AzerGid Privacy Policy
Version dated 13.10.2026.
Personal data controller: “AZERGİD” MMC (LLC), VÖEN 1807486201, AZ1097, Baku, Sabunchu district, Nardaran, 2nd Dalan, M3, apt. 356. E-mail for personal data matters: support@azergid.com.
We process personal data in accordance with the Law of the Republic of Azerbaijan “On Personal Data”.
1. What data we collect
1.1. Site visitors
- Cookies, technical only: account login (WordPress); cart and session (WooCommerce); selected language (
pll_language); chat session (azg_chat— a random identifier for 30 days). - There are no advertising or analytics cookies, pixels, external fonts or maps on the Site. Therefore no separate cookie consent banner is shown.
1.2. Customers
| When | What data |
|---|---|
| Registration and profile | e-mail, password (stored in encrypted form), first name, last name |
| Booking | first name, last name, phone, e-mail, booking comment; what was booked and for which dates; payment amount and status |
| Payment | from the payment provider we receive the payment status, amount and its identifier. The card number, expiry date and CVC are entered on the provider’s page and never reach our server. Card saving is not used |
| Service requests | text of the request, questionnaire answers. In migration categories — citizenship, residence status, date of entry, family composition. Document numbers are not asked for in the questionnaire. Files uploaded by you (scans, photos; pdf/jpg/png, up to 10 MB, up to 10 files) |
| Chat assistant | messages; language; the page you are writing from; access level (guest, logged in, customer with a booking); e-mail — if you left it for the operator |
| Complaints and disputes | text of the complaint or remarks, operator’s decision |
| Air tickets | passengers’ first and last names in Latin letters, date of birth, gender, citizenship, document number and expiry date — passed to the air ticketing Partner and the carrier and not stored on the Site. We store: passengers’ names, the buyer’s e-mail and phone, booking number, status, amounts, ticket numbers |
| Jobs | job application: first and last name, e-mail, phone, CV, cover letter |
1.3. Partners and service providers
| Partners | What data |
|---|---|
| All | e-mail, phone, first name, last name, display name, avatar; bank details for payouts (in the profile) |
| Car rental: questionnaire | contact person, phone, e-mail, city, company, number of cars, comment. At the moderator’s request — up to 3 documents (jpg/png/webp/pdf, up to 5 MB); stored in a closed directory |
| Accommodation, transfers, tours, salons | data of properties and services: address, photos, prices. For transfers — driver’s full name and phone, number plate. For tours and salons — phone of the guide or administrator |
| Service-request providers | name or full name, form (sole proprietor / legal entity), cities, languages, documents for verification (visible only to the operator), category history, number of refusals after payment (visible to customers) |
2. Why and on what basis we process data
| Purpose | Basis |
|---|---|
| Place and fulfill a booking or service request: pass what is needed to the Partner, send e-mails | performance of the contract with you |
| Accept payment, process a refund, calculate the Partner’s payout and the commission | performance of the contract; tax and accounting obligations |
| Verify Partners and their offers (moderation) | contract with the Partner; legitimate interest in the security of the Site |
| Review complaints and disputes | performance of the contract |
| Answer questions in the chat and hand the conversation over to an operator | your consent (use of the chat) |
| Translate the texts of Partners’ offers into the Site languages (ru, az, en, zh) | contract with the Partner |
| Protect the Site: request limits in the chat. The IP address is stored only as a hash, for 2 minutes | legitimate interest |
The Site does not send marketing mailings. You give consent to data processing by a checkbox at registration and at checkout; it can be withdrawn (Section 6).
