ZaTET & Ze Group Co. · Politics
Privacy policy
How ZaTET I ZE GRUPP CO. LLC processes personal data on zatet.com: what data, why, to whom it is transferred, how long it is stored, and how to exercise your rights.
This document is effective October 13, 2026. Consents are granted through individual actions on the website; posting this document does not constitute consent. Questions about data processing: support@zatet.com.
This policy describes the processing of personal data on the website. https://zatet.com, when using the available features of your personal account, the ZeRobot assistant, and when contacting the operator. It distinguishes between processing by the website operator and independent partner companies. The catalog and wholesale prices are available without registration or entering a tax identification number.
1Operator and contacts
Personal data operator: Limited Liability Company "ZaTET I ZE GRUPP KO." (OOO "ZaTET I ZE GRUPP KO."), INN 7713489524, OGRN 1227700303973. Address: 125130, Russia, Moscow, Klara Zetkin St., 33, bldg. 35v. Designation on the website: ZaTET & Ze Group Co.
For questions regarding data processing, access, correction, deletion and withdrawal of consent: support@zatet.comWritten requests can be sent to the operator's address.
2Whose data and what data is processed
The operator processes the data of website visitors, personal account users, individuals who submitted requests, as well as representatives of companies and partners who interact with the operator.
| Source | Data composition |
|---|---|
| Visiting the site | IP address, time, browser and device information, page, referral source, technical identifiers, and errors. The country can be determined from the local DB-IP database without transmitting the IP address to an external API. |
| Personal account | Data provided by the user and required for available functions: name, login, contact information, account ID, and account usage information. The composition depends on the form and function used. |
| Orders and payment | Name, phone number, email address, delivery address and method, order comments, order contents, amount, and order number, selected Seller, payment method and status, receipt details, order history, order inquiries, and returns. Bank card details are entered on the bank's payment service page and are not transmitted to the operator; the operator only receives the payment status and masked card number. |
| Cards Ze Silver and Ze Gold, +ZeCoin | Ze ID, level, activation and expiration dates of the Card, method of obtaining it, status, history of accruals and debits of +ZeCoin with the partner and receipt amount indicated, balance and expiration dates, facts of presenting a QR code at partners, referral connections when inviting friends, date of birth - if the user indicated it for a birthday gift. |
| Appeals and cooperation | Name and contact information, company and position information, content of the request and attachments that the user provides to the operator. |
| Subscribe to news | Email address, subscription date and time, text version, and information about consents, subscription confirmations, and unsubscriptions. |
| ZeRobot | Message text, dialogue context, assistant responses, selected language and country, and technical dialogue ID. When sending a request to an employee, this includes the specified contact and the transmitted dialogue history. For voice input, this includes an audio fragment and speech recognition results. |
| Analytics after consent | Yandex.Metrica cookies and identifiers, IP address, browser and device information, pages viewed, referral sources, and website actions. When using Webvisor, information about interface interactions is collected. |
The data processed depends on the functions used by the visitor. Information on data processing when placing orders, paying, and using the Ze Silver and Ze Gold cards is provided in this policy; the purchase procedure is established by the Public Offer (https://zatet.com/oferta/) and the Rules of the Cards (https://zatet.com/pravila-kart/). If other new features appear on the site, information about them will be included in the policy before the relevant processing begins.
Do not send passwords, access codes, full bank card details, passport information, health information, or other information to ZeRobot that is not needed to answer your question. Voice recognition is used for speech recognition, not for user identification.
3Objectives and legal basis
| Target | Legal basis |
|---|---|
| Site Operation, Session Maintenance, Account Login, Security, and Abuse Prevention | Performance of an agreement with the user or actions initiated by the user to conclude an agreement; the operator's legitimate interest in the secure operation of the website while respecting the user's rights (Clause 7, Part 1, Article 6 of Federal Law No. 152-FZ); obligations established by law. |
| Responding to an inquiry, preparing a proposal, and coordinating the contract | Conclusion or performance of a contract at the user's initiative; consent, if required for specific processing. |
| Order processing, payment, delivery and return, issuance of a receipt, and claims processing | Execution of a sales contract to which the user is a party, or actions initiated by the user to conclude the contract (Clause 5, Part 1, Article 6 of Federal Law No. 152-FZ); obligations established by legislation on the use of cash registers, accounting and taxes, and consumer protection. |
| Issuance, servicing and renewal of Cards, accrual and debit of +ZeCoin, application of partner privileges | Execution of the Card Agreement and the Card Rules (Clause 5, Part 1, Article 6 of Federal Law No. 152-FZ). The date of birth is processed based on a separate user action—voluntarily indicating it in the personal account; it can be deleted at any time. |
| ZeRobot and voice mode operation, transferring a request to an employee | Separate consent to the processing of personal data (Clause 1, Part 1, Article 6 of Federal Law No. 152-FZ). For data required for the conclusion or execution of a contract at the user's initiative, Clause 5, Part 1, Article 6 of this law applies. |
| Newsletter and offers | Independent consent to the processing of personal data for mailing (clause 1, part 1, article 6, No. 152-FZ) and separate consent to advertising (part 1, article 18, No. 38-FZ). |
| Yandex.Metrica and Webvisor: traffic assessment and website improvement | Separate prior user consent for analytics. |
| Generalized statistics on demand and topics of requests | Analysis of anonymized statistics. Prior to anonymization, the processing of identifiers and actions for this purpose is carried out on the basis of separate consent for analytics. |
| Compliance with legal requirements and protection of rights | Duties and other grounds provided for by the legislation of the Russian Federation. |
The policy itself does not constitute consent. The "Consent to the Processing of Personal Data for Website Analytics" document is issued separately and accepted as a separate action. It covers Yandex.Metrica, Webvisor, and ZeRobot's own analytics. Continued browsing, silence, and the pre-selected mark do not constitute consent.
