Conditions de service

The locked minimum (D-19a PD inventory). We do not collect the second list below.

• email address
• OAuth provider + provider_user_id (Google / GitHub)
• jurisdiction (RU or INTL, set on signup; binding for billing-rail routing)
• client_ip on signup events
• last-seen User-Agent on signup
• stripe_customer_id (only when paid plans launch — billing is deferred, so none is collected today)
• full name / display name (only email)
• phone number
• passport / government identifier
• date of birth
• payment-card data (lives at Stripe; we never see card numbers)
• biometrics or precise geolocation
• "About me" / bio free-text

• email + OAuth-id - account identity, magic-link login
• jurisdiction - billing-rail routing (Stripe / Yookassa), only when paid plans launch
• stripe_customer_id / yookassa_payment_method_id - billing (only when paid plans launch)
• signup IP + UA - security audit, abuse detection

• analyses: cached 24h, persisted for owners until delete
• account: until you delete via /settings
• backups: up to 30 days after account deletion (D-39); the BEFORE DELETE trigger removes data immediately at the application layer, encrypted backup blobs age out via bucket lifecycle

• Stripe US - international card payments (only when paid plans launch; not active today)
• Yookassa RU - Russian-resident card payments (only when paid plans launch; not active today)
• Sentry US - error telemetry (operational)
• omni (omni.oxicom.ru) RU - LLM gateway: idea text for verdict generation
• OpenRouter US - text embeddings for similar-idea matching
• Backblaze US - international DB backups
• Yandex RU - RU-region DB backups (152-FZ data localization)

• Access / correction / blocking: /settings -> "Export my data"
• Destruction: /settings -> "Delete my account"
• Withdraw consent: same self-serve delete path

Operator and data controller: OOO OKSIKOM, INN 7807245570, OGRN 1217800001352. Data requests: privacy@ideatribunal.com. Support: support@ideatribunal.com.