Privacy policy

1. General provisions#

1.1.The owner and operator of the personal database is MASTERBEK LLC, tax ID 312763136, Tashkent, Shaykhontohur district, Taxtapul MFY, Turkqorgon str. 63. Personal data enquiries: hello@bizhub.uz.

1.2.This Policy applies to users of the Platform (Customers) and visitors to bizhub.uz. Data of visitors to websites built with BizHub is covered separately in section 3.

1.3.By registering or using the Platform you confirm that you have read this Policy and consent to the processing of your data on its terms.

2. What we collect#

2.1.We collect only the data needed to provide the service:

• Account data: name, email address, password (stored only as a hash), interface language, notification settings.
• Telegram data: Telegram ID, username, name; phone number — only if you share it with the "Share my number" button.
• Payment data: order number, amount, plan, payment system (Click or Payme), transaction ID and status. Card numbers and other card details are entered on the payment system's page — we never receive or store them.
• Content and files: images, logos, documents and links you upload, and the texts and code of your Websites.
• Conversations: text messages in the Studio and the Telegram bot, and text transcripts of voice notes and live voice conversations. Voice is processed in real time by OpenAI; BizHub does not store audio recordings — only the transcript is kept.
• Usage data: websites created, actions performed, credits used and their computing cost.
• Technical data: IP address, browser and device type, request time and error logs — for security and troubleshooting.
• Support requests: the messages you send to support.

2.2.If your messages contain secrets such as passwords, API keys or card numbers, they are automatically masked in the stored text and never sent to AI models. Enter keys your Websites need only through the secure form.

3. Data of your websites' visitors#

3.1.For data that visitors of a Website built with BizHub submit through forms, orders or bookings (name, phone, message, etc.), the Website owner (the Customer) is the owner and operator of the database.

3.2.BizHub processes such data only on the Website owner's instructions: it stores it and delivers it to the owner (in the Studio, by Telegram or email). We do not use it for any other purpose.

3.3.Please address requests about such data to the owner of the Website first. If you cannot reach them, write to us and we will pass your request on.

3.4.The Website owner must publish their own privacy notice on the Website and obtain any consent from visitors that the law requires.

3.5.Visit statistics for Websites (page views, referrer, device type, country) are collected for the Website owner with Umami on our own server — without cookies and without identifying visitors.

4. Why we use your data#

4.1.We process your data to:

• create your account and let you sign in;
• create, edit and host Websites and provide the AI services;
• accept payments, keep track of plans and credits, issue refunds and keep accounting and tax records;
• send service notifications (payments, plan expiry, new Website submissions) by Telegram and email;
• provide support;
• keep the service secure, prevent fraud and abuse and comply with the law;
• improve the service using anonymised statistics.

4.2.We do not sell your data or share it with third parties for advertising. We do not use your Content or conversations to train AI models. We send marketing messages only with your consent, and you can opt out at any time.

5. Legal bases and consent#

5.1.Under the Law we process data on the following bases: the data subject's consent; performance of a contract to which the data subject is a party — the Public offer; and compliance with the Operator's legal obligations (for example, tax and accounting).

5.2.Consent is given electronically at registration; the Operator records the date of consent and the version of the document.

5.3.You may withdraw consent at any time (section 9). Without the data needed to perform the contract we may then be unable to provide the service.

6. Service providers and cross-border transfers#

6.1.To provide the service, data is shared with the following providers, only to the extent necessary:

• Hetzner Online GmbH (Germany; servers in Finland, European Union) — servers, database and backups.
• OpenAI (USA) — AI services: text and code generation, images, speech-to-text and live voice conversation. Your messages, the content of uploaded files and your voice are sent.
• DeepSeek (China) — fallback model when the primary AI provider is unavailable; conversation text may be sent.
• Cloudflare, Inc. (USA, global network) — DNS, TLS and traffic protection.
• GitHub, Inc. (USA) — storing Website code in private repositories.
• Purelymail (USA) — sending email and business mailboxes.
• Telegram — communication and notifications through the bot.
• Click and Payme (Uzbekistan) — accepting payments.

6.2.Some of these providers are located outside the Republic of Uzbekistan. By using the Platform you consent to the cross-border transfer of your data to those countries. Transfers are limited to what the service requires and use encrypted connections (TLS).

6.3.Data may be disclosed to competent public authorities on their lawful request in cases provided for by law.

7. Where data is stored#

7.1.The Platform's main servers are currently located in Hetzner's data centre in Helsinki (Finland, European Union).

7.2.Under Article 27¹ of the Law "On Personal Data", personal data of citizens of the Republic of Uzbekistan must be collected, systematised and stored on technical means physically located in the Republic of Uzbekistan. The Operator undertakes to meet this requirement by hosting the primary database of Uzbek citizens' personal data on servers in Uzbekistan and registering the database in the State Register of Personal Databases. This Policy will be updated once that is done.

8. How long we keep data#

Data is kept for as long as needed for the purposes of processing:

• account data, Content, conversations and transcripts — while the account is active; deleted within 30 days after the account is deleted;
• backups — up to 6 months, then deleted automatically;
• payment records — for the period required by accounting and tax law (at least 5 years);
• technical logs — up to 90 days;
• Website visitor submissions — until the Website owner deletes them or their account is deleted.

9. Your rights#

9.1.Under the Law you have the right to:

• be informed about the processing of your data and obtain a copy of it;
• have inaccurate or outdated data corrected (you can change most of it yourself in your account settings);
• request deletion of your data or that its processing stop;
• withdraw your consent to processing;
• know about transfers of your data to third parties;
• complain about the Operator to the competent personal data authority or to a court.

9.2.Send requests to hello@bizhub.uz. Once we have verified your identity we will reply within the time limits set by the Law.

10. Security#

10.1.We protect data with organisational and technical measures:

• all connections are encrypted with TLS;
• passwords are stored only as hashes;
• secret keys (for example, Websites' payment-system keys) are stored encrypted in the database;
• one-time login links are short-lived and work only once;
• only authorised staff have access to data, and only as much as they need;
• regular backups are made.

10.2.No system is completely secure. In the event of a data breach we will act as the law requires and notify you.

11. Cookies and analytics#

11.1.The Platform uses only cookies that are strictly necessary for it to work: a session cookie (to remember that you are signed in) and a cookie protecting against cross-site request forgery (CSRF). Your interface language is kept in your browser's local storage.

11.2.We do not use advertising or tracking cookies and do not share data with advertising networks.

11.3.For visit statistics we use Umami, installed on our own server: it uses no cookies, does not identify you and does not send data to third parties.

11.4.Necessary cookies are required for the service to work, so no separate consent is requested for them. If you block them in your browser, you may be unable to sign in.

12. Children#

The Platform is intended for people aged 18 and over. We do not knowingly collect data from minors; if we find such data, we delete it.

13. Changes to this Policy#

New versions of this Policy are published on this page with their effective date. We give advance notice of significant changes by email, Telegram or on the Platform.

14. Contact#

Personal data questions: hello@bizhub.uz. Support: hello@bizhub.uz, Telegram: @bizhub_uz_bot.

Full name

MASTERBEK Limited Liability Company (MASTERBEK LLC)

Registered and postal address

Tashkent, Shaykhontohur district, Taxtapul MFY, Turkqorgon str. 63, Republic of Uzbekistan

Tax ID (STIR/INN)

312763136

Phone

[telefon raqami]

E-mail

hello@bizhub.uz

Telegram

@bizhub_uz_bot