Privacy Policy

• The personal data operator is a natural person acting on behalf of the RouteSense service (the "Operator").
• The Operator's location: Moscow, Russian Federation.
• Contact for inquiries concerning personal data processing, the exercise of data subject rights, and the submission of requests: routesense@npv.tg.

• RouteSense is an internet traffic routing service that provides users with a secure connection to the Internet and access to web resources through a chain of proxy servers.
• The service is provided through a bot in the Telegram messenger (bot.routesense.cc) and the associated web pages.

The scope of the data depends on how exactly the User registers and uses the service. All categories of data that may be processed are listed below:

3.1. Account Identifiers

• The user's identifier in Telegram (Telegram ID) — the primary unique identifier.
• The Telegram username — if the User has one set.
• The name specified by the User in their Telegram profile (first name, last name).
• Email address — if the User provided it when purchasing a paid subscription.

3.2. Payment Data

• Information about completed payments: amount, date, selected plan, and the payment system's transaction identifier.
• The Operator has no access to the details of the User's payment instruments (bank card number, CVC code, etc.). These details are processed exclusively by the payment system and are not shared with the Operator.

3.3. Technical Usage Data

• The amount of traffic consumed — to enforce the limits of the free plan and to display statistics to the User.
• The number of simultaneously connected devices — to calculate the subscription price and enforce plan limits.

RouteSense is a traffic routing service and adheres to the principle of data collection minimization (no-logs). The Operator does not collect, store, or analyze:

• The content of the traffic transmitted through the service.
• Logs of the websites visited by the User or the addresses of destination resources.
• The User's DNS queries.
• The User's IP address from which the connection to the service is made.
• Activity history within the connection.
• Biometric data.
• Information about race, ethnicity, political views, health, or other special categories of personal data.

Technically, most of the User's connections are established using cryptographic protocols (TLS, Reality, and similar), under which the content of the traffic is inaccessible to the Operator even at intermediate network nodes. The Operator has no technical ability to decrypt or inspect the transmitted data.

• The service uses a distributed server infrastructure located both within and outside the Russian Federation.
• Servers within the Russian Federation serve as entry nodes and do nothing other than relay encrypted traffic to the exit servers. They have no technical ability to decrypt the content of the traffic, determine the destination addresses of requests, or keep logs of user activity.
• User account data (identifiers, payments, plan parameters) is stored in the Operator's single secured database.

• User identification and authentication — the Telegram ID and related data are used to sign in to the account dashboard and to link the subscription.
• Service provision — the plan parameters and the number of devices are required for the technical operation of the service.
• Billing and payments — payment data is used to confirm payment and activate the subscription.
• User support — correspondence with support, including via email, is used to resolve the User's inquiries.
• Limit enforcement — the traffic volume and the number of devices are used to enforce the terms of the selected plan.
• Legal compliance — certain categories of data may be processed to the extent necessary to fulfill obligations imposed on the Operator by applicable law.

• The User's consent to the processing of personal data, expressed through implied (conclusive) actions (registering in the bot, using the service).
• The conclusion and performance of a contract (public offer) to which the User is a party.
• The fulfillment of obligations imposed on the Operator by applicable law.

• Account identifiers, technical usage data, and details of the current subscription are stored for as long as the User's account exists.
• Payment records are stored for the period established by law for accounting and tax purposes (as a general rule, at least five years from the date of the payment).
• Support correspondence is stored for no more than one year from the last inquiry, after which it is deleted.
• When the User's account is deleted, their personal data is deleted or anonymized within thirty calendar days, except for records that must be retained by law.

The Operator does not sell, rent out, or transfer the User's personal data to third parties, except in the following cases:

9.1. Payment Systems

When paying for a subscription, the payment data is processed by the payment system chosen by the User:

• WATA.pro — for payment by bank card and Russian payment methods.
• Heleket — for payment in cryptocurrency.
• Telegram Stars — for payment in Telegram's internal currency.

Each of these systems processes payment data independently in accordance with its own privacy policy. The Operator shares with the payment system only the minimum information necessary to process the payment.

9.2. The Telegram Messenger

• The service is provided through the account dashboard (bot.routesense.cc); one of the sign-in methods is via Telegram.
• When signing in via Telegram, the identifiers of the User's Telegram account are received by the Operator directly from Telegram.
• The processing of this data within Telegram is governed by the privacy policy of Telegram Messenger Inc.

9.3. State Authorities

• The Operator may disclose the User's personal data upon a reasoned request from authorized state authorities in cases expressly provided for by the legislation of the Russian Federation.

• The Operator applies technical and organizational measures to protect personal data, including encryption in transit and at rest, access control, and regular software updates.
• Access to personal data is limited to a narrow circle of persons who need it to perform their duties in operating the service.
• The User undertakes to independently ensure the security of their Telegram account, through which the service is accessed.

• The service's web pages use the browser's local storage (localStorage) solely to remember the User's interface preferences (the selected color theme — light or dark).
• No tracking cookies, advertising cookies, or third-party trackers are used on the service's web pages.
• On devices running Windows, a font is loaded from the public jsdelivr.net CDN to correctly display emoji flags; the request contains only the information normally transmitted by a browser (User-Agent, the requesting IP address). The Operator does not transmit any other data through this CDN.
• The User may clear the browser's local storage at any time via the browser settings; this will not affect the operation of the service.

In accordance with Articles 14 and 21 of Federal Law No. 152-FZ "On Personal Data", the User has the right to:

1. Obtain information on whether the Operator processes their personal data, as well as on the categories of data processed and the purposes of processing.
2. Demand that their personal data be corrected, blocked, or destroyed if it is incomplete, outdated, or was obtained unlawfully.
3. Withdraw consent to the processing of personal data. Withdrawal of consent results in the termination of processing and the deletion of the data, except where processing must continue on grounds provided for by law.
4. Appeal against the Operator's actions or inaction to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor) or in court.

• The User may delete their account at any time via the RouteSense bot in Telegram (the "Profile" → "Delete account" section).
• Alternatively, the User may send an account deletion request to routesense@npv.tg from the same email or Telegram account to which the account is linked.
• When the account is deleted, the processing of the User's personal data ceases and the data is removed from the active database within thirty calendar days, except for data that must be retained by law (for example, financial records of payments).

• The service is not intended for use by persons under the age of 16. The Operator does not knowingly collect the personal data of persons below that age.
• If the Operator becomes aware that the data of a person under 16 is being processed, such data is deleted.

• The Operator may amend this Policy. The current version is always available at npv.tg/en/privacy/.
• The Operator notifies Users of material changes to the Policy through the bot in Telegram at least 7 (seven) calendar days before they take effect.
• Non-material changes (correcting typos, clarifying wording without changing the substance) may be made without separate notice.