Revision 1.1 (2026-08-23) · annex to the Privacy Policy
This list is maintained from the actual code of the service, not from plans. If a provider is not named here, no data goes to it. We announce a new subprocessor in-product or by email before it starts processing data.
Turnleaves is operated by Vadim G. Biktimirov, an individual entrepreneur registered in the Russian Federation (INN 025805298896, OGRNIP 326028000188150), registered address: 75-1 Lesnaya St., Blagoveshchensk, Republic of Bashkortostan 453434, Russia. Operator details may be updated upon registration of the Kazakhstan entity; the current version is authoritative.
| Who | What it processes | Where | Role and basis |
|---|---|---|---|
| DeepSeek (api.deepseek.com) | Your prompts and story context: blueprint, chapter plan, prose of previous chapters, story memory, choices. No account credentials, no payment data. | China | Processor on our instructions; performance of our contract with you (chapter generation). |
| OpenRouter (openrouter.ai) | Text fragments for canon embeddings; illustration prompts (routed to Google Gemini models) and images submitted for vision moderation. | USA (routing to model providers) | Processor; performance of contract (canon search, illustrations) and legitimate interest (moderation). |
| Microsoft (Edge neural TTS) | Paragraph text submitted for speech synthesis. No account identifiers are sent. | USA / global infrastructure | Processor; performance of contract (multi-voice narration). |
| Paddle.com Market Ltd | Purchases outside Russia: buyer email, amount, catalog item, transaction and subscription ids, tax data. Card details are entered on Paddle's side and never reach us. | United Kingdom / EU | Merchant of record — an independent controller for its part of the payment; performance of contract and tax obligations. |
| Robokassa | Purchases in Russian roubles: amount, invoice number, payment status. Card details are entered on the acquirer's side and never reach us. | Russia | Processor / payment provider; performance of contract (public offer) and fiscal-receipt obligations. |
| Cloudflare | Traffic in transit, IP address, request headers, country (CF-IPCountry); caching of public pages. | USA / global network | Processor; legitimate interest in availability and protection against bots and attacks. DNS, CDN and reverse proxy. |
| ALEXHOST SRL | Server hosting: all service data physically resides on the rented machine (PostgreSQL database, story files, media, logs). | Romania | Processor; performance of contract. The provider has no discretionary access to the data. |
| Google (OAuth + People API) | Only if you sign in with Google: account identifier, email, name and — with your permission — date of birth (18+ age gate). | USA / global infrastructure | Your consent (Google sign-in) and performance of contract. |
The codebase contains a disabled ElevenLabs integration stub. It is not enabled on any environment and no data is sent there, so ElevenLabs is not a subprocessor. If that changes, it will appear here before the first byte leaves.
Data export and account deletion are self-service in Profile → “Data & privacy” (see Privacy Policy, section 6). Questions: [email protected].