Personal Data Processing Policy

This Personal Data Processing Policy defines how the personal data of users of the "TripPQ" web service, located at https://trippq.com, is processed and protected.

This Policy was developed in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data". The purpose of this law is to protect the rights and freedoms of individuals when processing their personal data, including the protection of the right to privacy.

The personal data operator is:

By using the "TripPQ" service, the user confirms that they have read this Policy and understand how their personal data is processed.

This Policy uses the following terms.

Personal data — any information relating directly or indirectly to an identified or identifiable user.

Processing of personal data — any action or set of actions with personal data, including collection, recording, systematization, storage, clarification, use, transfer, depersonalization, blocking, deletion and destruction.

Operator — the person who organizes the processing of personal data and determines the purposes of such processing.

User — an individual using the "TripPQ" web service.

The operator may process the following user data:

• User name or display name.
• Email address.
• Password in a protected form.
• User account data.
• Data about created trips.
• Trip titles, cities, trip dates, selected places, routes and trip parameters.
• Data the user enters when creating a trip from a text query.
• Trip ratings and feedback if the user submits them.
• Technical data automatically transmitted when using the site: IP address, information about the browser, device, access time, actions on the site and cookies.

The operator does not process special categories of personal data, including information about health, political views, religious beliefs, intimate life, race or nationality.

Personal data is processed for the following purposes:

• Registering the user in the service.
• Authorizing the user and providing access to the personal account.
• Creating and storing the user's trips.
• Adding places, building routes and displaying trips.
• Providing a public link to a trip.
• Saving a public trip by another user after signing in or registering.
• Operating the city guides.
• Processing the user's text query to create a trip.
• Displaying partner offers for flights and travel.
• Confirming a change of email address.
• Ensuring the security of the service.
• Handling user inquiries.
• Improving the service and fixing technical errors.

Personal data is processed on the basis of:

• the user's consent to the processing of personal data;
• the need to fulfill the user agreement or provide service functions;
• the requirements of the legislation of the Russian Federation;
• the operator's legitimate interest in ensuring the security and stable operation of the service.

The operator processes personal data using automation tools.

The following actions may be performed with personal data:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• clarification;
• use;
• transfer in cases necessary for the operation of the service;
• depersonalization;
• blocking;
• deletion;
• destruction.

The operator takes the necessary organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure, destruction or other unlawful actions.

The operator does not transfer personal data to third parties, except when such transfer is necessary for the operation of the service, to comply with legal requirements or to protect the operator's rights.

External technical services and partner platforms may be used to operate the service. Data transfer is limited to the amount necessary to perform the corresponding function:

• mapping and geocoding services (OpenStreetMap, Nominatim, Overpass, MapTiler when a key is configured);
• route-building services (OSRM);
• weather data services (Open-Meteo);
• language-model provider for route generation and place descriptions (OpenRouter);
• Have I Been Pwned password safety check (only part of the password hash is sent, not the password itself);
• partner travel and booking services (via outbound links; the operator does not receive purchase data from third-party sites).

Some of the technical services listed in the section on transfers to third parties may process data on servers outside the Russian Federation. By using the service, the user agrees to such transfer to the extent necessary for the corresponding functions to work.

The operator does not sell users' personal data and does not transfer it to third parties for their own advertising use.

Personal data is stored for the period necessary to achieve the purposes of processing, or until the user's account is deleted or consent to the processing of personal data is withdrawn.

After the purposes of processing are achieved, personal data is subject to deletion or depersonalization, unless otherwise provided by the legislation of the Russian Federation.

The user has the right to:

• receive information about the processing of their personal data;
• request the clarification, blocking or deletion of personal data if it is incomplete, outdated, inaccurate or processed unlawfully;
• withdraw consent to the processing of personal data;
• send the operator a request on personal data processing matters;
• appeal the operator's actions or inaction to the authorized body or to court.

To exercise their rights, the user can send an inquiry to the email: info@trippq.com.

The user has the right to withdraw consent to the processing of personal data at any time by sending the operator a corresponding inquiry to the email: info@trippq.com.

After receiving the withdrawal of consent, the operator stops processing the user's personal data, except in cases where continued processing is allowed by the legislation of the Russian Federation.

The service may use cookies and similar technologies to authorize the user, preserve session state, ensure security and the correct operation of the interface.

The user can restrict or disable the use of cookies in the browser settings. In this case, some service functions may not work correctly.

The operator has the right to change this Policy. The new version of the Policy takes effect from the moment it is posted on the site, unless otherwise specified in the new version.

The current version of the Policy is located at: https://trippq.com/privacy

Publication date: 19.08.2026