Subscription is voluntary. Consent to the processing of personal data for mailing purposes and consent to receive advertising messages are formalized as two separate documents and are accepted in two separate actions. They are not combined with analytics, ZeRobot, or the website's terms of access. You can unsubscribe via the link in each advertising email or via support@zatet.comAfter refusal, advertising will stop sending.
4ZeRobot and artificial intelligence services
ZeRobot processes messages through the website's server. Yandex AI Studio with the YandexGPT model is used to generate responses; Yandex Search API is used to search for relevant information; and Yandex SpeechKit is used for speech recognition and voice-over. These services are part of the Yandex Cloud infrastructure. Processing on the provider's side is governed by the applicable Yandex Cloud terms and conditions and the operator agreement.
Before sending the first message or enabling voice input, the user accepts a separate consent form that describes ZeRobot's operation, voice functions, history storage, and the transfer of necessary data to the provider. The conversation is transferred to the employee through a separate user action after reviewing the details of the transferred data.
The query text and the required dialogue context are sent to Yandex AI Studio. For searches, the search query is sent. For voice input, the audio is sent to the website server and then to SpeechKit for recognition; for the response, the text is sent to SpeechKit. The browser requires a separate request for microphone permission; recording begins when voice input is used.
When processing requests to the model and speech services, the operator disables diagnostic logging of request contents using the means provided by the corresponding API, including the x-data-logging-enabled: false header, where supported. Disabling logging does not prevent the provider from processing the request or storing the history on the website. Provider processing information: https://yandex.ru/legal/cloud_dpa/ru/.
Current history can be stored in a browser tab or in a server session. The server context of a guest dialog expires after 24 hours of inactivity; associated data is deleted no later than 24 hours after this period. An authorized user's history is stored on a server with restricted access; active history contains the last 200 entries. Expiration of the server context does not mean deletion of the account history. The storage period is specified in Section 7.
The Clear Chat button deletes the current history and context in the corresponding mode. The request sent to the employee is stored separately: it includes the specified contact, the text of the conversation, the request number and time, the country, and, if available, the account ID. Clearing the chat does not delete such a request. To delete it, you can contact support@zatet.com.
The original audio of the voice input is processed when the request is fulfilled and is not saved by the assistant as a separate audio recording on the website server. The recognized text may be included in the history and the user's selected request. SpeechKit is used for recognition and speech-to-speech. Network recognition and browser-based speech-to-speech are not enabled without first defining the recipient, processing conditions, and reflecting this information in the corresponding function's documentation.
Custom analytics of question topics and requests for service improvement is enabled only after a separate analytics launch and prior user consent. While analytics is disabled, identifiable actions are not collected for this purpose. Reports do not include full conversations; highlighting search phrases filters out contact information and other unnecessary information. The use of pseudonymous identifiers does not, in itself, anonymize the source data.
5Partners and referrals
The website hosts the pages of independent partner companies, including ZeOpt. ZeOpt manages and develops these pages under contractual agreements. The presence of a partner page does not mean that the website operator and the partner are the same legal entity or the same personal data controller.
A partner's page displays their name, phone number, address, and other contact information. If you contact them directly using these contacts or click a button to access the partner's messenger, the data transmitted there is processed by the partner according to its own terms and conditions; processing by the messenger itself is governed by the terms and conditions of the relevant service.
Before submitting a request through the website form, the recipient and a link to their data processing terms must be specified. If the request is received by the website server or the operator accepts and forwards it to a partner, the operator processes the contact information, the request content, and the necessary technical information for such forwarding. Only the data necessary for reviewing the request is transferred to the recipient. The website assumes no liability for its own data processing.
