Privacy Policy

This Privacy Policy (the "Policy") defines how personal data of users of the AI Assistants website (the "Site", the "Service") at https://ai-assistants.uz is processed and protected.

The Policy applies to all information the Operator may obtain about a user while using the Site, including contact forms, consultation requests, AI assistant configuration, and other interactive features.

Policy version: 2026-07-10. Effective date: 10 July 2026.

By using the Site and providing personal data, the user confirms they have read this Policy. If the user disagrees with its terms, they must stop using the Site.

The personal data operator is:

• Full name: Timur Shavkatovich Sharafutdinov
• Status: individual
• Location: Tashkent, Republic of Uzbekistan
• Contact email (general inquiries): timursarafutdinov825@gmail.com
• Email for personal data matters: sarafutdinovtimur96@gmail.com
• Phone: +998 91 352 35 33
• Telegram: @Jesus_is_risen

The Operator processes personal data independently, without forming a legal entity. The Operator does not claim state registration of a personal data database and does not publish taxpayer identification details.

The following terms are used in this Policy:

• Personal data — any information relating to an identified or identifiable natural person.
• Processing of personal data — any action with personal data, including collection, recording, organization, storage, use, transfer, anonymization, blocking, and deletion.
• User — any capable natural person aged 18 or older who uses the Site.
• Cookies — small data fragments stored by the browser on the user's device.
• AI assistant — a software module based on artificial intelligence technologies designed to automatically process user requests within the Service functionality.

The Operator processes personal data based on the following principles:

• lawfulness, fairness, and transparency;
• processing for specific, predetermined, and lawful purposes;
• data minimization — collecting only information necessary for stated purposes;
• accuracy and relevance of personal data;
• storage limitation;
• ensuring appropriate data security.

Processing is carried out in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan "On Personal Data" dated 2 July 2019 No. ZRU-547 and other applicable regulations.

Depending on the Site functionality used, the Operator may process the following categories of data:

• identification data: first name, last name, patronymic (if provided);
• contact data: email address, phone number, Telegram identifier;
• inquiry data: message text, form submissions, consultation content;
• technical data: IP address, browser and operating system type, interface language, visit date and time, referral source;
• cookie and similar technology data;
• AI assistant configuration data: scenarios, prompts, configuration parameters provided by the user;
• other information the user voluntarily provides in Site forms.

The Operator does not request or process special categories of personal data (racial or ethnic origin, political views, religious beliefs, health status, biometric data) unless the user voluntarily includes such information in an inquiry.

The public Site does not currently separately store: live AI conversation history, documents uploaded through a public upload feature, voice-call recordings, medical records, biometric or genetic data, or payment-card details. Job title is not requested separately and may appear only in a free-form comment.

If future AI chat history, uploaded documents, call recordings, or employee/customer CRM or payment data processing is enabled, the relevant client will receive additional information and, where required, a separate agreement or consent before processing begins.

Personal data is processed for the following purposes:

• providing access to Site and AI assistant functionality;
• processing applications, inquiries, and consultation requests;
• communicating with the user regarding use of the Service;
• configuring, testing, and improving AI assistants;
• ensuring Site security and preventing abuse and fraud;
• maintaining internal records of inquiries and usage statistics;
• complying with requirements of the legislation of the Republic of Uzbekistan;
• handling requests from personal data subjects.

As of the publication date of this Policy, paid subscriptions and payments through the Site are not active. When payment features are launched, the Operator will update the Policy and specify additional purposes and data categories related to billing.

Personal data is processed on the following legal grounds:

• consent of the personal data subject;
• necessity of processing to fulfill arrangements with the user when using the Service;
• legitimate interests of the Operator in ensuring Site operation and security, provided user rights are not violated;
• compliance with obligations established by the legislation of the Republic of Uzbekistan.

Separate consent for personal data processing is provided in accordance with the "Consent to Personal Data Processing" document published on the Site.

Personal data is provided voluntarily by the user through:

• completing forms on the Site (applications, consultations, assistant configuration);
• sending messages by email, phone, or Telegram;
• interacting with AI assistants through the Service interface;
• automatic collection of technical data when visiting Site pages.

The user is responsible for the accuracy of provided data. The Operator may request clarification if there are grounds to believe the data is incomplete or inaccurate.

The Site uses cookies and similar technologies to ensure proper operation, save user preferences (including interface language), and analyze anonymized visit statistics.

