1. General Provisions

By using the Yasash platform, the User, in accordance with Article 18 of the Law of the Republic of Uzbekistan «On Personal Data», freely, knowingly, and unambiguously consents to ООО «YoVA AI» (hereinafter — «Operator») processing their personal data under the conditions set out below.

This consent covers all information the Operator may obtain about the User in the course of using the service, mobile interfaces (Telegram Mini Apps), and web versions of the platform.

2. Categories of Data Processed

The Operator may process the following User data:

• Identification data: unique Telegram identifier (ID), first name, last name, username;
• Contact data: phone number, email address (if provided);
• Technical data: IP address, device type, operating system, geolocation data (if permission granted);
• Behavioral markers (Pulse Engine): interface interaction data, conversion paths, clicks, time spent on pages, and order history;
• Store data: store names, product images, transaction information, and business settings.

3. Purposes of Personal Data Processing

The User's personal data is processed exclusively for the purposes of:

• Registering and authenticating the User on the Platform via the Telegram API;
• Providing full functionality of the store builder and order management;
• Operating the Pulse analytics system (generating daily and hourly business health reports);
• Improving AI tools (automated image and text processing);
• Providing technical support and timely notifications through official communication channels;
• Ensuring security and preventing fraudulent activity.

4. Processing Methods and Retention Periods

Data is processed both by automated and non-automated means (collection, recording, organization, accumulation, storage, clarification, retrieval, use, transfer, anonymization, blocking, and deletion).

Data is stored on secure servers for the duration of the User's subscription and for 12 months after its termination to allow for account recovery, unless otherwise required by Uzbek law. Raw Pulse Live analytics logs are retained for 24 to 48 hours, after which they are aggregated into anonymized snapshots.

5. User Rights

The User has the right to:

• Request information about their personal data being processed;
• Demand correction, blocking, or deletion of data that is incomplete, outdated, or inaccurate;
• Withdraw consent to data processing by submitting a request to the support team. Important: withdrawing consent results in the inability to use the Platform and deletion of the account.

6. Transfer of Data to Third Parties

The Operator does not sell or transfer User data to third parties without consent, except for:

• Maintaining infrastructure operations (hosting providers, data storage systems);
• Integration with payment systems (Payme, Click, Uzum) for transaction processing;
• Requests from governmental authorities as required by the laws of the Republic of Uzbekistan.

7. Data Security

ООО «YoVA AI» takes the necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, and blocking. We employ encryption protocols and strict access controls governing employee access to the database.

8. Final Provisions

This consent is effective from the moment the User begins using the Platform. The Operator reserves the right to update the consent text when the Platform's functionality or Uzbek legislation changes, without personally notifying the User.