Information about individuals and sole proprietors is published only if there is a legal basis for doing so. If consent is the basis for disseminating personal data, it must be obtained separately in accordance with Article 10.1 of Federal Law No. 152-FZ.
6Recipients and processing conditions
Access to data is granted to authorized employees within the scope of their official duties. Recipients, when using the relevant functions: YANDEX LLC (TIN 7736207543, 119021, Moscow, Leo Tolstoy St., Bldg. 16) — Yandex.Metrica and Webvisor after consent; Yandex.Cloud LLC (TIN 7704458262, OGRN 1187746678580, 119021, Moscow, Leo Tolstoy St., Bldg. 16, Bldg. 528) — Yandex AI Studio, Yandex Search API, and Yandex SpeechKit; the partner directly named before submitting the application — its review. Data storage on the website server on behalf of the operator is provided by Beget LLC (TIN 7801451618, OGRN 1077847645590, legal address: 195112, St. Petersburg, Karla Faberge Square, Building 8, Lit. B, Office 726A). Hosting, email, and backup services are provided under the terms of the contract with the provider. Requirements for the processing of personal data on behalf of the operator are determined by Part 3 of Article 6 of Federal Law No. 152-FZ and applicable contractual terms. Information on other parties involved is provided upon request in accordance with Article 14 of Federal Law No. 152-FZ. Government agencies receive data in cases stipulated by law.
When ordering from a Seller who is not an operator, the Seller specified in the product card and order confirmation receives only the information necessary for order fulfillment and communication: name, phone number, delivery address and method, order contents, and comments. The Seller processes this data as an independent operator for the execution of the purchase and sale agreement; its name, address, and contact method are specified on the website in accordance with paragraph 1.3 of the offer. The delivery service is engaged by the Seller or operator and receives only the data necessary for delivery. Online payment is processed by the bank's payment service specified on the payment page: bank card details are entered on its page, and the operator receives the payment status and masked card number. Cash receipts are generated through the recipient's fiscal data operator in accordance with legislation on cash register equipment. Upon presentation of the Card's QR code, only the Card level, Ze ID, and Card status are transmitted to the partner. Adding the Card to Apple Wallet and Google Wallet will only be enabled after the requirements of Article 12 of Federal Law No. 152-FZ for cross-border transfer are met and this policy is supplemented with recipient information.
When collecting personal data from citizens of the Russian Federation, the operator ensures compliance with the requirements of Part 5 of Article 18 of Federal Law No. 152-FZ for the use of databases within Russia. Connecting recipients outside of Russia requires a separate verification of the legal basis, informing the user of the recipient, country, and purpose of the transfer, and compliance with Article 12 of this law prior to the transfer. A user's independent access to an external service is governed by the documents of that service; this disclaimer does not apply to data transfer by the website itself or the loading of an embedded external widget.
7Storage and disposal
Data is stored no longer than necessary for the stated purpose, taking into account mandatory timeframes established by law and legitimate grounds for further storage. For each purpose, the operator restricts access and ceases processing when the data is no longer needed.
| Category | Maximum shelf life |
|---|---|
| Server logs | 6 months from the date of recording. For information necessary for the investigation of a specific incident, a further period is determined by an independent legal basis. |
| Appeals to the employee and correspondence | 1 year after the last message. If the purpose ends before this period and there is no basis for further storage, deletion by law applies. |
| ZeRobot's account history | Until the user clears or deletes the account, but no more than 1 year from the last use of the relevant dialogue. |
| Subscription data | Until you unsubscribe or stop receiving the newsletter. After unsubscribing, your email address will not be used for advertising; data not needed for other legitimate purposes will be deleted within the timeframe established by law. |
| Confirmation of consent and its revocation | Three years after the consent is revoked or expires, to the minimum extent necessary to confirm the legality of processing and protect rights. This does not include all correspondence with ZeRobot. |
| Opting out of analytics | Device records last for up to 1 year. If the revocation relates to a previously given consent, a minimum confirmation of the revocation is stored on the previous line. |
| ZeRobot's own identifiable statistics | No more than 6 months from the date of recording, then deleted or anonymized. Final data that does not allow user identification may be stored longer. |
| Account details | Until account deletion or termination of the functionality required by the user. Mandatory retention periods for individual documents and data are determined by applicable law. |
| Order, payment and receipt data | Five years after the end of the year in which the purchase was made—for information confirming settlements and contract execution (accounting and tax law requirements). Contact information for the order is used for communication only until the order is completed and the deadline for submitting claims has expired. |
| Map Data and History +ZeCoin | During the Card's validity period and for three years after its expiration, or until account deletion, if earlier. Records of charges and debits related to settlements are stored as part of the order data for five years. Date of birth: until deleted by the user or account deletion. |
