Privacy Policy
Ilyomov Workshop. Version of November 3, 2026
1. Who processes data
Data controller: Pavel Aleksandrovich Ilyomov, INN 744612434302, Russian Federation (“we”). This Policy covers https://ilyomov.com and its subdomains (tools, text, studio), the Telegram bot @ilyomov_bot and correspondence about purchases and support. The Rezon plugin has its own policy.
2. Your files
The Tools process photos, video, audio and PDF right in the browser on your device. Your files are not sent to us and are not stored by us. We do not collect special categories of data or biometric data: in “Passport photo” the face is located by an AI model in your browser only to frame the photo correctly and is never sent anywhere. Background removal and photo upscaling, including face restoration, also run in your browser: the AI models are downloaded to your browser and your photos stay on your device.
3. What data and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| an anonymous random browser identifier and a salted hash of the IP address, the Tool name and the number of files | daily free limits | performance of the contract | 2 days, then deleted automatically |
| Pro Key and its validity (also stored in your browser) | turning Pro on, Pro limits | performance of the contract | while Pro is active and 3 years after |
| card payment on the site: order number, amount, payment status and the email for the receipt (card details are received only by the payment provider and are not passed to us) | accepting payment, receipt, issuing the Key, refunds | performance of the contract, tax accounting | as required by tax law |
| payment by transfer in the Bot: sender name, amount, screenshot of the transfer | accounting for payment, issuing the Key, refunds | performance of the contract, tax accounting | as required by tax law |
| Telegram ID, name and username, order history in the Bot | purchases, issuing the Key, support, reminders before the end of the period | performance of the contract | while Pro is active and 3 years after |
| Pro Business dynamic QR codes: owner Key, link and code name | running the code and the code dashboard | performance of the contract | until the owner deletes the code |
| scans of dynamic QR codes: date and time, network without the last part of the IP address (the full address is not stored), device type and operating system; the city is derived from the network | statistics for the code owner | legitimate interest of the code owner and ours | 400 days, then deleted automatically |
| cookies, visit and on-page activity data (Yandex Metrica and Session Replay) | site statistics | our legitimate interest | under Yandex Metrica rules |
4. Who receives data
We do not sell data and do not share it with third parties, except the services the sites and the Bot run on:
- Yandex LLC: site hosting, the function and database in Yandex Cloud, Yandex Metrica. Data is stored in Russia;
- payment providers (Robokassa LLC, YooMoney NCO LLC, service YooKassa): card payments on the site; card details are entered on their page and are not passed to us;
- the transfer recipient designated in the Bot for payments in US dollars: sees the sender name and amount, as with any bank transfer;
- Telegram: chats in the Bot;
- Cloudflare, Inc. (USA): the Bot sends and receives Telegram messages through this service, so the ID and message text may be transferred abroad;
- Google LLC (USA): email correspondence via Gmail;
- public content delivery networks (jsDelivr, cdnjs, Hugging Face) as a fallback: if our server is unavailable, your browser downloads libraries and AI models from them. They see your IP address and browser type, as with any website, but never your files.
Data is disclosed to public authorities only where required by law.
5. Security
Only we have access to the data. Service accounts are password-protected, the sites use HTTPS, IP addresses are stored only as hashes. Data is deleted when the retention period ends.
6. Your rights
You can ask what data we have about you, ask us to correct or delete it, and withdraw your consent. Email pashailyomov@gmail.com or write to Telegram @pashailyomov. We reply within 10 business days.
7. Changes
A new version of this Policy applies from publication. The current version is always at https://ilyomov.com/en/privacy. The Russian version is at https://ilyomov.com/privacy.