Sign inTelegram

Privacy Policy

Effective date: 01.01.2026

This Privacy Policy explains what data the IT Abyss platform ("the Service", "we"), available at itabyss.pro, processes and how we use it.

Operator: Kirill Valitskii (individual). Privacy contact: kvalitskiiofficial@gmail.com.

1. Data we collect

  • Account data. On registration — your email address, display name, and (for password login) a password hash. We never store your password in plain text.
  • Third-party sign-in data. When you sign in with Google, Apple, or Telegram we receive from the provider a unique account identifier, email address, name, and (for Google/Telegram) an avatar URL. See Section 4.
  • Subscription & access. Your subscription level and payment status, including the result of a membership check against our private Telegram subscriber group.
  • Interview simulator. Your answers, their evaluation results, session history, and usage statistics. Free-text answers are sent to an AI provider for grading (see Section 4).
  • Resume checker. The text of an uploaded resume and its scan results are kept for 90 days so you can return to a scan, then deleted automatically. The file itself is never stored — it is parsed in your browser and only the text reaches the server. That text is sent to our AI provider for evaluation (see section 4). You can delete a scan at any time from the checker page.
  • Content & activity. Comments on posts, saved materials.
  • Technical logs. When downloading protected materials we record IP address and user agent for leak protection.
  • Newsletter. Your email address, if you subscribe.

2. How we use data

We use data to: provide and operate the Service; authenticate you and keep your session; determine your access level by subscription; grade answers in the simulator; send service emails (email confirmation, password reset) and, with consent, the newsletter; and protect the Service against abuse and content leaks.

We process data to perform our contract (providing the Service), on your consent (newsletter, third-party sign-in), and on our legitimate interests (security, abuse prevention), in accordance with the laws of Georgia.

4. Third-party services (sub-processors)

To operate the Service we share the minimum necessary data with:

  • Google — Sign in with Google. We receive your account ID, email, name, and avatar. Our use of Google user data complies with the Google API Services User Data Policy.
  • Apple — Sign in with Apple. We receive your account ID and, when provided, your email (including an Apple private relay address) and name (first sign-in only).
  • Telegram — sign-in and bot, subscriber-group membership check.
  • AI provider (OpenAI) — grading of free-text simulator answers. Your answer text is sent for evaluation; we do not send your credentials.
  • Payment providers (Tribute, Dodo Payments) — subscription checkout and verification. Tribute is used for the Telegram subscription, Dodo Payments for card payments.
  • File storage (Cloudflare R2) — storage of PDF materials.
  • Email provider (SMTP) — sending service emails.
  • Hosting (Vercel, Railway) — hosting the web app and the backend/database.

We do not sell your personal data.

5. Cookies and local storage

We use the browser's local storage (localStorage) to keep your session token (JWT) and profile so you stay signed in. This is technically necessary for the Service to function.

6. Data retention

We retain data for as long as your account is active and as needed for the purposes above, or as required by law. After you delete your account we delete or anonymize personal data, except where we are required to retain it by law.

7. Your rights

You can: view and update your profile; unlink third-party sign-in methods (Google, Apple, Telegram) in account settings; and delete your account. To the extent provided by applicable law, you may also request access to, rectification, erasure, or portability of your data, and withdraw consent you previously gave. Use the contact above for requests.

8. Security

Passwords are stored hashed (scrypt), API access is token-protected, and data is transmitted over HTTPS. No method of transmission or storage is perfectly secure, but we apply reasonable safeguards.

9. Children

The Service is aimed at a mature, professional audience. It may be used by minors, but it is not specifically directed at children, and we do not knowingly collect children's data beyond what is necessary to provide the Service. If you are a minor, use the Service with the consent of a parent or legal guardian.

10. Changes to this policy

We may update this Policy. We will signal material changes by updating the effective date on this page.

11. Contact

For privacy inquiries: kvalitskiiofficial@gmail.com.