3. To whom we disclose data
| To whom | What | When |
|---|---|---|
| Payment provider (acquiring bank, Azerbaijan) | amount, currency AZN, order number, language of the payment page. Name, phone and e-mail are not passed to the provider | at payment |
| The Partner under your booking | see table 3.1 | after payment or hold |
| Service-request provider | before payment — the request without name and contacts: phones, e-mails and links in the text are masked automatically. After payment — name, phone, e-mail and files. A file marked “may be shown before selection” is visible to the providers who have submitted bids while bids are being collected | before and after payment |
| Anthropic PBC (USA) — AI assistant | your messages (card numbers, IBANs, codes, card expiry dates, document numbers and phones are masked before sending), conversation history, Site page; your booking data if you are logged in or have opened the link from the e-mail: property, dates, guests, amount, status. The assistant does not receive the exact address of the accommodation or the contacts of the driver and guide | when using the chat |
| Anthropic PBC (USA) — automatic translation; backup — Microsoft Ireland Operations Ltd (EU), Azure Translator | texts of Partners’ offers: title, description, district, meeting point | when an offer is published |
| AzerGid support operator | conversation summary, order number, e-mail for reply | when “Call an operator” is pressed |
| Air ticketing Partner (Ukraine) and the carrier airlines | passenger data and buyer contacts — to issue, refund and change tickets. The ticket is paid on the Partner’s payment provider page: the card number never reaches the Site | when buying an air ticket |
| Employer for the vacancy | your application: name, contact details, CV, cover letter | when you apply |
| Hosting — DigitalOcean, LLC (USA), servers in a data centre in Frankfurt (Germany); backups — encrypted storage Oracle Cloud Infrastructure (USA, Phoenix region) | all Site data | continuously |
Cross-border transfer. Data for the AI assistant and automatic translation is processed on the servers of Anthropic (USA) and Microsoft (EU); backups are stored with the provider stated above. The transfer is made with your consent (checkbox at registration or checkout, use of the chat) and under contracts with the providers: the data is used only to fulfill the request and is not used for training models. Air ticket passenger data is transferred to the air ticketing Partner (Ukraine) and to carriers in their country of registration — this is necessary to perform the contract of carriage.
3.1. What the Partner receives
| Section | What the Partner sees |
|---|---|
| Car rental | customer’s name, phone, e-mail, comment — after payment of the prepayment |
| Accommodation | dates, number of guests. The customer’s name and contacts are not passed to the property owner |
| Transfer | pickup time, route, number of passengers. The customer’s contacts are not passed to the carrier |
| Tour | customer’s first name, last name, phone, number of participants — after payment or hold |
| Salon | customer’s name and phone — after payment or hold |
| Service request | see the table above |
4. How long we keep data
| Data | Period |
|---|---|
| Service request files | deleted 30 days after the request is completed or closed; if a dispute is open — 30 days after it is closed |
| Documents of service-request providers and Partner questionnaires | 12 months after the decision on the category or questionnaire, then deleted |
| Chat correspondence without operator requests | 90 days from the last message |
| Correspondence with an operator request | 90 days after the request is closed; the request record without correspondence and e-mail is kept |
| Chat usage accounting (without texts) | 13 months, then monthly totals only |
| Chat cookie | 30 days |
| Orders, payments, payment event log, payout accruals, payouts | 5 years from the end of the year of the transaction (tax and accounting), then anonymized |
| Account | until deletion at your request; an account with no login for 3 years is deleted after 30 days’ notice |
| Backups | daily — 14 copies, weekly — 8 copies (about 8 weeks); encrypted |
| Air tickets: buyer’s name, e-mail and phone, passengers’ names | anonymised 12 months after the departure date |
| Air tickets: booking number, amounts, ticket numbers | 5 years (reconciliation with the Partner, accounting), then deleted |
| Job applications | 12 months after sending, then deleted; the employer keeps the application under its own rules |
5. How we protect data
- The card number never reaches our server: payment takes place on the provider’s secure page.
- Service request files and Partner documents are stored in a closed directory outside web access: access only via a one-time link with permission verification; every opening is logged (who, when, which file, whether allowed); there are no public links or thumbnails.
- In the chat, card numbers, codes and document numbers are masked before being sent to the AI and before being written to the database.
- Contacts in service requests and bids are masked until payment.
- The chat session and IP address are stored only as a hash.
- Backups are encrypted; server access is by keys, limited to a restricted circle of employees.
6. Your rights
6.1. You have the right to request: what data of yours we store; correction; deletion; withdrawal of consent; restriction of processing. Requests — to the e-mail support@azergid.com. We respond within 7 business days and fulfill the request within 30 days. To verify your identity, we may ask you to confirm the account e-mail.
6.2. You can change your name, e-mail and password yourself in the profile.
6.3. Deletion of the account and chat correspondence is performed on request; you can also delete the chat correspondence yourself with the “Clear chat” button in the widget.
6.4. Data required for payment accounting and for fulfilling obligations to state authorities is retained for the period set out in Section 4 even after the account is deleted, in anonymized form where possible.
6.5. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal or data whose processing is based on a contract or a legal requirement.
7. Children
The Site is intended for persons over 18 years of age. We do not knowingly collect children’s data; if you believe a child has provided us with data, write to the e-mail in Section 6 — the data will be deleted.
8. Changes to the Policy
The new version is published on the Site with an effective date at least 7 days in advance; users with an account receive an e-mail. Material changes to the purposes or recipients of data require new consent, which is requested at the next login or checkout.
The Policy is available in Azerbaijani, Russian and English; in case of discrepancy, the Azerbaijani version prevails. The Chinese translation is for reference only.