Privacy Policy
Last updated: February 25, 2026
1. Data Controller
The data controller is: Nenyuk Andrey Aleksandrovich, INN 272198910000, self-employed. Email: contentkitapp@gmail.com, phone: +7 (995) 300-96-82. Service address: kontentpak.space
2. Data We Collect
When registering via Google or Yandex OAuth, we receive: email, name, and profile photo. When using the service, we store: your generation requests, generated content, usage history, and favorites.
3. How We Use Data
Your data is used to: provide content generation services, save history and favorites, track usage limits, improve service quality, contact you on important matters.
4. Third-Party Data Sharing
We use the following third-party services to provide our services: • OpenRouter — AI request router, transmits data to OpenAI, Anthropic, DeepSeek for content generation. • Supabase — data storage and user authentication. • YooKassa (YooMoney LLC) — payment processing in rubles. • Google OAuth — authentication via Google account. • Yandex OAuth — authentication via Yandex account. • Sentry — error monitoring to ensure service stability. • Vercel Analytics — web analytics (no cookies, privacy-friendly). • Yandex.Metrica — web analytics (loads only with cookie consent). • Google Fonts — font loading (Inter, Space Grotesk, JetBrains Mono, Roboto). We do not sell your data to third parties.
5. AI and Your Content
Your request content is transmitted through OpenRouter, which routes requests to various AI providers (OpenAI, Anthropic, DeepSeek) for response generation. Kontentpak does not use your content to train AI models.
6. Cookies and Local Storage
We use three categories of cookies and local storage: • Essential: Supabase Auth cookies (sb-*) for authorization, NEXT_LOCALE for language preference, yandex_oauth_state (temporary, for OAuth flow). • Functional: ui-storage (theme, sidebar settings) in localStorage, generation drafts in localStorage, cookie-consent (your cookie preference choice). • Analytics (consent-based only): Yandex.Metrica (_ym_uid, _ym_d, _ym_isad) — visit analytics, click maps, conversion goals. Loads only if you click 'Accept all' in the cookie banner. Vercel Analytics operates without cookies using event-based tracking. We do not use tracking cookies for advertising.
7. Data Security
Data is transmitted over secure channels (HTTPS). Database access is restricted using Row Level Security (RLS). Passwords are not stored — OAuth authorization is used.
8. Your Rights
Under GDPR you have the right to: obtain a copy of your data (right of access), delete your account and all data (right to erasure), request data portability in a machine-readable format, restrict processing of your data, lodge a complaint with a Data Protection Authority (DPA). Under Russian Federal Law 152-FZ "On Personal Data" you have the right to: receive information about the processing of your data, to correct, block, or destroy your data, to appeal the controller's actions to Roskomnadzor. Response time for requests is 30 days. To exercise your rights, contact us via email: contentkitapp@gmail.com
9. Data Retention
Data is stored while your account is active. When deleting an account, all data is removed within 30 days. Some data may be retained longer as required by law.
10. Cross-Border Data Transfer
Servers used to provide the service are located in the USA (Supabase, OpenRouter, Sentry, Vercel). By accepting this privacy policy, you consent to the cross-border transfer of your data.
11. Policy Changes
We may update this policy. You will be notified of significant changes. The current version is always available on this page.
12. Contact
For privacy questions: contentkitapp@gmail.com, phone: +7 (995) 300-96-82