This Privacy Policy (hereinafter referred to as the “Policy”) governs how the website casperai.io and its subdomains (including app.casperai.io) (operated by , a self-employed individual registered in accordance with the legislation of the Russian Federation (TIN: ), hereinafter referred to as “We”, “Site”) collects, uses, and stores users' personal data.
The Policy applies equally to the former address of the Service, the website comparai.co and its subdomains, including app.comparai.co. CasperAI is the new name of CompareAI.
This Policy also applies to the CasperAI app for Windows (hereinafter referred to as the “App”), installed from our website or from the Microsoft Store: everything it says about the Site applies to the App as well.
1. Terms and Definitions
1.1. Personal data — any information relating to a directly or indirectly identified or identifiable individual (User), including: email address, HTTP request data, technical data (Cookies, IP address).
1.2. Processing of personal data — any action with personal data, including collection, recording, storage, transfer (including cross-border), anonymization, and deletion.
2. General Provisions
2.1. By using the Site, the user confirms their agreement with this Policy.
2.2. We process data in accordance with Federal Law No. 152-FZ "On Personal Data" and other applicable laws of the Russian Federation.
3. What Data We Collect
- E-mail and password (for registration and subscription);
- Texts of requests/responses created in the Site interface;
- Files attached to chats and files created in them by AI models — stored together with the chat history;
- Authorization session Cookie (HTTP-only, lifespan — until logging out of the account);
- Technically anonymized logs (IP address, request time) — only for DDoS protection and error diagnostics.
3.1. Authentication via Third-Party Services
We offer authentication through third-party services like Google for user convenience. This may involve transferring minimal data (e.g., email, name) to servers outside Russia, including the USA.
For users in the Russian Federation: To comply with Russian legislation (Federal Law No. 152-FZ), we strongly recommend using local authentication methods such as email/password or Russian services (e.g., VK ID). Using Google authentication is at your own risk and may involve cross-border data transfer. By choosing this option, you confirm that you are aware of and consent to these implications.
We do not encourage or require the use of foreign authentication for Russian users.
3.2. CasperAI App for Windows
If you use the CasperAI app for Windows, it may also process the following data, only to do what you ask it to:
- Microphone audio — in voice mode only. The audio goes through our server to Google (Gemini), which produces the spoken answer; we do not store it. The text of the conversation is saved in your chat history. The wake word is recognized on your computer, and that audio never leaves it.
- Screen images — in voice mode, screenshots and screen sharing are sent to the AI model when you ask about what is on your screen. A screenshot the AI model takes during a chat appears in that chat and is stored with its history.
- Files on your computer — at your request the AI model can find, read, create, change, move and delete files (deleted files go to the Recycle Bin). What it reads is sent to the AI provider and kept with the chat history so that the conversation can continue; a file it adds to the chat is stored there too. Both are deleted together with the chat. Keys, certificates, .env files and cloud credentials are read only after you allow it. Browser profiles, password managers, crypto wallets, messenger sessions, the system's stored credentials and the App's own data are never read.
- Computer control and code execution — at your request the AI model can click, type and run code on your computer; while it controls the computer, it sees screenshots of your screen. The title of the active window is sent to the model so it knows what you are working in. If you turn on remote control (Settings → Data), this can also be started from our site or your phone.
- Device information — a random identifier created when the App is installed and the name of your computer, used to tell your devices apart. Your sign-in and settings are stored on your computer and are removed together with the App.
- Updates — the version from our site checks our server for updates, sending its version number; the Microsoft Store version is updated by the Microsoft Store. When you install the App from the Microsoft Store, Microsoft receives data about the installation under its own privacy statement.
4. Purposes of Processing
- Providing access to the functionality of the AI aggregator;
- Maintaining a history of interactions;
- Processing and renewing subscriptions;
- Compliance with legal requirements (tax and accounting).
5. Storage and Protection
Primary collection and storage of personal data of Users who are citizens of the Russian Federation is carried out on servers located in the territory of the Russian Federation. Subsequently, data may be transferred to other servers to ensure the operation of the Service.
- Data is stored and processed in secure data centers with appropriate safeguards in place to protect your data;
- Data is transmitted via HTTPS;
- Access to the database is restricted to a limited number of employees.
