to the extent necessary for the services listed below to operate:

• Yandex.Metrica (Yandex LLC) receives anonymised information about your visits and performs web analytics, including Session Replay (Webvisor);
• the external AI service receives only the code snippet you submit to the AI assistant, solely to generate a response;
• the single INSO authentication service (auth.insoweb.ru) signs you in and provides basic profile data.

Each of these services processes data under its own privacy policy; we do not share your data with anyone else.

6. Retention periods

• analytics data and logs — for as long as necessary for the purposes of processing;
• AI‑assistant cache — up to 48 hours;
• limit counters — until the end of the day (UTC);
• sign‑in session data — in your browser until you sign out or clear storage.

7. Cookies, analytics and how to opt out

You can control data collection: configure or block cookies in your browser; use private browsing or content blockers; disable JavaScript (some features will become unavailable); use Yandex.Metrica opt‑out tools. You can delete local sign‑in data by signing out or clearing your browser storage.

8. Your rights

You may request information about the processing of your data, its correction or deletion, and withdraw your consent. To do so, write to support@insoweb.ru. You can delete local session data yourself (sign out / clear your browser).

9. Security

We apply reasonable technical and organisational measures to protect data (including transmission over secure HTTPS channels). Absolute security on the internet cannot be guaranteed.

10. Children

The Site is not intended for persons under 18 and does not knowingly collect their data.

11. Changes to the Policy

We may update the Policy; the current version is published on this page with the date of the update.

12. Contacts

For data‑processing questions: support@insoweb.ru, Telegram @official_inso / @officialinso.