Privacy Policy

Revision prepared on 9 November 2026.

1. Data operator

This policy covers visitors to 33krolika.com, waiting list requests and participants in internal tests. The platform is intended for people aged 16 or over.

3 KROLIKA LLP · BIN 251240001464 · Kazakhstan, Astana, Saryarka district, 4/1 Taras Shevchenko St., unit 17
support@33krolika.com

2. Data and purposes

For the waiting list, we use the sender’s email address and the request to record interest and to contact the sender about access. The link opens your email app. Only a subject line is needed. Do not send documents, identity or payment details.

For participant sign-in and security, we process email addresses, codes, sign-in attempts and IP addresses. Test workspaces can contain names, settings, messages, task reports, uploaded files and knowledge base entries. These are used to carry out the participant’s tasks and respond to support requests.

3. External AI processing

PlusVibe routes requests to models including Gemini and DeepSeek for text or document tasks and GPT Image 2.5 for images. Depending on the task, a request may contain instructions, conversation excerpts, knowledge base entries, documents or source images. If those materials contain personal data, the provider may receive it.

When semantic search is enabled, text excerpts may also be sent to Hugging Face to calculate search vectors.

4. Test infrastructure and launch plans

Internal tests currently use a project database. Uploaded files are stored in the Russian region of Yandex Cloud Object Storage. Email providers process waiting list messages and sign-in emails. External providers may process data outside Kazakhstan.

For a possible public launch, the operator plans to host its servers and store and process personal data in Kazakhstan. This migration is planned. The locations of databases, logs and backups and the conditions for transfers to external providers are under review.

5. Site operation and diagnostics

The site uses cookies for sessions and protection against forged requests, and browser storage for display preferences. Access logs and Sentry help diagnose errors and performance problems. Technical records may contain a URL, IP address, browser details or error context.

The public pages load interface assets from content delivery networks. These networks receive the browser’s requests. The public pages do not embed a Google Analytics tracker.

6. Retention and requests

We keep the waiting list address while the request is relevant. To leave the list, ask support from the same address. You may also ask about your data, request correction or deletion, or withdraw consent. Some records may need to be retained where required by law.

Participants can request account deletion. For project records with a recovery period, deletion is initially reversible for 14 days. Keep your own copy of important files.

7. Changes to this policy

We notify participants of changes by email or by publishing a notice on the platform, or both.