UkEnDeRu

Privacy Policy

Last updated: February 8, 2026

1. Introduction

This Privacy Policy explains how ITNET LLC ("we", "us", "our") collects, uses, stores, and protects information when you use the BUSPORTAL platform.

BUSPORTAL is a SaaS platform for managing passenger transportation operations, including bookings, ticket sales, fleet management, and financial reporting.

This policy applies to all users of the Platform, including Licensees (transport companies), their employees, and passengers whose data is processed through the Platform.

2. Data Controller

The data controller is ITNET LLC, EDRPOU 39587884, registered at 72/20 Ch. Kalyny Ave., Lviv 79016, Ukraine. For data protection inquiries, contact us at [email protected].

3. Information We Collect

We collect the following categories of information:

  • Account data — name, email, phone number, company name, provided during registration.
  • Passenger data — full name, contact information, ticket details, entered by Licensees.
  • Usage data — session information, feature usage, browser type, device type (anonymized).
  • Financial data — ticket sales volumes; payment processing is handled by third-party providers.
  • Email data — when the Gmail integration is connected (see Section 7).
  • Cookies — essential and analytics cookies (see Section 5).

4. How We Use Information

We use collected information for the following purposes:

  • Providing and operating the Platform services.
  • Customer support and technical assistance.
  • Security monitoring and fraud prevention.
  • Platform improvement and feature development (excludes data obtained from Google APIs — see Section 7).
  • Anonymous analytics and usage statistics (excludes data obtained from Google APIs — see Section 7).
  • Billing and invoicing.
  • Compliance with legal requirements.

5. Cookies and Tracking

We use essential cookies for session management and language preferences. We also use Google Analytics and Google Ads conversion tracking for marketing purposes.

A cookie consent banner is displayed on the first visit. You may decline non-essential cookies without affecting core Platform functionality.

6. Data Sharing

We do not sell personal data. Data may be shared only with:

  • Infrastructure providers (hosting, CDN) for Platform operation.
  • Payment processors for transaction handling.
  • Law enforcement when required by Ukrainian legislation.

7. Google API Services — Limited Use Disclosure

BUSPORTAL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Gmail integration is designed for connecting a dedicated corporate email account used by the transport company specifically for partner and passenger communication — not a personal email account. When a Licensee connects such a dedicated Gmail account, BUSPORTAL requests the gmail.modify scope to read incoming booking confirmation emails from partner platforms (BlaBlaCar, BusSystem, etc.) and to send PDF tickets to passengers.

Data accessed includes: email messages, labels, and the ability to send emails on behalf of the connected corporate account.

AI processing: Incoming emails from partner platforms are processed by a server-side AI service (acting as a data processor on our behalf) to extract structured booking data (route, date, passenger details). This is real-time processing only — Gmail data is not used to train, improve, or build any machine learning or AI models. The AI service processes email content in memory and does not retain email content after extraction is complete.

Human access: The Licensee's own administrators have full access to emails in their connected corporate mailbox as part of normal business operations. BUSPORTAL technical support staff may access email data only when the Licensee requests troubleshooting assistance or when required for security or legal compliance purposes.

Gmail data is used exclusively to provide the email integration functionality described above. It is NOT used for advertising, retargeting, analytics, platform improvement, or any other purpose unrelated to processing bookings and sending tickets.

Gmail data is NOT sold or transferred to third parties, data brokers, or advertising platforms. Gmail data is shared only with data processors acting on our behalf (infrastructure hosting and the AI processing service) that are strictly necessary to operate the email integration, and these processors are contractually prohibited from using the data for any other purpose.

The Licensee can disconnect the Gmail integration at any time through the admin panel.

Email data is stored only while the integration is active and is deleted upon disconnection.

8. Data Security

We implement the following security measures:

  • HTTPS/TLS encryption for all data in transit.
  • User authentication and role-based access control.
  • Server access controls and monitoring.
  • Regular security updates and patches.
  • Monitoring for unauthorized access attempts.

9. Data Retention

Data is retained for the duration of the license agreement plus 60 calendar days after termination. Daily backups are stored on geographically distributed servers.

You may request data deletion at any time by contacting us at [email protected].

10. Your Rights

In accordance with GDPR and Ukrainian data protection legislation, you have the following rights:

  • Right of access — request a copy of your personal data.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request deletion of your account and data.
  • Right to data portability — receive your data in a structured format.
  • Right to object — object to certain processing activities.
  • Right to withdraw consent — withdraw previously given consent at any time.

11. Children's Privacy

BUSPORTAL is a B2B service not intended for individuals under 16 years of age. We do not knowingly collect data from children.

12. International Data Transfers

Our servers are located in the EU and Ukraine. Appropriate safeguards are applied for any international data transfers in compliance with applicable regulations.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Users will be notified of material changes. Continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Information

ITNET LLC, 72/20 Ch. Kalyny Ave., Lviv 79016, Ukraine. Email: [email protected]. Phone: +380777770349.