Privacy Policy of the MixMedia service
Last updated: 08.10.2026.
1. Controller
Lyubov Vladimirovna Kravtsova, TIN 232306409279, self-employed (professional income tax payer). Contact for personal data matters: aimixmedia@yandex.ru, Telegram: @supAIMMediabot.
This policy follows the principles of Russian Federal Law No. 152-FZ "On Personal Data".
2. Data we process
2.1. Account data: your e-mail address; and, if you sign in with Telegram, GitHub, Yandex, Google or VK, that account's identifier, display name and avatar URL where the service provides one.
2.2. Payment records: amount, currency, date, status and the provider's payment id. Card data is handled by YooKassa and Lava.top; the controller never receives or stores it.
2.3. Request content: your prompts, uploaded images, video and audio, and the generated results.
2.4. Technical data: IP address, browser and device type, the cookies listed in section 6, API request logs. API keys are stored only as a hash that cannot be turned back into the key.
2.5. Your support messages and the files attached to them.
3. Why, and on what basis
3.1. To register you, sign you in and perform the contract: account, balance, generations, support — article 6 part 1 item 5 of 152-FZ.
3.2. To keep payment records and meet legal duties, including issuing receipts — article 6 part 1 item 2.
3.3. To protect the service from abuse and keep it secure — article 6 part 1 item 7 (legitimate interest).
3.4. The controller asks for no marketing consent and sends no advertising.
4. Who receives the data
4.1. Prompts and uploaded files may be processed by third-party AI model and infrastructure providers, including outside the Russian Federation, to the extent needed to provide the service. By using the service, the User consents to this processing and cross-border transfer (article 12 of 152-FZ).
4.2. Payment data goes to YooKassa (ruble payments) and Lava.top (US dollar payments).
4.3. Service e-mails — sign-in codes and notifications — are sent from the controller's own mail server.
4.4. Data is never sold and never shared for advertising.
5. Retention
5.1. Uploaded source photos and videos are deleted 1 hour after their last use; generated results after 24 hours. In the bots a result download link lasts 1 hour.
5.2. Generation history is kept for 30 days. Payment and balance records are not deleted — accounting requires them.
5.3. A sign-in session lasts 30 days. Files attached to support requests are kept while the request is open.
5.4. When an account is deleted, personal data is erased or anonymised within 30 days, except what the law requires to be kept.
6. Cookies
The site uses no analytics or advertising systems, including Yandex Metrica and Google Analytics — it carries none of their counters. Only functional cookies are set:
- aim_sid — sign-in session (30 days);
- aim_lang — chosen language, aim_theme — colour theme;
- aim_ref — a friend's invitation, aim_promo — a promo code from a link;
- aim_rows — how many rows tables show;
- aim_eml, aim_tgl, aim_oauth, aim_tgnext, aim_link — short-lived technical cookies of the sign-in and account-linking flow.
7. Your rights
You can request access to your data, its correction, deletion or restriction of processing, and withdraw consent, by writing to aimixmedia@yandex.ru. The controller replies within the statutory term (generally 10 business days). You may also complain to Roskomnadzor.
8. Children
The service is not intended for anyone under 18. Such data is deleted when found.
9. Protection
Access to the data is limited by server passwords and keys, the site is served over HTTPS, API keys are stored as a hash, and card data never reaches the controller.
10. Changes
A new version is published on this page and takes effect once published.