Privacy Policy

Who is the operator

The Operator is the iniaz.ru platform administration, which determines the purposes and means of processing personal data on the Platform. Contact for all privacy matters: privacy@iniaz.ru; formal correspondence: legal@iniaz.ru. The full legal identity and registration details are provided in writing on request, so that the details you rely on are current.

The Operator has notified Roskomnadzor of its intention to process personal data, as required by Article 22 of 152-FZ, and updates that notification when the purposes or categories of data materially change.

Scope of this policy

This policy applies to personal data processed through the Platform, the support mailboxes, the payment flow for platform services and any communication with the Operator. It does not apply to a third-party website, including a payment provider or a link published in a listing.

Where a User publishes another person's personal data, that User is an independent controller and is responsible for having a lawful basis. The Operator acts as the platform and removes such content on a substantiated request.

Legal bases for processing

We process personal data on the bases in Article 6 of 152-FZ: your consent under Article 9, given when you register, enable optional features or accept marketing; performance of the user agreement; compliance with legal obligations, including tax and fiscal receipt rules; and the Operator's legitimate interests where permitted, such as security, fraud prevention and legal claims.

Where processing relies on consent, it is specific, informed and given by a clear affirmative action. A single consent cannot cover unrelated purposes, and optional purposes are presented separately so that refusing one does not block the core service.

Categories of personal data

Account and profile data: display name, email address, phone number, city, language preference, password hash and settings. Listing data: the content you publish, including photographs, prices, location at the level you disclose, and the contact method you select. Communication data: messages, reports and support tickets.

Transaction data: records of payments for platform services, fiscal receipts, wallet balance and order references. Identity verification data, only if you choose verification: the images and numbers of the documents needed to match your name, and the result of the check. Technical data: IP address, device and browser type, timestamps, pages visited and security logs.

We do not intentionally collect special categories of data such as health, religion or political opinions. Card details are entered on the payment provider's page and are never stored by the Operator.

Purposes of processing

We process data to create and secure your account, publish and display listings, deliver messages, process payments for platform services, issue fiscal receipts, provide support, moderate content, investigate fraud and abuse, comply with legal requests, and improve reliability through aggregated statistics.

We do not use personal data for automated decision-making that produces legal effects, and we do not use special-category data for advertising. Marketing messages are sent only with consent and can be stopped under section 18.

Consent and its withdrawal

You may withdraw consent at any time by writing to privacy@iniaz.ru or by changing the relevant setting in your account. Withdrawal does not affect the lawfulness of earlier processing, and it does not stop processing based on another legal basis, such as a duty to keep receipts.

If consent is withdrawn for a purpose essential to the service, the Operator may be unable to continue that part of the service. The consequence is explained before acting, and you may delete the account if you do not wish to continue.

Cookies and similar technologies

We use essential cookies to keep you signed in, protect forms against cross-site request forgery and balance traffic; these are necessary for the service and cannot be switched off through the consent banner. Optional analytics cookies are set only after consent, to understand which pages are used and where users encounter errors.

You can clear or block cookies in your browser and change your consent choice at any time. Blocking essential cookies prevents sign-in, the wallet and the posting flow from working correctly, and we do not use cookies to profile your activity on other websites.

Localisation of personal data in Russia

In accordance with Article 18, part 5 of 152-FZ, the Operator records, systematises, accumulates, stores, clarifies and retrieves personal data of citizens of the Russian Federation using databases located in the territory of the Russian Federation. Primary storage and processing therefore take place in Russia.

Where a provider outside Russia supports a function such as email delivery or error monitoring, the arrangement is assessed before use and limited to the minimum data required. The primary database of accounts, listings, messages and payment records remains in Russia.

Cross-border transfer

A transfer of personal data outside Russia is made under Article 12 of 152-FZ only where it is necessary for a stated purpose, a lawful basis exists, and the receiving state provides adequate protection or the data subject has consented in writing after being informed of the risks.

Before a new cross-border transfer begins, the Operator assesses the recipient and the legal regime, records the assessment and, where the law requires, notifies Roskomnadzor. You may ask privacy@iniaz.ru whether a specific category of your data is transferred abroad and on what basis.

