Privacy policy

Version dated 5 November 2026.

01Who processes your data

The sunday.ru website and personal data operator is ООО «НОВЫЕ ИНФОРМАЦИОННЫЕ СИСТЕМЫ» (a Russian LLC), Russian tax ID 7729697022. For requests and privacy matters: info@one.ru, +7 (903) 755-33-76. This policy covers the website, forms and chat with reference to Russian Federal Law No. 152-FZ on personal data.

02Data and purposes

To respond, assess your project and prepare a proposal, we process the name, company, phone, email or Telegram handle, industry, enquiry volume, selected solutions and task description you provide. We also retain the request ID, date, language, page without query parameters and consent version. Server chat receives messages only after separate permission; otherwise answers are selected in your browser. Do not send passwords, payment details, medical records or other people’s confidential information.

03Storage and recipients

A request is first saved in private server storage. With the separate delivery checkbox selected, the name, contact and task description are sent to authorised staff through the he.ru HTTPS proxy to Telegram. Delivery services may process data outside Russia; Telegram delivery does not make your information public. To contact us without this channel, email info@one.ru. Authorised staff and infrastructure providers receive only the access they need. The operator determines primary storage location and the applicable transfer grounds when deploying the service.

04How chat works

Sunny’s basic mode uses a local knowledge base and keeps messages in tab memory. If you enable server mode, up to eight recent messages and the selected language are sent to the server for a knowledge-based reply and, when configured, the operator’s own model. The application does not persist chat history on the server or use it for training. A conversation is shared with the team only through a request form that you review and consent to separately. Automated replies may be inaccurate; a specialist confirms project terms.

05Retention

Primary requests and consent evidence are kept for up to 30 days. Cleanup is supported by a scheduled task and API requests. Contract documents may be retained separately for statutory periods. Security counters are removed within two days and essential sessions after two hours of inactivity. The operator handles deletion of Telegram notifications and backups under its procedures. Browser preferences remain until removed; chat remains until cleared or the tab is reloaded.

06Legal grounds and your rights

Grounds include separate consent for requests or server chat, steps you request before a contract, contractual performance and legal obligations. Operations include collection, recording, storage, correction, use, access for agreed recipients, blocking, deletion and destruction. You may request processing information, correction, blocking or deletion, withdraw consent and complain to Roskomnadzor or a court. Email info@one.ru with your request ID or details needed to find it. Statutory response periods apply; necessary records may be kept where another lawful basis exists.

07Technical data and security

There are no advertising cookies, external fonts, analytics or third-party counters. The essential sunday_guard cookie protects forms and server chat; language, theme and notice preferences use localStorage. For rate limits, the application stores an HMAC of the IP address rather than the address itself; the web server may keep a separate connection log. Controls include session tokens, source checks, request size and rate limits, and private storage. See the cookie table.