en

Privacy Policy

Last updated: June 27, 2026.

This Privacy Policy (the “Policy”) forms an integral part of the User Agreement of the TabPay service and describes what personal data we collect, how we use and protect it, and what rights you have in relation to that data.

In this Policy, the “Operator” and “we” mean the TabPay service (the legal entity and its details will be specified after registration). “You” means a visitor to the Website (the “Visitor”) and a client who intends to use or already uses our products and services (the “Client”).

By using the TabPay Website and Services, you agree to the terms of personal data processing set out in this Policy. If you do not agree with these terms, please do not use the Website and Services. We may update the Policy from time to time; the current version is always published on the Website.

1. Definitions

  • Personal Data means any information relating to a directly or indirectly identified individual.
  • Processing means any action performed with Personal Data: collection, storage, use, rectification, transfer, deletion, etc.
  • Data Subject means an individual whose Personal Data is processed.
  • Website means the TabPay website; Services means TabPay products and services (card payment acceptance, SBP, recurring payments, mass payouts, etc.).

2. What Data We Collect

2.1. Data you provide yourself

When you fill in an application form or contact us, we may collect: the type of your project and its approximate turnover, your name, email address, Telegram account, a link to the project (website, bot, application), as well as any other information you include in your message.

If you become a Client, we may additionally request the following in order to conclude and perform the agreement: full name, date of birth, address, contact details, company name and details (OGRN or OGRNIP state registration number, INN taxpayer identification number), position, details of an identity document, information on beneficial owners and a settlement account number.

2.2. Data collected automatically

When you visit the Website, we may receive technical data: IP address, cookies, browser type and version (User-Agent), device identifier, screen resolution, date and time of access, the address of the requested page and the referral source, as well as anonymized statistics of actions on the Website.

3. Purposes of Processing

We process Personal Data in order to:

  • process your application, contact you and select terms suited to your project;
  • conclude and perform agreements, provide and support products and services;
  • carry out identification and checks in accordance with the requirements of the law;
  • detect and prevent fraud, money laundering and other unlawful activities;
  • ensure the operation, security and convenience of the Website and Services;
  • respond to inquiries and provide customer support;
  • send informational and marketing messages, subject to your consent.

5. Retention Periods

We retain Personal Data for no longer than is necessary for the purposes of processing, unless a different period is established by law. In certain cases we are required to retain data for legal and regulatory reasons (for example, for the purposes of fraud prevention and compliance with anti-money laundering and counter-terrorist financing (AML/CFT) requirements), even after you stop using our services.

6. Minors

Our products and services are not intended for persons under 18 years of age. We do not knowingly collect Personal Data of minors and ask such persons not to provide their data to us.

7. Disclosure of Data to Third Parties

We may disclose Personal Data to a limited group of recipients:

  • acquiring and issuing banks, payment systems and the operator of SBP (the Russian Faster Payments System), to the extent necessary to process and protect payments;
  • service providers acting on our instructions (hosting, analytics, infrastructure), on a confidential basis;
  • government and regulatory authorities, where provided for by law;
  • an acquirer in the course of a sale or transfer of the business, provided that the acquirer remains bound by the obligations under this Policy.

Personal Data of citizens of the Russian Federation is processed using databases located in the territory of the Russian Federation.

8. Cookies and Analytics

The Website uses cookies to distinguish you from other visitors, remember your settings and improve the operation of the Website. We may use analytics systems (for example, Yandex.Metrica, Google Analytics) to collect anonymized statistics. You can manage cookies in your browser settings; disabling some cookies may limit certain features of the Website.

9. Your Rights

With respect to your Personal Data, you have the right to:

  • receive information about the processing and access your data;
  • request the rectification of inaccurate or incomplete data;
  • request the deletion or blocking of data and the cessation of processing, subject to statutory exceptions;
  • withdraw your consent to processing for marketing purposes;
  • appeal against the actions of the Operator to the authorized body (Roskomnadzor, the Russian data protection authority) or in court.

To exercise your rights, send a request to the contact address specified in the “Contacts” section.

10. Security

Data is stored on secure servers. We apply organizational and technical protection measures: encryption of transmitted data, control and restriction of employee access, compliance of the infrastructure with the PCI DSS standard and support for 3-D Secure. Bank card data is not stored on the merchant's side.

11. Changes to the Policy

We may amend and update this Policy. All changes are published on the Website and take effect from the moment the updated version is published. We recommend that you review this page periodically.

12. Contacts

For questions regarding the processing of Personal Data, please contact us: