1.Who we are
Data operator: Individual entrepreneur Grigoriy Kovrizhnykh, IIN 041110500040, address: 27/5-329 Bukhar Zhyrau Boulevard, Almaty, Kazakhstan.
The Volar service runs on volar.kz. For any question about your data, write to volar.kz.mail@gmail.com.
2.What data we receive
- Account: your email and your name. If you sign in with Google, Google sends them; we do not store your profile photo.
- Consent: the time and the version of the Public Offer Agreement and the policy you agreed to when you created the account.
- Content: video descriptions, links, uploaded logos, photos, documents and references, the settings you choose for a video and revision notes.
- Credits: your balance and the list of operations with them.
- Payments: the amount, date, number and status of a payment and the pack you bought. From the payment provider we may receive a masked card number (the first 6 and the last 4 digits) and the card type. We do not receive or store the full card number, expiry date or CVV code: you enter them on the provider’s page. If you pay against an invoice, we receive the company name, BIN or IIN and the details for the invoice and the certificate of services rendered.
- Invitations: the invitation code and the fact that you signed up through a friend’s link.
- Suggestions: the texts you send in the “Improvements” section. If we publish an entry on the public board, it is shown without your name and email.
- Notifications: if you turn them on, we store your browser’s subscription (a technical delivery address and encryption keys) and your choice of what to be notified about.
- Sign-up survey: who you are (business owner, marketer, agency and so on), how many people are on your team and how you heard about Volar; if you choose “Other”, also the words you wrote yourself. You can skip any question.
- Technical data: IP address, browser type, server logs.
- Usage analytics: our user number (without your email and name), which pages you opened, which links and buttons you clicked, key actions in the service (signing in, sending a description, setting up and creating a video with its length, number of sizes and languages and its cost in credits, credits being added), the options you chose in the survey, the site language, device and browser type, approximate location from your IP address and the ad tag of the visit (for example, UTM). We do not send your email, name, phone number or texts (descriptions, words from the survey, video titles) to analytics. It is collected by the Amplitude service.
- Visit statistics: the site runs through Cloudflare, which may collect anonymous statistics (which pages were opened, from which country, on which device) without cookies.
Voice input. The voice recording goes to our server and to OpenAI, which turns it into text in any language. We receive only the text and do not keep the recording. If OpenAI is unavailable, your browser (Web Speech API) turns speech into text and may send the audio to its speech recognition provider.
3.Why we use it
- Signing you in and keeping your account safe, sending the sign-in code.
- Creating and showing your videos.
- Keeping track of credits and invitations.
- Accepting payments, adding credits, refunds, accounting and tax records.
- Showing your suggestions on the public board of the “Improvements” section and rewarding a useful suggestion.
- Showing created videos in the examples library on the site and in materials about Volar, without your name or email; we remove a video at your request.
- Notifications that a video is ready or an improvement is done, if you turned them on.
- Protecting the site from attacks and failures, understanding which pages are read.
- Understanding how people use the site and the service and improving them (analytics, survey answers).
- Support: answering your messages.
4.Legal basis
We process data with your consent, which you give when you sign up, when it is needed to carry out the Public Offer Agreement, and when the law requires it (payment records). The rules follow the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”.
5.Who receives your data
Only these organizations receive data, and only for the stated purpose:
- CloudflareCountry: USAPurpose: All site traffic goes through Cloudflare: page acceleration (CDN), protection from attacks and visit statistics without cookies (Cloudflare Web Analytics).
- GoogleCountry: USAPurpose: Signing in with a Google account; Gmail, which sends the sign-in codes; Google Fonts: the fonts you can pick in your account load from Google servers, and Google sees your IP address.
- Amplitude Inc.Country: USAPurpose: Analytics: helps us understand how people use the site and the account and improve them. Receives our user number, the pages opened, clicks on links and buttons, key actions (signing in, creating a video, credits being added), the options you chose in the survey, the site language, device and browser type, approximate location from the IP address and the ad tag of the visit (UTM). Your email, name, phone number and the texts of your descriptions are not sent to Amplitude. The data is stored in the USA.
