● TERMS OF SERVICE

Terms of Service

Last updated: 2026-06-17. IdeaTribunal is operated under Russian Federation jurisdiction; international users contract via the same operating entity. Operator and data controller: OOO OKSIKOM, INN 7807245570, OGRN 1217800001352. Data requests: privacy@ideatribunal.com. Support: support@ideatribunal.com.

1. Personal data we collect

The locked minimum (D-19a PD inventory). We do NOT collect the second list below.

  • email address
  • OAuth provider + provider_user_id (Google / GitHub)
  • jurisdiction (RU or INTL, set on signup; binding for billing-rail routing)
  • client_ip on signup events
  • last-seen User-Agent on signup
  • stripe_customer_id (only when paid plans launch — billing is deferred, so none is collected today)
  • full name / display name (only email)
  • phone number
  • passport / government identifier
  • date of birth
  • payment-card data (lives at Stripe; we never see card numbers)
  • biometrics or precise geolocation
  • "About me" / bio free-text

2. Purpose limitation (152-FZ Art. 5)

  • email + OAuth-id - account identity, magic-link login
  • jurisdiction - billing-rail routing (Stripe / Yookassa), only when paid plans launch
  • stripe_customer_id / yookassa_payment_method_id - billing (only when paid plans launch)
  • signup IP + UA - security audit, abuse detection

3. Retention

  • analyses: cached 24h, persisted for owners until delete
  • account: until you delete via /settings
  • backups: up to 30 days after account deletion (D-39); the BEFORE DELETE trigger removes data immediately at the application layer, encrypted backup blobs age out via bucket lifecycle

4. Sub-processors

  • Stripe US - international card payments (only when paid plans launch; not active today)
  • Yookassa RU - Russian-resident card payments (only when paid plans launch; not active today)
  • Sentry US - error telemetry (operational)
  • omni (omni.oxicom.ru) RU - LLM gateway: idea text for verdict generation
  • OpenRouter US - text embeddings for similar-idea matching
  • Backblaze US - international DB backups
  • Yandex RU - RU-region DB backups (152-FZ data localization)

5. Your rights

  • 152-FZ Art. 14 - access / correction / blocking via /settings -> "Export my data" (GDPR Art. 15)
  • 152-FZ Art. 21 - destruction via /settings -> "Delete my account" (GDPR Art. 17)
  • 152-FZ Art. 9 - withdraw consent via the same self-serve delete path

6. Contact

Operator and data controller: OOO OKSIKOM, INN 7807245570, OGRN 1217800001352. Data requests: privacy@ideatribunal.com. Support: support@ideatribunal.com.