Tuqo terms for site visitors

You are reading this document because you are signing in to a site published on the Tuqo platform (https://tuqo.ru) whose owner has restricted access to it, by an address list (“Email code”), by a channel subscription, by sign-up, by sign-in through MAX or by payment. Here, briefly and without legal fog: who is who, what happens to your data and whom to contact with questions.

1. Who is who

• The site owner is the Tuqo user who hosted the site. The site, its materials and its access rules belong to them. The owner is also the operator of your personal data: they determine why it is collected and are responsible to you for it.
• Tuqo (Individual entrepreneur (sole proprietor) Aleksandr Viktorovich Antonov, TIN (INN) 262517638904) is a software platform for publishing sites. We serve the site, show the login screen, send emails with codes and store members' data on the site owner's instruction (Part 3 of Article 6 of Federal Law No. 152-FZ “On Personal Data”). We have no purposes of our own for processing your data: we do not use it for advertising, do not sell it and do not build profiles from it.

2. What is processed at sign-in

When you sign up or sign in to a gated site, the following is processed:

• email address: the sign-in code is sent to it;
• name: only if the owner has enabled such a field in the form;
• IP address and moment of consent: together with a snapshot of which documents you agreed to (their titles and addresses), this confirms the fact of consent;
• sign-in code: six digits, lives for minutes and is destroyed after use or expiry; there are no passwords at all;
• service pass cookie __Host-tuqo_access: set after a successful sign-in so that you are not asked for a code on every page. It is not accessible to scripts (httpOnly), works only on the domain of that site and is not used for analytics or advertising. For details, see the Cookie Policy.

If sign-in goes through MAX (“MAX users”), you confirm it in the Tuqo bot in the MAX messenger. The site owner will see your MAX name and identifier, the sign-in time and, if they ask for a phone number and you shared it with the button in the bot, a phone number verified by MAX. This list is shown on the login screen and in the bot before you confirm. If you are not on the owner's access list, no member record is created; the owner may get a notification about the sign-in attempt (section 3).

If the site is opened by an address list (“Email code”), your address is added to the list by the owner themselves: there is no sign-up (the owner may ask for consents, see below). At sign-in, the email address, the sign-in code and the session are processed: the moment of sign-in, no more than three devices per address; the session is stored without the IP address (the IP address appears only in the technical serving logs, 14 days). If you try to sign in from an address that is not on the list, the owner will see that address and the number of attempts in their log (30 days from the last attempt), so that they can add the right mailbox; you will receive a neutral response that does not reveal who is on the list.

Special categories of data (health, beliefs, etc.) are not requested by the form. There are never pre-ticked consent boxes: you give each consent yourself.

Consents. The site owner may ask for consents at sign-in: with checkboxes on the login screen, as a separate step or with buttons in the Tuqo bot in MAX or Telegram; in modes with an email code, before the code is sent. The texts are either the owner's own documents at the links or Tuqo's universal texts with the owner's details; you give consent to the site owner, not to Tuqo. What exactly you accepted can be seen from the links on the login screen. The owner's log records your email address or messenger identifier, the time, the IP address and browser, the texts of the items and your ticks; signing in again with the same ticks does not create a new record. You can withdraw consent with the site owner (section 6).

3. What the site owner sees and can do

In their control panel, the owner sees: your email address, name (if you entered it), the time of sign-up and of the last sign-in, and your membership status. The owner can approve or reject an application (if they have enabled application review), block a member, and delete a member's data.

With sign-in through MAX, the owner sees your MAX name and identifier, the phone number (if they asked for it and you shared it), the time of your first and last sign-in and your access status; they can approve a request, block you, delete your data and export the participant list. The pass lasts up to 30 days, on no more than three devices. The Tuqo bot messages you in MAX only about your own sign-in: confirmation, refusal, “request sent” and “access granted”.

Notifications to the owner. The owner may receive notifications about events on their site (a new request, a payment, a sign-in attempt from an address or account not on the list) themselves or through people they have chosen, by email or in a messenger. Your data (address, name, phone number, identifier) is included in such a notification only if the owner has enabled this.

A block is stored without the address. If the owner has blocked a member and deleted their data, what remains in the system is not the email address but its irreversible pseudonym (the result of the HMAC cryptographic transformation): the address cannot be recovered from it, but on a repeated sign-in attempt it can tell that this address was blocked.

In the “Email code” mode, the owner sees the addresses on their list and their labels, how many devices have signed in for each address in the last 30 days (no more than three) and when the last sign-in took place, as well as sign-in attempts from addresses not on the list. By removing an address from the list, the owner closes access immediately.