- Hosting providerCountry: KazakhstanPurpose: The servers that run Volar and store your data and files.
- Freedom PayCountry: KazakhstanPurpose: Payment provider: accepts card payments. You enter card details on its page, and it passes us the payment status and the masked card number. The payment is also processed by the bank that issued your card and the provider’s bank under Visa and Mastercard rules.
- Browser push services (Google, Apple, Mozilla, Microsoft)Country: USAPurpose: They deliver notifications to your device, only if you turned them on; your browser picks the service. The text of a notification is encrypted: the service sees the subscription address and the time it was sent.
- Anthropic, OpenRouter, ElevenLabsCountry: USAPurpose: Providers of artificial intelligence and voice-over models, including Google models through OpenRouter. They process your descriptions, materials and voice-over texts only to create your video, not for advertising, and nothing is sold.
- OpenAICountry: USAPurpose: Speech to text for voice input. We do not keep the recording; OpenAI does not use data sent through its API to train models.
- Scrape CreatorsCountry: USAPurpose: If you gave an Instagram link: it receives the profile address and returns its public data (bio, posts, reels, highlights, speech from reels) for the video materials. Your email and name are not sent.
By signing up you agree to your data being passed to these recipients, including outside Kazakhstan, to the USA. The list of recipients is kept here and updated together with this page.
6.Where and for how long we keep it
- Data is stored on the servers of a hosting provider in Kazakhstan that runs Volar.
- Analytics data is stored by Amplitude in the USA and tied to our user number, not to your email or name: when you delete your account your email and name are erased, and this number no longer points to you.
- Your account, videos, uploaded files and credit balance: until you delete the account.
- Payment records and accounting documents: at least 5 years, as the accounting law requires. After you delete the account they are kept without your email and name.
- Sign-in session: 30 days, renewed while you use the service.
- Sign-in codes: valid for 10 minutes, the records are deleted after 24 hours.
- Notification subscription: until you turn notifications off or delete the account; a subscription that the browser has dropped is deleted at the next send.
- Server logs: up to 30 days.
- Database backups: 14 days.
- You can delete your account at any time: what is erased is described in the section about your rights.
8.Your rights
You can access your data, correct it, delete it, withdraw your consent and file a complaint.
- You can delete your account and data yourself with a button in your account. You can also do it by writing to volar.kz.mail@gmail.com.
- Deletion erases your email, name, Google identifier, uploaded files, brand, the words you wrote in the survey, notification subscriptions, unpublished suggestions, drafts and the working folders of your videos. For accounting we keep records without your email and name: the credit log, payment records, the numbers, statuses and amounts of videos paid for with credits, and the survey options you chose. Suggestions already published on the public board stay with their public text and without your name and email. Videos in progress are cancelled without a refund of credits.
- Database backups that still hold the old records are erased within 14 days.
- We answer requests about your data (access, correction, deletion) within 3 working days.
- You can file a complaint about how your data is handled with us or with the authorized state body of Kazakhstan.
Write to volar.kz.mail@gmail.com if you need help.
9.Children
The service is not intended for people under 18.
10.Security
- The connection to the site is encrypted.
- Sign-in codes are stored only as hashes, and no password is used.
- Card details never reach us: the payment provider accepts them on its own page.
- Access to data is restricted.
11.Changes
A new version is published on this page with its date. By continuing to use the service, you agree to the new version.
12.Contacts and details
- Operator: Individual entrepreneur Grigoriy Kovrizhnykh
- IIN: 041110500040
- Address: 27/5-329 Bukhar Zhyrau Boulevard, Almaty, Kazakhstan
- Email: volar.kz.mail@gmail.com
- Phone: +7 747 912 2143
- WhatsApp: +77479122143
- Telegram: @heigen007