1. Data Controller
This Privacy Policy describes what personal data the TandemParty service collects and processes, for what purposes, and how it is protected.
The data controller is Сенников Павел Андреевич, an individual applying the special tax regime 'Tax on Professional Income'.
Personal data is processed in accordance with Federal Law No. 152-FZ 'On Personal Data' and other applicable regulations of the Russian Federation.
2. Categories of Data Processed
Depending on how the Service is used, the Controller may process the following categories of data:
2.1. Data provided by the User voluntarily
- email address (when registering or contacting support);
- name or username specified in the profile.
2.2. Technical data collected automatically
- session identifier (anonymous, randomly generated);
- room identifier;
- timestamps of synchronization events (play / pause / seek);
- extension version and browser type (without device identification);
- IP address in web server logs (stored no more than 14 days).
- data about visited pages, navigation, and actions on the website — only after analytics consent and outside the admin area.
2.3. Payment data
The Controller does not collect or store bank card data. All payment transactions are processed by Робокасса in accordance with their own privacy policy. The Controller only receives payment confirmation and a transaction identifier.
3. Data Processing Purposes
4. Legal Basis for Processing
5. Data Sharing with Third Parties
The Controller does not sell, rent, or transfer Users' personal data to third parties for commercial purposes. Data may be shared only in the following cases:
6. Data Storage & Security
The Controller takes organizational and technical measures to protect personal data:
- data is transmitted via HTTPS/TLS 1.2+;
- databases are isolated from public access;
- access to personal data is restricted by the principle of least privilege;
- backups are stored in encrypted form.
Retention periods
- Account data — for the entire period of Service use plus 1 year after termination;
- Server logs (IP) — 14 days;
- Payment data — 5 years (in accordance with Russian tax law requirements);
- Support data (correspondence) — 3 years;
- Telegram identifier and promotional reward record — until the User deletes their account.
7. Data Subject Rights
In accordance with Federal Law No. 152-FZ, the User has the right to:
- obtain information about personal data being processed;
- request correction of inaccurate data;
- request deletion of data ('right to be forgotten');
- withdraw consent to data processing;
- file a complaint with Roskomnadzor (rkn.gov.ru).
To exercise your rights, send a request to support@tandemparty.com. Response time — 30 days from receipt of the request.
9. Children
The Service is not intended for persons under 14 years of age. The Controller does not knowingly collect personal data from minors. If you become aware that a child has provided their data without parental permission, please contact us at support@tandemparty.com.
10. Policy Changes
The Controller may make changes to this Policy. The current version is always available at https://tandemparty.com/privacy. Users will be notified of significant changes via the official Telegram channel at least 14 days before they take effect.