6. Transfer to Third Parties
Data may be transferred only to:
- Payment operators ЮKassa, Stripe (both PCI DSS compliant) for payment processing;
- Third-party API providers of artificial intelligence models to process your requests as part of providing the Service. For the provision of Services, including processing requests using artificial intelligence models, we may transfer User data (including query texts) to such third-party API providers, who may be located outside the Russian Federation. We take necessary measures to ensure adequate protection of your data during such transfer in accordance with Russian Federation legislation. By using the Service, you consent to such data transfer;
- Service providers that help us run the Service: Amplitude (product analytics) and Sentry (error monitoring), on servers in the European Union. They receive technical data on how the Service is used and on errors, which may include your account identifier, e-mail and IP address;
- Authorized state bodies based on a legal request.
Data transfer to AI service providers (OpenAI, Anthropic, Google and others) is carried out for the purpose of providing the Service functionality. The Administration takes measures to anonymize (depersonalize) transmitted requests by removing User technical identifiers before sending to third-party service APIs.
We do not use third-party advertising or analytical cookies.
6.1. Google User Data (Workspace APIs) and Limited Use
If you choose to connect your Google account (Gmail, Google Drive, Google Calendar), the Service accesses your Google data solely to provide features you explicitly invoke: reading and summarizing your emails and attachments, creating email drafts at your request, finding and summarizing your Drive files, and viewing or managing your calendar events.
The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. (Google API Services User Data Policy)
- Google user data is processed only to answer your request — by Casper, the Service’s assistant, and by the AI models it calls for that request — at AI providers whose terms prohibit training on submitted content (such as Anthropic, Google and OpenAI), and is never used to create, train, or improve any machine-learning or artificial-intelligence models;
- Google user data is never transferred to third-party AI providers whose terms allow training on submitted content — our backend programmatically blocks such providers for any conversation that contains data obtained from Google APIs;
- Google user data is never sold and is never used for advertising purposes;
- Humans do not read your Google user data, except with your explicit permission for support purposes, when required for security investigations, or to comply with applicable law;
- You can disconnect Google integrations at any time in Settings → Connections, which deletes the stored access tokens.
7. Storage Periods and Deletion
- Account — until deleted by the user;
- Billing data — 5 years (Art. 54 of the Tax Code of the Russian Federation);
- Query history — until deleted by the user;
- Files in chats — until the user deletes the chat or the account;
A deletion request should be sent to info@comparai.co and will be processed within 10 business days.
8. User Rights
The user has the right to receive information about the processing, demand correction, restriction, or destruction of data.
8.1. Users in the European Economic Area and the United Kingdom
If you are in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or the UK GDPR also applies to the processing of your data. The controller of your data is , contact: info@comparai.co.
We process your data on the following legal bases:
- performance of our contract with you (Art. 6(1)(b) GDPR) — your account, processing your requests, chat history and files, payments, and the App features you use;
- your consent (Art. 6(1)(a) GDPR) — signing in with Google and connecting third-party services; you can withdraw it at any time by disconnecting the service, which does not affect processing that took place before;
- legal obligation (Art. 6(1)(c) GDPR) — tax and accounting records;
- our legitimate interests (Art. 6(1)(f) GDPR) — security of the Service, protection against abuse, error diagnostics and product analytics.
Your data is processed outside the EEA and the United Kingdom: on our servers, including in the Russian Federation, and by the providers listed in section 6, including in the United States. These countries may not provide the same level of data protection as the EEA; we transfer data there only to the extent necessary to provide the Service you use. Storage periods are set out in section 7.
You have the right to:
- access your data and get a copy of it;
- receive the data you provided in a machine-readable format and transfer it to another service (data portability);
- have inaccurate data corrected;
- have your data erased;
- restrict the processing of your data;
- object to processing based on our legitimate interests;
- withdraw your consent at any time.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
To exercise these rights, write to info@comparai.co from the e-mail of your account. We answer within one month.
You also have the right to lodge a complaint with the data protection authority of the country where you live or work, or where you believe your rights were infringed.
9. Changes to Policy
A new version is published on the Site and comes into effect from the date of publication.