4. Paying for access

If the owner has enabled paid access:

• the money goes directly to the site owner, under the owner's own acquiring agreement (T-Kassa by T-Bank or YooKassa). Tuqo is not the payee, a payment agent or a party to the transaction between you and the owner;
• the seller is named before payment: the payment screen and the email confirming that access is open state the seller's name, TIN (INN) and email address for enquiries; it is with the seller that you enter into the contract;
• the fiscal receipt and refunds are the obligation of the site owner as the seller. Address questions about payment, receipts and refunds to the owner at the address shown on the payment screen; the “Report” («Пожаловаться») button is there too;
• exercise due care: before paying, check the seller, the description and the terms of access. Payment takes place only on the page of a bank or payment service opened from the site; transfers “to a card number”, in messengers or via third-party links have nothing to do with the platform, and we will not be able to help with them;
• the access period is set by the owner: access is either unlimited (one-time payment) or for a number of days. When you renew, the new period is added to the end of the period already paid for, so paying early does not eat up any days;
• if the payment is refunded, access is closed;
• if the storefront is marked with the word “test” («тест»), the owner is testing the payment setup: no real money is charged in this mode;
• Tuqo does not see or store your card details: card data is entered on the payment provider's page;
• the payment record (amount, date, email address, what was purchased) is kept for 3 years from the payment date, even after the member profile is deleted: it is the financial trail of the transaction, needed for resolving disputes and for accounting.

When access may be closed

• the paid period has expired (for time-limited access); you can renew from the login screen as long as the owner has not stopped sales;
• the payment has been refunded;
• the owner has blocked you, deleted your data or asked for renewed consent to updated documents (access returns once you confirm);
• the owner has deleted the site, changed the access mode or deleted their account; the owner's obligations to those who paid remain with the owner;
• the site has been suspended by Tuqo for a breach of the Terms of Service.

Tuqo does not guarantee the seller's identity, the truthfulness of the seller's promises or the quality of the materials: we are a technical platform. The seller is liable to you for unfulfilled obligations.

If the owner does not respond

Under the Tuqo Terms of Service, the owner must respond to a buyer within 3 business days. If there is no response or the dispute cannot be resolved, write to us using the complaint form, stating the site address, your email address, the date and amount of the payment and the essence of the problem. We will respond within 3 business days: we will give you the seller's details, pass your complaint on to the seller, and if a violation is confirmed (access not provided after payment, a misleading description, prohibited goods being sold), we will disable sales on the site, up to and including blocking it. We cannot return the money: it is with the seller; Tuqo does not have it.

5. Emails

Sign-in codes and access notifications come through Tuqo's infrastructure, but on behalf of the site you are signing in to: the email names the owner's site, not Tuqo. These are service messages only: codes, access status, payment confirmation. We do not send advertising mailings to members' addresses; if the owner wants to write to you themselves, they must obtain your separate consent for this, outside Tuqo.

The sign-up and payment forms are not intended for children or for special categories of data (health, beliefs, etc.); do not enter such information. If you are under 18, agree on paying for access with your parents or legal guardians.

6. Retention and deletion of data

• a member's data is kept for as long as their record exists on the owner's site: until the owner deletes the member and for as long as the site itself exists;
• when a site is deleted, the data of its members is deleted;
• in the “Email code” mode, an address is kept for as long as it is on the owner's list; sign-in sessions: 30 days from sign-in; sign-in attempts from addresses not on the list: 30 days from the last attempt;
• records of your consents are deleted together with your record on the site and with the site itself; if there is no member record (sign-in in the “Subscribers only” mode), 3 years after the last sign-in, or earlier if the owner clears the log;
• deleted data is destroyed from backups automatically, within 30 days at most after final deletion;
• to delete your data or withdraw consent, contact the site owner: they are the operator of your data and delete members from their control panel. If you cannot reach the owner, write to us at support@tuqo.dev; within 3 business days we will pass the request on to the owner without disclosing your data to anyone else; it is the owner who must respond;
• the payment record is kept for 3 years from the payment date, as financial records (section 4).

7. Complaints about a site

If you believe a gated site contains unlawful content, or you were misled when paying, let us know: report content or email abuse@tuqo.ru. We handle complaints about users' sites regardless of whether the site is gated or open.

8. Related documents

Processing of data on Tuqo's side is described in the Privacy Policy; the platform's terms of operation are in the public offer (Terms of Service) (the site owner accepts it on registration). The site owner may also have their own documents: they are listed on the login screen, and you give your consent to them to the owner, not to Tuqo.