Natalia Fedorova, an independent software developer and tax resident of the Republic of Cyprus, operates the application “Email AI Parser by NFapps” and its server component.
Contact for any question about data: support@fedorova.app. A request is answered within thirty calendar days, and usually within one business day.
The distinction matters for your rights, so it is stated first.
| Category | Where it comes from | Why |
|---|---|---|
| Sender address, recipient, subject, date, message identifier | The connected mailbox | To recognise a message, avoid duplicates and show the processing log |
| Data extracted from the message body: name, telephone, email, company, order details and other fields configured by the customer | The connected mailbox | To create a lead, deal or contact in the customer’s CRM |
| Mailbox credentials: password or authorisation token issued by the mail provider | Entered by the customer | To read incoming messages. Stored encrypted |
| Authorisation tokens of the Bitrix24 account | Issued by the platform on installation | To create records in the customer’s CRM. Stored encrypted |
| Name, email and telephone of the person who installed the application | The platform | To contact the customer about faults affecting their account |
| Technical logs of requests to the platform | Generated during operation | To investigate faults. Required by the marketplace rules to be kept for at least three days |
The body of a message is not stored. It is read, the configured fields are extracted, and the text is discarded. Nothing is kept beyond the fields listed above.
When a customer connects a mailbox, the application offers to look through the messages already in it and propose a configuration, so that the customer does not have to describe their own message templates by hand. This is the only part of the application that uses a language model.
During that review, a limited number of sample messages — at most forty, one or two per group of similar messages — are sent to a language model provider for classification. Routine day-to-day processing afterwards runs on the rules produced by that review and does not involve a model.
The sample texts are not retained by us after the review ends, and the provider processes them on our instruction without using them to train models. The provider is named in section 5.
Where we act as a processor, the basis belongs to the customer who installed the application — normally performance of a contract or legitimate interest in handling enquiries addressed to their own company. We process on documented instruction and for no other purpose.
Where we act as a controller, for support correspondence, the basis is our legitimate interest in answering a message that was sent to us.
The data is not sold, not shared for advertising and not used to train any model.
Two parties are involved by necessity:
No other recipients. The data is not sold, not shared for advertising and not used to train any model.
Processing takes place on servers located in the European Economic Area. No transfer of customer message data to a country outside the EEA takes place.
On removal of the application from a Bitrix24 account, the retention period depends on the choice made by the person removing it. The platform offers the option “Clear application data” at that moment, and we follow the answer:
Authorisation tokens of the Bitrix24 account are cleared on removal in either case. Technical request logs are kept for 30 days. Earlier deletion on request is always possible — write to the address above.
Under the GDPR you may request access to your data, its correction, erasure or restriction of processing, object to processing, and receive a copy in a machine-readable form. You may also lodge a complaint with a supervisory authority in your country.
If your data reached us through a company that uses the application, address the request to that company first — it is the controller and decides what happens to the data. Write to us directly if that is not possible, and we will assist that company in answering you.
Requests go to support@fedorova.app and are answered within thirty calendar days.
The application is a business tool and is not intended for children. We do not knowingly process the data of children.
The current version of this policy is always published at this address with its version number and date. Where a change affects the categories of data, the retention periods or the parties involved, customers are notified inside the application before it takes effect.