The following types of cookies may be used:

• strictly necessary — for basic Site operation and session security;
• functional — to remember user preferences;
• analytical — to understand how the Site is used in anonymized form.

The user may restrict or disable cookies in browser settings. Disabling strictly necessary cookies may affect availability of certain Site features.

Personal data is stored on servers located in the Republic of Uzbekistan. Hosting provider: Eskiz (Uzbekistan).

Service databases are hosted in PostgreSQL on infrastructure physically located in the Republic of Uzbekistan.

The Operator takes measures to ensure processing and storage of personal data comply with localization requirements established by the legislation of the Republic of Uzbekistan.

Personal data is stored no longer than necessary for processing purposes, unless a different period is required by law:

• consultation and lead data for people who do not become clients — up to 12 (twelve) months after the last meaningful interaction, then deletion or irreversible anonymization unless longer storage is required by law or for an active dispute;
• active account data — while the account remains active; after an account deletion request, data that is no longer required is deleted or anonymized; data needed to resolve claims, prove consent, prevent abuse, or comply with legal obligations may be kept for up to 3 (three) years after account closure or another legally required period;
• client and contract data — during the client relationship and after completion only for the period required for contracts, accounting, taxation, claims, and other applicable legal obligations;
• consent records — while the related data is processed and for up to 3 (three) years afterward when necessary to demonstrate the legal basis or resolve a dispute;
• technical and security logs — up to 90 (ninety) days unless a longer period is reasonably required to investigate a security incident, fraud, or abuse;
• future AI chat history — not currently stored; if enabled, the default future retention should not exceed 30 (thirty) days unless another period is agreed and documented;
• future voice recordings — not currently stored; if enabled, the default future retention should not exceed 90 (ninety) days unless another period is established by a separate agreement;
• future uploaded documents — not currently collected through the public site; their retention must be defined in the relevant client agreement and limited to the project's actual purpose.

Data may be deleted earlier when the purpose has been achieved, consent is withdrawn and there is no other lawful reason to continue, or processing is found to be unlawful.

The Operator does not sell personal data or disclose it to third parties except as provided in this Policy and by law.

Data may be disclosed:

• to hosting provider Eskiz — to the extent necessary to host and operate the Site;
• to government authorities — upon lawful and justified request in accordance with the legislation of the Republic of Uzbekistan;
• to other parties — only with user consent or another lawful basis.

When engaging processors, the Operator ensures appropriate confidentiality and personal data protection agreements are in place.

As of the publication date of this Policy, the Operator does not carry out cross-border transfer of users' personal data for processing using foreign large language model (LLM) services or other foreign platforms.

Processing of AI assistant requests is performed without transferring personal data outside the Republic of Uzbekistan under the current Service configuration.

If the technical architecture changes and cross-border transfer occurs, the Operator will update this Policy in advance, notify users, and request additional consent where required by law.

The user has the right to:

• receive information about processing of their personal data;
• request correction, blocking, or deletion of personal data if it is incomplete, outdated, inaccurate, or unlawfully processed;
• withdraw consent to personal data processing;
• restrict processing in cases provided by law;
• appeal actions or inaction of the Operator to an authorized government body or court.

To exercise these rights, the user may send a request to sarafutdinovtimur96@gmail.com, indicating full name, contact details, and the substance of the request. The review period is up to 30 (thirty) calendar days unless a different period is established by law.

The Operator may request additional information to verify the applicant's identity to protect personal data from unauthorized access.

The Operator applies organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, and distribution.

Such measures include, in particular:

• restricting data access on a need-to-know basis;
• using secure data transmission channels (HTTPS);
• regular software updates and backup;
• storing data on servers in the Republic of Uzbekistan;
• internal control of inquiries containing personal data.

Despite these measures, the Operator cannot guarantee absolute security of data transmitted over the Internet. The user must also take precautions when using the Site.

The Site is intended for persons aged 18 or older. The Operator does not knowingly collect personal data of minors. If such data is identified, it will be deleted.

The Operator may amend this Policy. The current version is always available on the Site with the update date indicated. Continued use of the Site after publication of changes constitutes acceptance of the updated version unless otherwise required by law.

For all questions regarding this Policy, contact:

• Email (privacy): sarafutdinovtimur96@gmail.com
• Email (general inquiries): timursarafutdinov825@gmail.com
• Phone: +998 91 352 35 33
• Telegram: @Jesus_is_risen