Mikhail Yakubenko
Zapugali
Checks a website against Russia's personal data law and prepares the documents, so the regulator has nothing to fine.
2026 · SaaS · live · a two-person project
My role: the backend. The site scanner, the document generator, the PDF report, and the Telegram and MAX bots. My partner did the frontend and SEO.
The problem
Fines for personal data violations went up many times over, yet most small sites have no privacy policy, no consent checkbox on their forms, and a Google Analytics tag quietly sending data abroad. Owners find out when a letter from the regulator arrives.
A one-minute scan
You enter a site address and an email. The scanner crawls the pages and runs about twenty checks: policy and consents, form checkboxes, the cookie banner, trackers and cross-border transfer, the regulator's operator registry, SSL, company details and tax ID, the public offer, untranslated foreign words.
Report and documents
The result is a PDF guide: what's wrong and how to fix it, without scaring people where a check couldn't be done. Plus a document generator: privacy policy, processing consent and mailing consent as .docx, for a sole trader or a company, with the details filled in and names properly declined.
A funnel in messengers
Bots in Telegram and MAX hand out the documents after you join the channel, offer a lawyer's Q&A a day later, and collect reviews. Every review is moderated first and then forwarded to the channel as the original message, so you can see it's real.
Under the hood
FastAPI, async SQLAlchemy and PostgreSQL, migrations in Alembic. Scans run in the background on Celery with Redis, WeasyPrint builds the PDF, python-docx the documents. Next.js frontend, aiogram bots, everything in Docker behind Caddy.