Privacy Policy

Document status: working legal template. Before publication, fill in the details, verify the actual service architecture, and have the text reviewed by a lawyer practicing in the Republic of Uzbekistan.

Service owner: [LEGAL ENTITY NAME], TIN [TIN], address: [ADDRESS].
Service: Belgi.ai, [DOMAIN].
Version: [VERSION NUMBER] dated [DATE].
Contacts: [EMAIL], [PHONE].

1. Roles and scope

The Owner is the operator of the personal data database in relation to visitors, users and client representatives. This Policy applies to the website, personal account, API, support communications and the application-support feature. Where a corporate client determines the purposes of processing data of its employees or customers, the parties’ roles are additionally set out in a data processing agreement.

2. What data is processed

Identification and contact data; account and organization data; applicant and representative information; uploaded signs and documents; selected classes and lists; payment statuses without storing full bank card details; IP address, device, activity logs, cookies; support correspondence; check results and applications.

3. Purposes

Registration and authentication; provision and payment for services; generating check results; preparing and supporting applications; fraud prevention; support; compliance with law, accounting and tax duties; quality improvement based on aggregated or anonymized data; marketing only where a separate legal basis exists.

4. Legal bases and consent

Processing is carried out to perform a contract, fulfil legal duties, protect the Owner’s rights and with the data subject’s consent where required. Withdrawal of consent does not affect the lawfulness of prior processing and does not end retention required by law.

5. Recipients and transfers

Data may be received by the hosting provider, authentication provider, payment organization, communications service, support contractor, competent state authority and an engaged patent attorney — only to the extent necessary and on a contractual basis. Cross-border transfer is allowed where there is a legal basis and the required level of protection.

6. Retention and security

Periods are determined by purpose, contract and law. Account and contractual records are kept for at least the mandatory period; technical logs — [PERIOD]; unsubmitted materials — [PERIOD]. Access control, encryption in transit, backups, logging and incident management are applied. Primary collection and storage of data of Uzbekistan citizens are organized in line with applicable localization requirements.

7. Data subject rights

The data subject may request information about processing, access, rectification, supplementation, restriction or cessation of processing, deletion where permitted by law, withdraw consent and challenge the operator’s actions. Requests are sent to [PRIVACY EMAIL]; identification may be required to protect data.

8. Automated processing

AI is used to search for and assess similarity of signs. The result does not by itself create legal consequences. The User may request an explanation of the result or human review if such a service is included in the plan.

9. Updates

Versions and effective dates are retained. Material changes are communicated to users before they take effect where required.