Version of October 16, 2026

Privacy Policy

This is a translation of the Russian original. If the versions differ, the Russian version prevails.

1. Data controller

Personal data controller: the operator of the SUJIK AI service, website https://sujik.ru, taxpayer ID (INN) 246515637804. Contact: sujik.team@sujik.ru.

This Policy describes how personal data of website and account users is processed in accordance with Russian Federal Law No. 152-FZ "On Personal Data".

2. Data we process

The operator may process the email address, account data, payment and transaction details, technical data about the device and connection, cookies, uploaded images and text prompts needed to provide the service.

If the user connects a TikTok account, the operator also processes the data of that account described in section 6.

The operator does not request special categories of personal data. The user should not upload such information without a separate legal basis.

3. Purposes and legal grounds

Data is processed for sign-up and sign-in, providing the service, payments, support, preventing abuse, complying with the law and improving the service.

Legal grounds: entering into and performing the contract, the user's consent, the operator's legitimate interest in the secure operation of the service and obligations established by law.

4. Images and models

Uploaded and generated images are processed to fulfil the user's request and show the result. Working files are kept only as long as needed to provide the service and to meet accounting requirements.

By default, user images are not used to train public models.

5. Transfer to third parties

Data may be transferred to payment processors, hosting and infrastructure contractors, and providers of models to the extent needed to generate or process an image.

Transfer outside the Russian Federation is allowed only on a legal basis and with confidentiality ensured.

6. Connected accounts (TikTok)

The user may choose to connect a TikTok account to publish videos created in the service. To do this, the user signs in to TikTok and grants access on the TikTok screen.

When the account is connected, the operator receives from TikTok the account identifier for the app (open_id), the display name and avatar, and access tokens with permissions for basic profile data and video publishing. Before each post the service requests from TikTok the account username, the available visibility options and posting restrictions, only to show them in the posting form.

This data is used only to show which account is connected and to publish the video chosen by the user after they press the Post button. The service never posts without the user's action, does not read the account's other videos, followers or messages, does not sell TikTok data and does not use it for advertising. The video, caption and chosen settings are sent to TikTok only when such a post is made.

Access tokens are stored on the server in encrypted form. For each post, its status and a link to the published video are kept.

TikTok can be disconnected at any time: Profile → TikTok → Disconnect TikTok, or with the button in the posting window. On disconnection the service revokes access at TikTok and deletes the tokens, identifier, name and avatar of the account; the posting history stays in the user's account until the account is deleted. Access can also be revoked in the TikTok app settings.

7. Retention and data subject rights

Data is kept while the account exists and as long as needed for the contract, accounting and statutory limitation periods, and is then deleted or anonymised.

The user may request access to, correction, restriction of processing or deletion of their data, and may withdraw consent where processing is based on consent, by writing to sujik.team@sujik.ru.

A complaint about personal data processing can be filed with Roskomnadzor, the Russian data protection authority.

8. Cookies and security

The website uses cookies and similar technologies for sign-in, saving settings and measuring how the service works. Disabling cookies may limit some features.

The operator takes organisational and technical measures to protect data but cannot guarantee absolute security of transmission over the internet.

9. Changes to the Policy

A new version of the Policy is published on this page and takes effect when posted. Continued use of the service means acceptance of the updated rules to the extent permitted by law.

Privacy Policy | SUJIK AI