tAIles.me
PERSONAL DATA PROCESSING POLICY
(Privacy Policy)
Version of 25 April 2026
Operator: tAIles.me
Identification details provided upon request: legal@tailes.me
Telegram: @tailesme_support | Website: https://tailes.me | Support: hello@tailes.me
1. General Provisions
1.1. This Personal Data Processing Policy (hereinafter — the "Policy") is drawn up in accordance with the requirements of the legislation of the Republic of Belarus, including the Law of the Republic of Belarus No. 99-Z dated 07.05.2021 "On Personal Data Protection" (hereinafter — the "Personal Data Law"), and determines the procedure for processing personal data and the security measures taken by a citizen of the Republic of Belarus, a natural person registered in the Republic of Belarus (hereinafter — the "Operator").
1.2. The Operator's identification details (full name, Individual Taxpayer Number (UNP), passport data) constitute personal data of a natural person and are protected in accordance with applicable personal data legislation:
Law of the Republic of Belarus No. 99-Z dated 07.05.2021 "On Personal Data Protection" (Articles 6, 8) — general regime;
Federal Law of the Russian Federation No. 152-FZ dated 27.07.2006 "On Personal Data" (Article 6) — for Customers from the Russian Federation;
Regulation (EU) 2016/679 (GDPR), Article 6(1)(f) — for Customers from the European Union.
Such data is provided to the Customer upon a justified written request sent to legal@tailes.me, within 10 (ten) business days from the receipt of the request.
1.3. The Operator's goal is to respect the rights and freedoms of individuals when processing their personal data, including the right to privacy and personal and family confidentiality.
1.4. The Policy applies to all information that the Operator may receive about visitors and users of the website https://tailes.me/ and the Telegram bot @tailesmebot.
1.5. This Policy is governed by the laws of the Republic of Belarus, unless otherwise provided by mandatory rules of the law of the Customer's country of residence.
2. Main Rights and Obligations of the Operator
2.1. The Operator has the right to:
receive from the data subject reliable information and/or documents containing personal data
in the event the subject withdraws consent, continue processing if grounds specified in the Personal Data Law exist
independently determine the composition and list of measures necessary and sufficient to fulfill the obligations provided for by the legislation of the Republic of Belarus
2.2. The Operator is obliged to:
provide the data subject, upon request, with information concerning the processing of their personal data
organize the processing of personal data in the manner established by the legislation of the Republic of Belarus
respond to requests and inquiries from data subjects and their legal representatives
provide the authorized body (NPDPC) with the necessary information within 30 days upon request
publish and ensure unrestricted access to this Policy
take legal, organizational, and technical measures to protect personal data
cease processing and destroy personal data in the cases provided for by the Personal Data Law
3. Main Rights and Obligations of Data Subjects
3.1. Data subjects have the right to:
receive information concerning the processing of their personal data
require the Operator to clarify, block, or destroy personal data if the data is incomplete, outdated, inaccurate, unlawfully obtained, or is not necessary for the stated purpose of processing
require prior consent as a condition for processing personal data for the promotion of goods, works, and services
withdraw consent to the processing of personal data
appeal unlawful actions or inaction of the Operator to the authorized body (NPDPC) or in court
receive a copy of the processed personal data (right of access)
request transfer of personal data in a machine-readable format (right to data portability — for Customers from the EU under the GDPR)
3.2. Data subjects are obliged to:
provide the Operator with accurate information about themselves
inform the Operator about clarifications (updates, changes) to their personal data
3.3. Persons who have provided the Operator with inaccurate information about themselves, or information about another data subject without their consent, shall be liable in accordance with the legislation of the Republic of Belarus.
4. Purposes of Personal Data Processing
4.1. The Operator processes personal data for the following purposes:
identification of the Customer in the Telegram bot to place and execute an order
conclusion, performance, and termination of the paid services agreement (public offer)
personalization of content (creating tales with the name of the Customer's child)
establishing feedback with the Customer, including sending order status notifications
processing information related to payment for the Services through the Telegram payment infrastructure (Telegram Stars)
processing refunds and disputes within the procedures provided for by the public offer and Telegram's rules
technical and customer support
ensuring security and preventing fraud
4.2. The Operator does not independently process the Customer's payment details. All settlements are processed by the Telegram payment infrastructure.
4.3. The Operator has the right to send the Customer notifications about new services and special offers. The Customer may opt out by sending a message to hello@tailes.me or Telegram @tailesme_support with the note "Unsubscribe".
4.4. Anonymized data about Website visits may be used to improve the quality and content of the Website.
5. Legal Grounds for Processing
5.1. The legal grounds for the Operator's processing of personal data are:
the Constitution of the Republic of Belarus
the Civil Code of the Republic of Belarus No. 218-Z dated 07.12.1998
the Law of the Republic of Belarus No. 99-Z dated 07.05.2021 "On Personal Data Protection"
other regulatory acts of the Republic of Belarus concerning personal data protection
Federal Law of the Russian Federation No. 152-FZ dated 27.07.2006 "On Personal Data" — for Customers from the Russian Federation
Regulation (EU) 2016/679 (GDPR) — for Customers from the European Union
the agreement concluded between the Operator and the data subject (public offer)
the data subject's consent to processing
5.2. The Operator processes personal data only when entered by the Customer themselves in the Telegram bot or on the Website. By sending data to the Operator, the Customer consents to this Policy.
5.3. The data subject independently makes the decision to provide their personal data and gives consent freely, by their own will, and in their own interest.
