Privacy Policy
Draft. This text is under legal review. The effective date will appear here once it is published.
What personal data Kweko collects on kweko.uz, in the app and at checkout, why we need it, who else handles it, and how to have it corrected or deleted.
1. Who we are
1.1. The operator of your personal data is RELAYT STUDIO LLC («RELAYT STUDIO» MAS'ULIYATI CHEKLANGAN JAMIYAT), which runs the Kweko service ("Kweko", "we"), STIR 313338686, legal address: Toshkent shahri, Yashnobod tumani, Yashnobod MFY, 4-Aviasozlar mavzesi, 13, 8/1-uy. Full details are on the Company details page.
1.2. We process personal data in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No ZRU-547 of 2 July 2019 (the "Personal Data Law") and other laws of the Republic of Uzbekistan.
2. Two roles: our data and our customers' data
2.1. We are the owner and operator of the personal data of people who use Kweko and people who contact us: account holders, workspace members, billing contacts, visitors of kweko.uz and people who write to our support. This Policy covers that data.
2.2. We process data for our customers. Businesses use Kweko to keep records about their own clients: names, phone numbers, messages, deals, invoices and calls. For that data the business (our customer) is the owner and operator, and we process it only on its instructions under the Data Processing Agreement. If you are a client of a business that uses Kweko and want to use your rights, contact that business first. We will help it answer you.
3. What data we collect
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name, email address, password (stored only as a hash), language and interface preferences | You, at sign-up and in account settings | To create your account, sign you in and show the product in your language |
| Workspace name, address, industry, team size, your role and goals | You, during onboarding | To set up the workspace with suitable templates |
| Security records: sessions, sign-in codes, IP address, browser, sign-in times | Your device, automatically | To keep your account secure, detect abuse and show you your active sessions |
| Billing records: plan, seats, invoices, payer's company name, STIR, address and bank details, payment status, the payment provider's transaction ID, masked card number and card type | You, and the payment provider (Payme or Click) | To bill the subscription, issue invoices and acts, make refunds and keep accounting records |
| Support conversations and files you send us | You, in the "Kweko Support" chat, by email, by phone or on Telegram | To answer your questions and fix problems |
| Error reports and page speed: the page, the error, browser and app version | The Kweko app, automatically | To find and fix faults |
3.1. Card details are entered on the payment provider's page. We never receive or store the full card number, expiry date or security code. When you pay by card, the payment provider keeps your card and we receive only a token and a masked number, such as 8600 **** **** 1234, that let us request the renewal charges you agreed to.
3.2. We do not ask for special categories of personal data (health, biometric data, beliefs and the like). Please do not send them to us.
4. Why we use it and on what grounds
4.1. We use personal data only to provide the Service, manage subscriptions and renewals and remind you before a charge, issue invoices and make refunds, send you sign-in codes, invitations and notifications, answer support requests, protect accounts from unauthorised access and fraud, and meet our obligations under the law.
4.2. Our grounds are: your consent, which you give when you sign up or write to us; the need to conclude and perform the agreement with you or the business you represent (the Terms of Service); and obligations set by law, for example in accounting and tax.
4.3. You can withdraw your consent at any time (see section 9). This does not affect processing already done, or processing we must continue by law or to perform an agreement.
4.4. We do not send advertising without your separate consent, and we do not sell personal data.
5. Who we share it with
5.1. We share personal data only with those who help us provide the Service, and only as much as each of them needs:
| Recipient | Purpose | Location |
|---|---|---|
| [HOSTING PROVIDER] | Servers, databases and backups of the Service | [DATA CENTRE LOCATION] |
| Resend (Resend, Inc.) | Sending sign-in codes, invitations and notifications by email | [RESEND DATA REGION] |
| Payme, Click | Card payments for Kweko subscriptions and refunds | Republic of Uzbekistan |
| TBC Bank | Bank transfers and refunds | Republic of Uzbekistan |
| Anthropic, PBC | Kweko AI features, only in workspaces where an admin turned AI on | United States of America |
| Telegram | When you write to our support on Telegram | Outside Uzbekistan |
| Electronic document and tax reporting systems, our accountant | Contracts, acts, invoices and reports | Republic of Uzbekistan |
5.2. Service providers may use the data only for the task we give them. Payment providers, banks and Telegram also process data under their own policies, as independent operators.
