Who controls the data
The data controller for this website is sole proprietor Mykhailo Vitaliiovych Patsan, Ukrainian tax number 3272015390. This policy covers this official website, request forms, the AI assistant, subscriptions, and related digital services.
Questions about access, correction, deletion, or other processing of your data can be submitted through the Contact page. Include the email address associated with the data and describe your request.
Data we receive
- request-form data: name, email, phone, topic, preferred contact time, and message;
- a separate relevant summary of earlier chat messages when you ask Lev to prepare a request and then confirm its submission yourself;
- account email or agent-confirmation email, agent name, selected protocols, and access scopes;
- messages sent to the AI assistant and selected starter prompts;
- the voice-call transcript, duration, technical status, and a separate consent record when you start the voice assistant;
- technical data such as request time, browser, and limited network signals without storing the open IP address in the lead record;
- language, cookie, consent, and marketing preferences;
- files or additional data only when a feature explicitly supports them and you provide them.
Why data is used
Data is used to respond, suggest a format, deliver a selected function, maintain security, record consent, and comply with legal obligations.
Analytics, persistent AI memory, marketing, and Telegram continuation require separate consent. Refusing optional consent does not block access to public pages.
What individual functions retain
- necessary technologies retain language, security settings, and your privacy choice without creating an advertising profile;
- analytics is enabled only after permission and receives hashed visitor and session identifiers, the page path without parameters, and the referring domain; raw IP addresses are not retained and the retention period is up to 14 months;
- chat and voice-conversation text enters history only for an authenticated user; the website does not retain the audio file;
- full editorial source text, transcripts, and links are retained as private Studio data, available only to authorised users and never published inside an article automatically.
AI conversations
The assistant may process text to search material, generate a response, and identify a useful next step. If you ask to arrange a consultation, it may create a short summary using only relevant messages from that conversation. The summary becomes part of a request only after you review the inline card and confirm both data processing and contact consent.
For a signed-in user, name and email come from that user’s own verified account. Do not submit passwords, access codes, account numbers, exact financial identifiers, medical data, third-party documents, or trade secrets. Persistent personalised memory is not enabled without separate explicit consent.
Voice and dictation
Voice features are optional. The site requests microphone access only after you press the relevant control. ElevenLabs transcribes speech and, in conversation mode, reads Lev’s already verified response over a secure connection.
The site does not retain the audio file. Recognised text is handled in the same way as a typed message: it becomes part of a signed-in user’s conversation history, while a guest conversation remains available only on the current page. ElevenLabs’ temporary audio processing follows the workspace configuration and provider policy; the shortest necessary period should be used.
Data recipients
Where necessary, hosting, database, email, CRM, calendar, analytics, security, and AI providers may process data. ElevenLabs receives audio only when you start a voice conversation. Each provider receives only what is necessary for its function.
Transfers outside Ukraine or the EEA require an appropriate legal basis and contractual and technical safeguards. The processor register must be maintained in the administration system.
Retention
Requests that do not result in an agreement are kept for up to 12 months after the last communication unless longer retention is needed to protect rights or meet a legal obligation. Contract and accounting data follows statutory retention periods.
An agent connection request must be confirmed within one hour. The private confirmation address and one-time secret hashes are deleted no later than 30 days after the token is claimed, the request is cancelled, or it expires. The machine profile, scopes, revocable token hash, and security audit remain while the connection is active or the audit is needed to protect the system.
Analytics events with hashed identifiers are retained for up to 14 months and then deleted automatically. Raw IP addresses, page URL parameters, and chat text are not written to the analytics table. AI memory uses separate retention settings available through consent controls.
Your rights
- understand the source, purpose, location, and scope of your personal data;
- access the data and information about its processing;
- request correction, restriction, or deletion where the law permits;
- withdraw consent for future processing;
- object to marketing and disable optional cookies;
- contact the Ukrainian Parliament Commissioner for Human Rights or a competent court.
Security and incidents
Controls include access management, encryption in transit, administrative audit logs, backups, retention limits, and least privilege.
If an incident occurs, the team assesses risk, contains unauthorized access, and notifies people and authorities where required by law.
Cookies and policy changes
Necessary cookies support site operation and security. Analytics, personalization, and marketing cookies must not be set before your choice. See the separate cookie policy for details.
Material changes are published here with a new version date. Where new consent is required, the site asks again.