Privacy Policy

Effective April 17, 2026

This Privacy Policy describes how VCorp ("we", "us") processes personal data of users of the vMira service (the "Service").

This Policy is prepared in accordance with Russian Federal Law No. 152-FZ on Personal Data (which applies to users located in the Russian Federation) and with applicable data protection principles generally.

1. Data Controller

The data controller is VCorp. For any questions about how your personal data is processed, contact privacy@vmira.ai.

2. What We Collect

Account data: name, email address, phone number (if provided), and third-party identifiers (VK, Yandex, Google) when you sign in via them.

Conversations: the content of your messages and the model's responses, any attached files, and metadata (timestamps, model used, tools invoked).

Technical data: IP address, device and browser type, session timestamps, login events.

Payment data: the fact and amount of a top-up and the transaction ID. We do not store full card numbers or crypto wallet secrets — those are processed by CryptoCloud.

3. Purposes of Processing

We process data only for the following purposes:

  • to provide and maintain the Service;
  • to process payments and manage subscriptions;
  • to contact you about security, support, and material changes to these terms;
  • to detect and prevent abuse, fraud, and violations of our Usage Policy;
  • to comply with obligations under applicable law.

4. Legal Basis

We process personal data on the basis of your consent (given at registration), on the basis of the user agreement between you and us, and as required by applicable law.

5. Infrastructure and Third Parties

Primary inference: your messages are processed on servers located in the Russian Federation. The primary AI inference runs on our own compute nodes.

Fallback inference: if the primary infrastructure is temporarily unavailable, your request may be automatically routed to a third-party AI provider — DeepSeek, Inc. (People's Republic of China) — to keep the Service running. This constitutes a cross-border data transfer outside the Russian Federation.

Retention by the fallback provider: requests routed to DeepSeek may be retained by that provider under its own privacy policy. We transmit only the minimum data required and do not send identification documents or biometric data.

Payments: payments are processed by CryptoCloud.

Web search: when the web-search feature is used, the query is sent to the search provider; we do not pass a user identifier.

6. Model Training

By default we do NOT use your conversations to train AI models. You can voluntarily opt in to sharing anonymised conversations to improve the Service through your Privacy settings; you can disable this at any time.

7. Retention Periods

Conversation history is kept until you delete it or close your account. Payment data is kept for the period required by tax law (typically five years in the Russian Federation). Technical logs are kept for up to 90 days.

8. Your Rights

You have the right to:

  • obtain information about what personal data we hold;
  • request correction, blocking, or deletion of data that is inaccurate or excessive;
  • withdraw consent to processing and delete your account;
  • export your data in a machine-readable format;
  • lodge a complaint with a supervisory authority (Roskomnadzor for users in the Russian Federation) or a court.

To exercise these rights contact privacy@vmira.ai. We respond within 30 days.

9. Security

We apply technical and organisational measures: TLS in transit, encryption of stored databases, role-based access control, regular backups, and monitoring for suspicious activity. No method of internet transmission is 100% secure; we cannot guarantee absolute protection in all circumstances.

10. Minors

The Service is not intended for users under 14. We do not knowingly collect personal data of such users; if we become aware of such data, we delete it promptly.

11. Changes to This Policy

We may update this Policy. We will notify you of material changes by email or an in-Service notice at least 14 days before they take effect.

12. Contact

Data-protection inquiries: privacy@vmira.ai. General legal inquiries: legal@vmira.ai.