5.3. When a workspace connects Integrations (for example Telegram, Instagram, WhatsApp, SMS or telephony providers), data flows to those services because the customer instructed it, under the customer's own agreement with them.
5.4. We disclose data to state bodies only when the law requires it.
6. Where data is stored and transfers abroad
6.1. The Service's databases and backups are stored on the servers of our hosting provider. Their location is shown in the table in section 5. We announce any change of location in advance by updating this Policy.
6.2. Personal data goes abroad only where it is needed for a service you or your workspace chose:
- Kweko AI is off by default. A workspace admin turns it on by accepting a consent text that says the text sent to the AI provider leaves the country. The consent, its version, the admin and the time are recorded, and an admin can withdraw it at any time in Settings → Kweko AI. Before any text is sent, phone numbers, email addresses and card-like numbers in it are masked.
- Email delivery through Resend, and Telegram when you write to us there.
7. How long we keep it
- Account data: while the account exists. When you delete your account, it is anonymised at once: your name becomes "Deleted user" and your email address, password, sessions, sign-in codes and push subscriptions are removed.
- Workspace data: while the workspace exists. When an Owner deletes a workspace, it is permanently removed 7 days later.
- Backups: nightly backups are kept for 14 days and then deleted, so deleted data leaves the backups within that time.
- Security records: sessions expire after 30 days; the workspace audit log is kept for 90 days, or 1 year on the Business and Enterprise plans.
- Billing and accounting records: for the periods set by tax and accounting law.
- Support conversations: for the term of the agreement and 3 years after it ends, so we can answer questions and claims.
- Error reports: as long as needed to fix the fault, as a rule no longer than 12 months.
When a period ends, we delete the data or make it anonymous.
8. Cookies
The website kweko.uz sets no cookies and uses no trackers. The app uses only the cookies it needs to keep you signed in. Details are in the Cookie Notice.
9. Your rights
9.1. You have the right to:
- know whether we process your personal data, for what purpose and on which ground, and receive a copy of it;
- have inaccurate data corrected;
- have your data deleted, or its processing stopped;
- withdraw your consent;
- complain to the authorised state body for personal data, or to a court.
9.2. You can change your name and preferences and delete your account yourself in the account settings. For anything else write to [email protected] or call +998 50 800 84 47. We may ask you to confirm who you are. We reply within 10 business days, or sooner where the law sets a shorter time.
9.3. Some data we must keep by law even if you ask us to delete it, for example accounting documents. In that case we tell you what we keep and why.
10. Security
10.1. We protect personal data with organisational and technical measures, including: separation of every workspace's data at the database level, encrypted connections (HTTPS) everywhere, encryption of integration credentials we hold, passwords stored only as Argon2id hashes, access to data only for people who need it for their work, support access that is time-limited, read-only and logged in the customer's audit log, card payments only on the payment providers' own pages, and nightly backups checked after each run. Details are on the Security page.
10.2. If a breach affects your data, we tell you and the authorised state body as the law requires, including what happened and what we are doing about it.
11. Children
Kweko is a service for businesses and adults. We do not knowingly collect personal data of people under 18 as users. If you believe a child has sent us their data, write to us and we will delete it.
12. Changes to this policy
We publish every new version of this policy on this page, with its version number and the date it takes effect. If a change matters for how we use your data, we also tell account holders by email or in the product before it takes effect.
13. How to reach us
Requests about personal data: [email protected]. General questions: [email protected]. Phone: +998 50 800 84 47. Telegram: @RelaytSupport. By post: RELAYT STUDIO LLC, Toshkent shahri, Yashnobod tumani, Yashnobod MFY, 4-Aviasozlar mavzesi, 13, 8/1-uy.