Recipients and processors

Access is limited to staff who need it for a specific task. We share data with processors acting on documented instructions: the hosting provider, the payment provider, the email and notification provider, and the support system. Each is bound to confidentiality and to using the data only for the service it provides.

We may disclose data to a competent authority where a lawful request requires it, to a court, or to professional advisers where necessary to establish or defend a claim. We do not sell personal data and do not share it with advertisers or data brokers.

Your rights as a data subject

Under Articles 14, 20 and 21 of 152-FZ you may obtain information about the processing of your data, including categories, purposes, legal bases, recipients and retention; receive a copy of the data; require correction of inaccurate or incomplete data; require blocking or destruction where processing is unlawful or the data is no longer needed; withdraw consent; and complain to Roskomnadzor or a court.

You may also ask whether your data has been transferred across a border and to which country, and object to marketing processing. These rights are not absolute: a legal retention duty, a pending dispute or another person's rights can limit a request, and the reply explains any limitation.

How to exercise your rights

Send the request to privacy@iniaz.ru from the email address registered on the account, or include enough information to identify it. We may ask for additional confirmation of identity where the request concerns sensitive data or deletion, because otherwise anyone could request another person's data.

We answer within ten business days of receiving the request, as required by Article 20 of 152-FZ, and may extend the period with a reasoned notice where the request is complex. Correction or destruction is completed within thirty days, subject to the exceptions in section 13.

Retention and destruction

We keep personal data only as long as necessary for the purpose for which it was collected, or as long as the law requires. The table below this policy states the period for each category. When a period ends, the data is destroyed or irreversibly anonymised so that it can no longer be linked to a person.

When you delete your account, the profile is deactivated and public listings are hidden immediately. Personal data is destroyed within thirty days of a verified request, except records required for tax and fiscal receipt rules, an open dispute or legal claim, or a safety investigation. Messages you sent remain visible to their recipients.

Security measures

The Operator applies the measures required by Article 19 of 152-FZ, proportionate to the risk: encrypted connections, hashed passwords, role-based access control, logging of administrative access, backups, network protection and internal rules limiting what staff may do with data. Access to verification documents is restricted to the verification team.

Staff receive confidentiality obligations and periodic security training, and a processor is selected only after an assessment of its safeguards. No system is perfectly secure, so we also maintain an incident response procedure and test it.

Incidents and notifications

If the Operator becomes aware of unlawful or accidental access to personal data, it investigates, limits the consequences, restores security and preserves evidence. Roskomnadzor is notified within the period required by 152-FZ, and affected users are informed where the incident creates a risk to their rights.

A notification describes what happened, which categories of data were affected, the measures taken and what a user can do to reduce the risk, such as changing a password. We do not delay a notification in order to complete an investigation.

Children and the minimum age

The Platform is intended for persons aged eighteen and over. We do not knowingly collect personal data of children, and an account found to belong to a minor is closed. If you believe a child has provided personal data, write to privacy@iniaz.ru and we will delete it.

Listings that publish images or personal data of minors are removed, in line with 436-FZ on protecting children from information harmful to their health and development.

User responsibilities

A User must not publish another person's personal data without a lawful basis, including a phone number, an address, a passport image or a photograph that identifies a person. Such content is removed on a substantiated request, and repeated publication is a breach of the Terms of Service.

A User is responsible for the accuracy of the data they provide and for keeping contact details current. An outdated email or phone number can prevent account recovery and the delivery of important notices.

Marketing communications

Marketing emails about new features, guides and offers are sent only with consent, collected separately from acceptance of the Terms. Every marketing email contains an unsubscribe link, and marketing can also be disabled in account settings. Service messages about security, payments, moderation and legal changes continue while the account exists.

We do not use the content of private messages to select advertising, and we do not send marketing on behalf of a third party to users who have not consented.

Changes and contact

The Operator may update this policy to reflect a change in the law, the services or the way data is processed. A material change is announced on the Platform or by email before it takes effect, and the version date at the top of the page is updated. Continued use after that date confirms that you have seen the new version.

Questions, requests and complaints about personal data are sent to privacy@iniaz.ru. If the answer does not resolve the issue, you may complain to Roskomnadzor through its official portal or apply to a court. A formal legal notice can be sent to legal@iniaz.ru.