| ZeRobot Guest Server Context | 24 hours of inactivity; deletion no later than the next 24 hours. Cleaning or revoking the account will trigger an earlier deletion. |
| Webvisor Recordings | 15 days, including the current day, according to the provider's published restrictions. If the grounds for termination are lost, the statutory procedure for terminating processing applies. |
| Downloading analytics from the operator | Identifiable data is stored for up to 6 months from the date of receipt, after which it is deleted or anonymized. The cookie expiration date does not determine the storage period for the data. |
| Yandex analytics data | Storage is governed by Yandex.Metrica's terms and conditions and Yandex's policies: https://yandex.ru/legal/metrica_termsofuse/ru/ и https://yandex.ru/legal/confidential/ru/Yandex processes this data on behalf of the operator, pursuant to Part 3 of Article 6 of Federal Law No. 152-FZ (clause 5.4 of the Yandex.Metrica Terms and Conditions, as amended on August 7, 2026), and, in cases specified by this clause, also for its own purposes, as per Yandex's Privacy Policy. Before analytics are launched, the counter is set to "Limited Mode" (clause 4.3.1 of the Terms and Conditions), which reduces the amount of data collected and limits its use in other Yandex services. Upon revocation, the operator stops sending new data and ensures that data processed on its behalf and which has no other legal basis is processed and deleted using the service's available means or by contacting the provider. |
| Website backups | The storage period is up to 30 days. Records subject to deletion are excluded from use and are not restored to working data; after restoration, previously recorded deletions are applied. If destruction within the specified timeframe is objectively impossible, blocking and the procedure set forth in Part 6 of Article 21 of Federal Law No. 152-FZ apply. |
The specified time periods are strict limits and do not allow data retention beyond the legal basis for retention. Individual records may be retained for longer periods only for specific purposes under a separate legal basis, such as due to an unresolved dispute or mandatory document retention period. This does not mean continued analytics or marketing communications.
Once the purpose has been achieved or consent has been revoked, data for which there is no remaining legal basis for processing is destroyed within the timeframes specified in Article 21 of Federal Law No. 152-FZ, generally no later than 30 days. The law provides for different timeframes for specific requirements and cases. If some data must be retained by law or other applicable grounds, the operator will notify the recipient and limit its use to the relevant purpose.
Cookie expiration dates are specified in the Cookie Policy. Deleting cookies on your device does not automatically delete previously collected information on the website server or with the analytics provider.
8Data protection and user rights
The operator applies organizational and technical measures based on the nature of the data and the risks involved: access control, secure connections, request verification, abuse prevention, and protection of stored history and requests. Absolute security of information transmission and storage cannot be guaranteed.
You have the right to receive information about the processing of your data, request clarification, blocking, or destruction of it if there are legally established grounds, revoke consent, and appeal to Roskomnadzor or the court. The request is sent to support@zatet.com or to the operator's mailing address. Specify the issue you need resolved and how to contact you; to protect your data, the operator may request necessary identification. Do not send copies of documents unless necessary.
Information about processing will be provided within 10 business days of receiving the request; this period may be extended by no more than 5 business days with a reasoned notice. Confirmed inaccurate data will be clarified within 7 business days. A request to cease processing will be complied with no later than 10 business days, with exceptions provided by law and the possibility of a reasoned extension of no more than 5 business days. Unlawful processing will cease no later than 3 business days after detection; if its lawfulness cannot be ensured, the data will be destroyed no later than 10 business days. If the purpose is achieved or consent is revoked, a destruction period of up to 30 days applies, unless there are other legal grounds. For other cases, the time limits set out in Article 21 of Federal Law No. 152-FZ apply.
Opting out of analytics does not restrict access to the main website content. Disabling essential technical cookies may affect login and other user-selected features. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
9Related documents and changes
The terms and conditions for purchasing goods and Cards are established by the Public Offer (https://zatet.com/oferta/) and the Rules of the Cards (https://zatet.com/pravila-kart/). The use of cookies and browser storage is described in the Cookie Policy: https://zatet.com/politika-cookie/Individual consents and terms for features are posted next to the relevant interface elements. New purposes requiring consent are not covered by a policy update alone: the operator must obtain the necessary consent prior to such processing. The current version is available at https://zatet.com/politika-konfidentsialnosti/.
10Processing of employee and contractor data
In addition to website functions, the operator processes the personal data of employees, job candidates, and counterparty representatives for HR and accounting purposes, contract execution, and tax agent and insurer responsibilities. Processing is conducted in accordance with the Labor Code of the Russian Federation, the Tax Code of the Russian Federation, Federal Law No. 402-FZ "On Accounting," and concluded contracts. Data is stored for the periods established by archival, accounting, and tax accounting legislation and is not used for website purposes.
