PalCont Privacy Policy

1. Operator and contacts

Personal data operator and copyright holder: IP Морокин Сергей Владимирович, TIN 543241465060, OGRNIP 326237500403471.

Register of organizers of information dissemination of Roskomnadzor: No. 592-РР from 01.10.2026. Check in the registry

Contacts regarding personal data: palcont@palcont.ru. Appeals in English and from other countries: palcont@palcont.app.

2. What data is processed

• Account and profile: PalCont ID, display name, gender, verified phone number or email, avatar, settings and information that the user adds himself.
• Account access: Information needed to confirm contacts, sign in, restore access, manage active sessions, and provide additional account security.
• Communication and materials: messages, reactions, publications, comments, files, images, audio, video, contacts, stories, channels, groups, complaints and requests.
• Calls: participants, type and time of the call, information about the quality and result of the connection, as well as data necessary to ensure security and consider calls. PalCont does not permanently record conversations.
• Device and network: IP address, version of PalCont and operating system, device type and parameters, session, delivery and failure information necessary for the operation and security of the service.
• Device contacts: information needed to find people you know and send the selected contact if the user has granted permission.
• Website: IP address, time and address of the request, browser type and the result of the web server response. Advertising trackers and analytical cookies are not used on public pages of PalCont.

3. Communication and security

The content of messages and transmitted materials is processed only to the extent necessary for delivery, synchronization, storage, operation of selected functions, consideration of complaints and enforcement of the law.

To prevent abuse and protect users, PalCont may use automated evaluation and verification by an authorized employee. These measures are used only within the stated purposes and the law.

When making calls, the content of the conversation can be processed to prevent dangerous actions. There is no permanent recording of conversations; Material related to a security event may only be retained if there is a reason provided by Policy or law.

The result of the automated assessment is preliminary. A material account restriction will not be applied based solely on such assessment without human review, other than as a necessary emergency temporary measure.

4. Objectives and legal basis

Processing is carried out in accordance with the Federal Law of 27.07.2006 No. 152-FZ “On Personal Data”: article 5 defines the principles and limitation of purposes, article 6 - legal grounds for processing, article 7 - confidentiality, part 5 of article 18 - localization when collecting personal data of citizens of the Russian Federation, article 19 - protection measures. For each purpose, the appropriate basis is applied: consent, conclusion and execution of an agreement, fulfillment of an obligation under the law or a legitimate interest provided for by law without violating the rights of the user. Text No. 152-ФЗ.

Mandatory storage of information about users and electronic messages provided for by law is carried out taking into account Article 10.1 of the Federal Law No. 27.07.2006 No. 149-FZ “On information, information technologies and information protection” and regulations adopted in its implementation. This obligation does not give rise to the right to use information for incompatible purposes. Article 10.1 No. 149-FZ.

• creating and maintaining an account, confirming contact, logging in and restoring access;
• operation of messages, files, calls, synchronization, contacts, channels, groups, stories and other selected functions;
• protecting accounts, users and infrastructure from abuse;
• consideration of complaints and requests, user support, dispute resolution and ensuring stable operation;
• fulfillment of obligations and legal requirements applicable to the operator.

The grounds are the consent of the user, the conclusion and execution of the User Agreement, the exercise of the rights and legitimate interests of the operator or third parties without violating the rights and freedoms of the user, as well as the obligations established by law.

PalPara's profile is published only after the separate consent of an adult user. Turning off the profile stops its further display.

5. Data actions and automated processing

If advertising is shown in the selected section, PalCont takes into account impressions, clicks, hides and complaints, time and location of the event, duration of visibility, account and session IDs and necessary technical information. This accounting is used to operate advertising placements, limit repeat impressions, take into account hidden ads and handle complaints. It does not mean analyzing correspondence or conversations to select advertising.

Within the stated purposes, data may be collected, recorded, systematized, accumulated, stored, clarified, retrieved, used, provided to specific recipients, blocked, depersonalized, deleted, and destroyed.

