Consent to personal data processing
A separate consent for users in Russia.
Effective October 4, 2026
1.Operator
This is the separate consent to personal data processing that Russian law (Federal Law No. 152-FZ) requires from users in Russia. By ticking the consent box, the user consents to the processing of their personal data by the operator of Vayai on the terms below. Operator details:
Operator details will be listed here before payments open.
2.Who gives consent
Consent is given by a Vayai user aged 18 or over, freely, of their own will and in their own interest. It is specific, informed and unambiguous.
Consent is given by a separate action — ticking a dedicated box on first sign-in or when a new version of this document is accepted. It is not bundled with accepting the terms of service or the privacy policy. The date, time and version of the consent are recorded.
3.Data covered
Email address; account ID; interface language; IP address and browser details; profile answers (line of business, products and sales channels, creative needs), if provided; uploaded images, including images of people; prompts and template field values; generated results; messages to the assistant and support; purchase and payment details, excluding card data; records of consents given.
4.Purposes
Registration and sign-in; running image and video generation jobs and storing results; adding and charging credits, processing and recording payments and refunds; checking prompts and uploads against the rules and the law, preventing fraud; answering requests and reports; suggesting templates and plans based on the profile; improving the service; meeting legal obligations.
Images of people are processed only to complete a job and check an upload, and are never used to identify anyone.
5.Processing operations
Collection, recording, organisation, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), including cross-border transfer, anonymisation, blocking, deletion and destruction, both automated and manual.
6.Transfer to third parties
Data may be shared with parties that process it on the operator’s behalf: third-party AI model providers (prompts, images and job settings), the website host Vercel, the database and file storage service Supabase, the payment processor Lava.top, an email delivery service and the error monitoring service Sentry. What each receives is set out in the privacy policy.
Some of these parties and their servers are located outside the Russian Federation, including in the United States and the European Union, and not all of these countries provide protection equivalent to Russian law. The user consents to the cross-border transfer of their data to the extent needed for the purposes above.
7.Duration
Consent is valid from the day it is given until the account is deleted or consent is withdrawn. After that, data is deleted or anonymised within 30 days, except data the operator must keep by law (such as payment records), which is kept for the statutory period.
8.How to withdraw
Consent can be withdrawn at any time by deleting the account under My work → Profile or by sending a request through the support form or the contacts in the privacy policy.
Vayai can’t work without processing personal data, so the account is closed once consent is withdrawn. The operator may continue processing without consent where the law allows it (clauses 2–11 of Part 1 of Article 6, Part 2 of Article 10 and Part 2 of Article 11 of Law No. 152-FZ).