Privacy Policy
IdeaTribunal is the data controller. This policy applies Russian Federal Law 152-FZ and GDPR Art. 13/14/15-17/21 to a deliberately small set of personal data.
1. Personal data we collect
This is the minimum we keep. Adding anything to this list takes a deliberate product and legal decision - we do not expand it casually.
We do NOT collect: phone, name, passport / INN / SNILS, date of birth, card data, biometrics, geolocation, or free-text "About me".
- email - your account identity and magic-link login
- OAuth provider + provider_user_id (Google / GitHub), if you sign in that way
- jurisdiction (RU or INTL, chosen at signup) - decides which payment method you would use
- client_ip recorded at signup
- User-Agent recorded at signup
- stripe_customer_id (only when paid plans launch; billing is deferred, so none is collected today)
2. Sub-processors
These sub-processors handle some data on our behalf:
- Stripe US - international card payments (only when paid plans launch; not active today)
- Yookassa RU - card payments for Russian residents (only when paid plans launch; not active today)
- Sentry US - error monitoring
- omni (omni.oxicom.ru) RU - AI model gateway: your idea text, to generate the verdict
- OpenRouter US - text embeddings, to match similar ideas
- Backblaze US - international database backups
- Yandex RU - database backups in Russia (152-FZ data localization)
3. Cookies (essential only)
We use three functional cookies only: session for login, anon_id to bring back your anonymous analyses, and csrf to protect forms from forged requests.
We use no analytics cookies. No Google Analytics, no Mixpanel, no third-party trackers. Continuing to use the site means you accept this.
4. Your rights (152-FZ + GDPR)
- 152-FZ Art. 14 / GDPR Art. 15 - access: open Settings and choose "Export my data"
- 152-FZ Art. 21 / GDPR Art. 17 - deletion: open Settings and choose "Delete my account"
- 152-FZ Art. 9 / GDPR Art. 7(3) - withdraw consent: the same path as deletion
5. Backup retention
When you delete your account, the deletion runs immediately in the app. Encrypted backup copies can lag behind the live data by up to 30 days before they age out.
6. Contact
Operator and data controller: OOO OKSIKOM, INN 7807245570, OGRN 1217800001352. Data requests: privacy@ideatribunal.com. Support: support@ideatribunal.com.