Automated tools can help identify risks, prioritize review, and apply necessary time limits. If the law or the nature of the measure requires human participation, the decision is reviewed by an authorized officer.

6. Device permissions

Permissions are requested by the Android system when they are needed for the selected action. The denial only affects functions that require appropriate access.

• Contacts — search for friends and send the selected contact.
• Camera and microphone — photos, videos, voice messages, audio and video calls.
• Photos, videos, audio and files — selection, sending and saving of materials.
• Location — sending the user-selected location.
• Notifications and background work — timely delivery of events and display of incoming calls.

Permission can be revoked at any time in the Android settings. The full contact is transferred to another user only when the sender is explicitly selected.

7. Recipients

Users and administrators see information within the selected chat, group, channel, questionnaire, or other function. The material received by the addressee can be stored outside PalCont.

Infrastructure, backup storage, email, contact confirmation and network communication providers receive only the data necessary for the work assigned to them and are required to comply with applicable privacy and security requirements.

Data is provided to government agencies if there is a legal basis and in accordance with the established procedure. Permanent access to data is not provided.

The user must have a legal basis for transmitting personal data and materials of other persons through PalCont.

8. Processing area

Server personal data databases, file storages and backup copies that PalCont uses to store subscribers’ personal data are hosted exclusively on servers physically located in the Russian Federation.

PalCont's obligation to store server bases, files and backups in Russia relates to the service infrastructure. Delivery of a message to a user-selected recipient and the use of an external function are considered separately: in the presence of cross-border transmission, the requirements of Article 12 No. 152-FZ must be met. The localization requirement does not in itself constitute a statement of a complete legal ban on any cross-border transfer.

When collecting personal data of citizens of the Russian Federation, PalCont ensures their recording, systematization, accumulation, storage, clarification and retrieval using databases in the Russian Federation in cases and to the extent provided by law.

Cross-border transfer of personal data is permitted only after compliance with the requirements of the law and if there is an appropriate legal basis.

9. Storage periods and deletion

• account data is stored as long as the account exists and the purpose of processing remains;
• After account deletion, the profile, contacts, login information, sessions, devices and settings are deleted from the active system immediately or no later than 30 days, unless another legal basis applies for individual information;
• messages, publications, comments and associated files are stored for six calendar months from the last confirmed receipt, transmission, delivery or processing; Removal of material does not start this period anew;
• minimum information about the facts of communications is stored for three calendar years from the relevant event;
• information about an unconfirmed security event is stored, as a rule, no more than 90 days; materials of a confirmed case - as much as necessary for consideration, protection of rights and enforcement of the law;
• service records of temporary codes and permits are deleted no later than seven days after the end of their validity, if there is no other basis for storage;
• residual copies of deleted data can be stored in backup copies for no more than seven days and are not used in the normal operation of the service.

Financial, contractual, moderation documents and information necessary for the execution of the law or protection of rights are stored for the periods established for them.

10. User rights

The user has the right to obtain information about the processing, clarify the data, request its blocking or deletion in the absence of a legal basis, withdraw consent, end sessions, download account data and appeal the operator’s actions.

The request is sent to palcont@palcont.ru. To fulfill the request, the operator has the right to verify that the account or confirmed contact belongs to the applicant.

Withdrawal of consent does not stop processing that is required by law or necessary to protect rights. The user has the right to appeal to Roskomnadzor or the court.

11. Data protection

PalCont takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, modification, disclosure, blocking, copying, provision, distribution, deletion and other unlawful actions.

The architecture, configuration, operation rules and other information, the disclosure of which could weaken the protection of PalCont, are considered internal information and are not published, except as expressly required by law.

It is the user's responsibility to protect the device and password, not share verification codes, verify active sessions, and report unauthorized access.

12. Policy Change

The new edition receives a number and date. Significant changes will be communicated to the app or site before they are applied, except changes that must be made immediately by law or to address a security risk.

The original Policy is written in Russian. In case of discrepancies with the translation, the Russian version is used, unless the mandatory provisions of the applicable law provide otherwise.