6. Scope and Categories of Processed Data
6.1. Customer's data (parent / legal guardian):
Telegram ID
Telegram username
interface language (selected by the Customer)
time zone (selected by the Customer)
6.2. Data of the minor (Customer's child):
Voluntarily provided by the Customer (parent or legal guardian) when creating the child's profile in the Telegram bot @tailesmebot:
child's name
child's age
child's gender
6.3. The processing of minors' data is carried out exclusively with the consent of the parent (legal guardian). By adding a child's profile, the Customer confirms that they are the parent or legal guardian of the child and consents to the processing of the child's data for the provision of the Services.
6.4. The parent (legal guardian) has the right to request deletion of the child's data at any time by sending a request to hello@tailes.me or Telegram @tailesme_support.
6.5. The Website may also collect anonymized data about visitors using internet statistics services. More details are available in the Cookie Policy.
6.6. Special categories of personal data (racial or ethnic origin, political views, religious or philosophical beliefs, health, or intimate life) are not processed by the Operator.
7. Principles of Personal Data Processing
7.1. Processing is carried out on a lawful and fair basis.
7.2. Processing is limited to the achievement of specific, predetermined, and lawful purposes.
7.3. Processing that is incompatible with the purposes of collection is not allowed.
7.4. Only personal data that corresponds to the purposes of processing is processed.
7.5. Excessive personal data in relation to the stated purposes is not permitted.
7.6. The accuracy and relevance of personal data are ensured. The Operator takes measures to delete or clarify incomplete or inaccurate data.
8. Conditions and Procedure for Processing
8.1. Processing is carried out with the data subject's consent, as well as in cases provided for by the Personal Data Law.
8.2. Processing is necessary for the performance of the agreement (public offer) to which the data subject is a party.
8.3. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, provided that the rights and freedoms of the data subject are not violated.
8.4. The security of personal data is ensured through the implementation of legal, organizational, and technical measures provided for by law.
8.5. The Operator takes all possible measures to prevent access to personal data by unauthorized persons.
9. Transfer of Data to Third Parties
9.1. The Customer's personal data may be transferred to third parties (processors) exclusively for the performance of obligations under the agreement:
Anthropic (USA) — for generating tale texts via the Claude API
Fish Audio — for voicing tales via a TTS service
Telegram (Telegram FZ-LLC) — for delivering messages and processing Telegram Stars payments
Cloudflare (USA) — for storing audio files (Cloudflare R2)
DigitalOcean (USA, AMS3 data center, Amsterdam) — for hosting server infrastructure
9.2. The Operator does not sell, transfer, or disclose personal data to third parties for marketing or advertising purposes.
9.3. Cross-border transfer. Some personal data is transferred to servers located outside the Republic of Belarus (USA, EU) for the technical operation of the Service. The transfer is made with the application of contractual, organizational, and technical protection measures applicable to the respective processors. The Customer is informed of and consents to such transfer upon acceptance of the public offer.
9.4. The Operator is not responsible for the actions of third parties (the service providers listed in clause 9.1) processing personal data in accordance with their public privacy policies. The Customer may review the policies of these services themselves.
10. Retention Periods and Data Destruction
10.1. Personal data is stored in a form that allows identification of the subject no longer than required by the purposes of processing.
10.2. The retention period is determined as follows:
data of an active account — throughout the use of the Service
data after account deletion by the Customer or withdrawal of consent — destroyed within 30 (thirty) calendar days
data related to payments and performance of agreements — for 5 (five) years in accordance with tax and accounting requirements of the Republic of Belarus
audio recordings of tales in Cloudflare R2 — up to 90 (ninety) calendar days from creation, after which automatic deletion occurs
10.3. Upon expiration of retention periods, personal data is destroyed or anonymized automatically.
10.4. The Customer may withdraw consent to processing at any time by sending a notice to hello@tailes.me or Telegram @tailesme_support with the note "Withdrawal of consent to personal data processing".
11. List of Actions with Personal Data
11.1. The Operator performs the following actions with personal data: collection, recording, systematization, accumulation, storage, clarification (update, modification), extraction, use, transfer (provision, access), anonymization, blocking, deletion, and destruction.
11.2. The Operator performs automated processing of personal data using computing resources.
12. Applicable Law and Supervisory Authorities
12.1. This Policy is governed by the laws of the Republic of Belarus, unless otherwise provided by mandatory rules of the law of the Customer's country of residence.
12.2. Personal data protection supervisory authorities:
Republic of Belarus — National Personal Data Protection Centre of the Republic of Belarus (NPDPC)
Russian Federation — Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor)
European Union — national data protection authority (DPA) of the Customer's country of residence
12.3. Applicable regulations:
Law of the Republic of Belarus No. 99-Z dated 07.05.2021 "On Personal Data Protection" — Art. 5 (consent of the subject), Art. 17 (protection measures), Art. 8 (withdrawal of consent, deletion)
Federal Law of the Russian Federation No. 152-FZ dated 27.07.2006 "On Personal Data" — Art. 6 (processing with consent), Art. 7 (confidentiality), Art. 14 (subject's rights)
Regulation (EU) 2016/679 (GDPR) — for Customers from the European Union
13. Final Provisions
13.1. The Service is provided on an "as is" basis. Customers from various jurisdictions bear their own responsibility for compliance with local laws when using the Service.
13.2. The Operator has the right to unilaterally amend this Policy with notice to Customers on the Website and/or in the Telegram bot. The Policy is valid indefinitely until replaced by a new version.
13.3. For general questions on personal data processing, the Customer may contact hello@tailes.me or Telegram @tailesme_support. For questions regarding disclosure of the Operator's identification details — legal@tailes.me.