Privacy Policy

The controller of your personal data is Yakdu Group LLC (ООО «Якду Групп»), a company registered in Russia, tax number 3443152745, registration number 1243400006277, Office 2, 141 Prospekt imeni Marshala Sovetskogo Soyuza G. K. Zhukova, Volgograd, Volgograd Region, 400048, Russian Federation. For privacy questions, email info@yakdu-group.ru.

Controller: for data about you as an Opero user: your account, your company as our customer, payments, your messages to us and your visits to our website.

Processor: for data about the clients, leads, job candidates, employees and partners your company keeps in Opero. Your company is the controller of that data, and we process it on its behalf under our Data Processing Agreement. If you are one of those people, contact the company that uses Opero; we will help it with your request.

• Account: first and last name, email address, Telegram user ID and username, profile photo if your sign-in service provides one (Telegram, Yandex or Google), language and time zone.
• Company: name, tax number, company details and address, industry, ideal client profile, price list, procedures, and the roles and permissions of people and AI employees.
• Work in Opero: tasks, deals, documents, conversations, meetings, settings, and the activity log of people and AI employees.
• Payments: invoices, amounts, payment method and status, payer details. You enter card details on the bank's page; we never receive or store them.
• Messages to us: emails to info@yakdu-group.ru and support requests.
• Technical data: IP address, browser and device type, pages visited, request times and error reports.
• Website: your messages in the chat with Anna, Opero's AI sales manager on our website, and the price currency you pick (kept in your browser).

We do not ask for or collect special categories of data (such as health or beliefs) or biometric data. Please do not upload them to Opero unless you need to and have a lawful basis.

For each purpose below you can see the data involved, our legal basis under the GDPR and how long we keep it.

An AI employee sees only the data your company gives it access to and acts within the permissions and limits you set. Every action it takes is recorded in the log.

To reply to a client, write an email or prepare a document, Opero sends the text of the task to an AI model provider and receives the result. Voice, images and meetings are handled by other models and by our speech and video server. Sections 6 and 7 list who they are and where.

We do not use your data to train general AI models, and we never show it to other customers. The rules an AI employee learns from your corrections stay inside your company.

Opero does not make decisions with legal or similarly significant effects on people solely by automated means. For example, AI employees assess and shortlist job candidates, but a person makes the hiring decision.

We do not sell personal data. We share it only with providers Opero cannot run without, only to the extent needed and under contracts with them. Here are the provider categories and the countries where they process data.

Services you connect yourself: Telegram, WhatsApp, Avito, email, Zoom, Google Meet, banks, 1C, Bitrix24, Wildberries, Ozon, Yandex Direct and VK. Data goes to and comes from them because your company chose to connect them, and they process it under their own terms.

Signing in with Telegram, Yandex or Google: these services send us your name, email or user ID and profile photo. Approvals and alerts in Telegram come through the Opero Telegram bot.

We disclose data to public authorities only when the law requires it.

Some data is processed outside the European Economic Area:

• Our company is in Russia, and our team may access data from outside the EEA to provide support and run the service.
• Some of our providers are outside the EEA: AI models for text, voice and images, the app connector, and the companies behind our database and meeting bot.
• Payments are handled by a bank in Russia; the messaging connector and our contact mailbox are in Russia too.

For transfers to countries without an EU adequacy decision, we rely on the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914) where the recipient has signed them, or on the EU-U.S. Data Privacy Framework where the recipient is certified. We send each provider only the data its task needs, always over encrypted connections.

One of our text AI providers is in a country without an EU adequacy decision and does not currently offer Standard Contractual Clauses. If your company is subject to the GDPR, please contact us before you use Opero for personal data of people in the EEA, the UK or Switzerland, so we can agree how those requests are processed.

You can ask us for the list of countries and recipients and for a copy of the safeguards we use for a particular transfer.

• Connections to the website, the app and our providers are encrypted (TLS).
• A company's data is visible only to its members, according to their roles. Different companies' data is kept separate.
• Each AI employee has its own permissions and limits, and never spends money without your approval.
• Every action an AI employee takes is recorded in a log your company can see.
• There are no passwords: you sign in with Telegram, Yandex or Google, and sign-in sessions expire.
• Our staff access customer data only to provide support and keep the service running.
• If a personal data breach occurs, we notify the supervisory authority and the people affected where the law requires it.

• Account and company data: for as long as they exist in Opero, including while paused without payment.
• After a deletion request: we delete the data within 30 days. Backups are overwritten on a rolling basis, within 90 days at most.
• Invoices and payment records: 5 years after the end of the year of payment, as the law requires.
• Web server logs: up to 14 days.
• Support requests: up to 3 years after your last message.
• News and offers: until you withdraw your consent.
• Chat with Anna on our website: not stored on our servers; the chat history stays in your browser until you close the tab.

Under the GDPR, you have the right to:

• access your personal data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a structured, machine-readable format and have it sent to another provider;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw your consent at any time, without affecting earlier processing;
• not be subject to decisions based solely on automated processing that significantly affect you;
• complain to a data protection supervisory authority, in particular in the EU country where you live, work or where you believe the infringement took place. In the UK, that is the Information Commissioner's Office.

Email info@yakdu-group.ru from the address on your account. We reply within one month. For complex requests we may need up to two more months; if so, we will tell you why.

To delete a whole company or get a copy of all its data, the company owner emails us from the address on the account.

If another company keeps your data in Opero (for example, you are its client or a job candidate), contact that company: it is the controller of your data. We will help it handle your request.

We do not use advertising cookies. Analytics cookies (Yandex Metrica, Google Analytics) are set only after your consent in the cookie notice, and you can withdraw it via Cookie settings at the bottom of the website. Everything else in your browser is settings the website and the app need to work. See our Cookie Policy for the full list.

Opero is for businesses and for people aged 18 or over. We do not knowingly collect children's data.

We update this policy when Opero or the law changes. The date of the current version is at the top of the page. We tell you about material changes in advance, in the app or by email.