Privacy Policy

1. Who we are

The operator of The Real AI Dark Factory website is responsible for the processing described in this notice. Because no separate legal entity or postal office is presented on this site, this notice does not invent one. Privacy questions and requests may be sent to bpall@mail.ru.

This policy covers the public marketing website. The separate open-source project hosted on GitHub is subject to GitHub's own services and notices when you choose to visit it.

2. Data we handle

Website delivery and security

The hosting provider may create server logs containing an IP address, timestamp, requested URL, response status, user agent, referrer and security events.

Website analytics and session replay

Google Analytics 4 and Yandex Metrica start on the first page load unless you have opted out in this browser or enabled Global Privacy Control. They measure visits, approximate geography, devices, traffic sources, pages, engagement, scrolling, link clicks and booking-link clicks. Browser identifiers, cookies and technical network information are processed by these services. Yandex Webvisor session replay records interactions such as pointer movement, scrolling and clicks on the page.

Google Signals, advertising personalization and user-provided data collection are not enabled. We do not send a User ID. Our custom booking-click event sends only the page language and a fixed CTA location; it does not send your email message, address, subject or attachments. Clicking the booking link is not proof that a meeting was booked, an email was sent or a qualified lead exists.

Meeting bookings

The booking button opens Calendly as a separate website. If you complete a booking there, the organizer receives the contact details, meeting time and answers you submit through that service. We do not embed a Calendly widget or send booking-form data from this website. Calendly applies its own Privacy Notice. Do not submit sensitive or confidential information.

Email inquiries

If you email us, we receive your email address, message, attachments and any name or professional context you include. The site has no account, checkout, upload facility or web form. Do not send credentials, confidential code, health data, government identifiers or payment information.

3. Purposes and legal bases

We use website delivery and security data to return requested pages, diagnose availability, prevent abuse and protect the service. Where the GDPR or similar law applies, the legal basis is our legitimate interests in operating and securing a minimal public website, balanced against the limited nature and retention of the data.

We use booking details and email messages to arrange discussions, answer questions, discuss a possible pilot and take requested steps before entering a possible business relationship. The GDPR basis may be pre-contractual steps requested by you, legitimate interests in responding to professional inquiries, consent where specifically requested, or legal obligations that require a record.

We do not use these data for automated decision-making that produces legal or similarly significant effects.

Analytics is used to understand audience geography, engagement and inquiry paths. This release uses immediate measurement with notice and opt-out, not prior opt-in. That technical configuration is not a claim of GDPR or cookie-law compliance; legal bases and any required consent must be assessed for the applicable jurisdiction.

4. Service providers and international access

Hosting and network providers process website requests. Mail providers process correspondence. Calendly processes bookings after you follow the booking link and use its service. Google and Yandex process analytics and, for Yandex Webvisor, session replay. These services receive technical requests directly from your browser when analytics is active.

The web host is in the United States. Google, Yandex and mail providers may process data in other countries, including the United States and Russia, where privacy protections can differ. Applicable contracts and transfer safeguards require review for the jurisdictions involved; this notice does not assert that a particular transfer is automatically lawful.

Read Google’s Privacy Policy, Google’s partner-site information, and Yandex’s Privacy Policy. We do not sell personal information or configure advertising audiences. External Calendly, GitHub and email services have their own notices.

5. Retention and security

Server logs are retained as needed for delivery diagnostics, security, abuse prevention and hosting operations. Booking records and email correspondence are retained while an inquiry is active and as needed for follow-up, contractual records, disputes and legal obligations. Google Analytics event and user-data retention is set to 14 months, with renewal on new activity disabled; aggregated reports follow separate retention rules. Yandex Metrica and Webvisor follow their provider retention rules; cookie lifetimes are described in the Cookie Policy. Browser storage may remain until expiry or deletion.

We use HTTPS, a Content Security Policy limited to the required services, and restricted custom event parameters. No system is completely secure. Opting out stops future collection through our loader; it does not recall information already received by providers. Contact us about access or deletion of existing records.

6. Your privacy rights

Depending on where you live and which law applies, you may request access to personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing depends on consent, you may withdraw consent without affecting earlier lawful processing.

You may also lodge a complaint with a competent supervisory authority, including an authority in the European Economic Area or United Kingdom where applicable. We will verify a request proportionately and may retain information when an exception or legal obligation applies. These rights are not absolute in every circumstance.

7. Children, changes and browser signals

This business-oriented site is not directed to children under 16. Contact us if a child has supplied personal information.

Global Privacy Control disables both analytics providers before their scripts load. A saved browser opt-out has the same effect. Legacy Do Not Track is not used as a separate control. You can opt out using Analytics settings in the footer; blocking scripts or cookies in your browser may also affect collection.

The notice is informational: measurement starts immediately, and closing the notice is not prior consent. We will revise this policy when our practices change. See the California Privacy Notice for additional rights.

8. Contact

Send privacy questions or rights requests to bpall@mail.ru. Describe the request and the email interaction or visit concerned; do not send sensitive identification unless we ask for a proportionate verification step.

This notice describes the site's current technical behavior. It does not claim that every privacy law applies to the operator in every jurisdiction.