Consent to the processing of personal data

By ticking “I give consent to the processing of personal data” in the Tuqo control panel, I, a user of the Tuqo service (https://tuqo.ru), freely, of my own will and in my own interest, consent to the processing of my personal data on the terms below (Article 9 of Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”). This consent is given separately from the Terms of Service and the Privacy Policy, which I accept by a separate action.

1. Operator

Individual entrepreneur (sole proprietor) Aleksandr Viktorovich Antonov, TIN (INN) 262517638904, OGRNIP 312265133100116, address: 52/359 Skachkova St., Rostov-on-Don, Russia (the “Operator”). Contact for personal data matters: support@tuqo.dev.

2. Purposes of processing

• registering and maintaining the account, signing in to the control panel (including via Yandex ID and VK ID);
• providing hosting services under the Terms of Service: projects, sites, deploys, domains, forms, gated access, the API and MCP;
• communicating with me: service emails and notifications, replies to support requests;
• accepting payments and issuing receipts for paid plans and add-ons;
• tracking referrals and rewards in the partner program, if I take part in it;
• keeping the service secure and preventing abuse;
• web analytics of the control panel to improve the service (Yandex Metrica, including session recording) — only if I have given separate consent to it;
• sending Tuqo promotions, special offers and news — only if I have given separate consent to it.

Consents to analytics and to the mailing are optional: each is given with its own checkbox at sign-up and can be turned on or withdrawn at any time with a switch in the profile. Refusing them does not affect the services.

3. Personal data covered

• email address, name (as provided by the OAuth provider or by me), profile picture;
• identifiers of the Yandex and VK accounts linked for sign-in;
• password hash (the Operator does not store the password itself), time zone and interface language;
• identifiers of linked messengers (Telegram, MAX), if I have linked them, and the contents of notifications sent to them;
• technical data: IP address, browser and device details (user agent), date and time of actions, cookie data, details of actions in the control panel and, with consent to analytics, Yandex Metrica identifiers and session recordings;
• contents of support requests and files attached to them;
• payment data as received from the acquiring bank: amount, date, status, masked card number (full card details are not transferred to the Operator);
• details of my projects, sites, domains, deploys, API keys and actions with them;
• the fact, date, time, IP address and document version when consents are given and withdrawn.

Special categories of personal data and biometric personal data are not processed.

4. Actions with the data and methods of processing

Collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), anonymization, blocking, deletion and destruction of personal data, with and without automation. Personal data is stored on servers in the Russian Federation.

5. Who the data may be transferred or entrusted to

• TIMEWEB.CLOUD LLC (TIN 7810945525): servers, databases and object storage, on the Operator's instruction;
• YANDEX LLC (TIN 7736207543): sign-in via Yandex ID and, with consent to analytics, Yandex Metrica web analytics (cookie identifiers, IP address, browser details, actions in the control panel, including session recording);
• VKontakte LLC (TIN 7842349892): sign-in via VK ID;
• the Telegram and MAX messengers — if I have linked a messenger myself: to deliver notifications and submissions from my sites;
• the acquiring bank and the fiscal data operator: to accept payments and issue receipts;
• authorized government bodies: in cases provided for by law.

6. Term and withdrawal of consent

The consent is valid until the account is deleted or the consent is withdrawn. It can be withdrawn at any time by email to support@tuqo.dev or a support request from the control panel. Consents to analytics and to the mailing are withdrawn separately, with the “Dashboard analytics” and “Promotions, special offers and news” switches in the profile, without affecting other services.

After withdrawal the Operator stops the processing based on consent and destroys that data within 30 days. Processing that does not require consent — performing the contract (the Terms of Service), complying with tax and accounting laws, protecting the Operator's rights — continues within those grounds (Part 2 of Article 9, clauses 2–11 of Part 1 of Article 6 of Federal Law No. 152-FZ); retention periods are given in section 7 of the Privacy Policy. To stop that processing too, delete the account in the profile — this means refusing the services.

7. Proof of consent

Consent is given by ticking a separate checkbox in the control panel; no checkboxes are pre-ticked except for consents I have already given. The Operator records the date and time of the consent, the IP address, browser details and the document version to prove the fact of consent. My rights as a data subject are described in section 8 of the Privacy Policy.