Privacy Policy

General Provisions

Tuzuk Software (hereinafter “Tuzuk”) is an electronic platform operating on the basis of artificial intelligence, providing access to the legislative database of the Republic of Uzbekistan. This platform enables the search and analysis of legal documents and court decisions for the effective resolution of legal matters.

Balcom Soft LLC (TIN: 309335414, legal address: Republic of Uzbekistan, Tashkent city, Yashnabad district, Dustobod MSG, Makhtumkuli street, house 81) is the owner of the personal data database registered in the State Register of Personal Data Databases in accordance with Article 20 of the Law of the Republic of Uzbekistan “On Personal Data” (hereinafter “the Company”).

This Privacy Policy regulates the procedure for the collection and processing of users' personal data during the use of the website and all services provided by Tuzuk. The processing of user data is carried out in strict compliance with the legislation of the Republic of Uzbekistan on personal data protection, in particular, in accordance with the provisions of the Law of the Republic of Uzbekistan “On Personal Data”, the Resolution of the Cabinet of Ministers “On Approval of Certain Regulatory Acts in the Field of Personal Data Processing”, the Law of the Republic of Uzbekistan “On Informatization”, and other regulatory legal acts.

By using the Tuzuk platform, the user expresses consent to the provisions of this Privacy Policy.

In accordance with the Law of the Republic of Uzbekistan “On Informatization”, information about individuals' personal data is classified as confidential information.

In cases where certain aspects are not directly regulated by this Privacy Policy, the parties shall be guided by the legislation of the Republic of Uzbekistan and the principles of business conduct.

This Privacy Policy also regulates the users' rights to privacy. Detailed information on users' rights and the procedure for their implementation is provided in Section 4 (“Rights and Choices”).

Terms

  • User — individuals or legal entities that have registered on the Tuzuk platform and use its functionalities.
  • Personal Data — information recorded on electronic, paper, and/or other material media, relating to a specific individual or allowing their identification.
  • Confidentiality of personal data — a mandatory requirement for individuals or legal entities with the right to use personal data to prevent the use or dissemination of such data without the consent of the data subject or in the absence of legal grounds.
  • De-identification of personal data — an action that makes it impossible to determine the ownership of personal data to a specific individual.
  • Special categories of personal data — data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, health status, or intimate life of an individual.

1. Collection of Personal Data

The following categories of personal data are collected:

Personal Data Provided Directly by the User

  • Identification and Contact Data: Tuzuk collects identifiers, including the user’s name, email address, and phone number during the registration of a Tuzuk account or when requesting information about the provided Services. Indirect identifiers (e.g., “User 00000”, which do not actually identify individuals) may also be collected or generated.
  • Communication Information: In case of user communication with the service, including through the support chatbot on the website, the user’s name, contact information, and the content of all messages sent by the user are collected.
  • Feedback on Service Usage: The Tuzuk interface provides functionality for rating system responses via “thumbs up” and “thumbs down” icons. Feedback, including ideas and suggestions for improving or evaluating the provided service, is collected and processed.
  • Usage Information: Information about the type of Service used, including dates and times of access, is collected.
  • Use of Cookies: Tuzuk uses cookies to enhance the user’s browsing experience and to help Tuzuk understand how visitors interact with the site. Cookies are small text files stored on the user’s device that remember preferences and usage patterns. To improve the Site and services, Tuzuk uses Google Analytics, a third-party analytics tool that helps measure site performance and understand user behavior. Through cookies, Google Analytics allows us to collect anonymous, aggregated data, such as: 1) Pages visited by users and time spent on them; 2) Type of device, browser, and operating system used; 3) Approximate geographical location (country or city level); 4) How users arrived at the Site (e.g., via search engines or links); 5) User interaction patterns (e.g., clicks, scrolls, navigation paths). This information is used to analyze trends, monitor site performance, and improve user experience. It does not identify individuals. Tuzuk, through the use of Google Analytics, does not collect: 1) Personal information such as your name, email address, phone number, or address; 2) Payment or financial data; 3) Precise IP addresses (they are anonymized); 4) Any data that could identify the User as an individual.

2. Use of Personal Data in Accordance with Applicable Legislation

Personal data is used for the following purposes:

  • ensuring proper communication with the User regarding the operation of the TUZUK software, as regulated by the Privacy Policy and the TUZUK SOFTWARE USAGE AGREEMENT;
  • communicating with the user, including sending information about Services and events;
  • creating and administering the user’s Tuzuk account;
  • preventing and investigating cases of fraud, abuse, violations of the Privacy Policy, illegal or criminal activities, unauthorized access or use of personal data, anthropogenic systems, and networks, protecting the rights of the Company and users, and fulfilling legal obligations;
  • investigating and resolving security issues.

The use of customers’ personal data for training models or for purposes other than those provided for by the Law of the Republic of Uzbekistan “On Personal Data” is not carried out.

3. Disclosure of Personal Data

Tuzuk does not disclose personal data, except in cases provided for by the legislation of the Republic of Uzbekistan.

  • Based on Legislation: Disclosure of personal data to state regulatory authorities may be carried out in accordance with legislative requirements, as well as for the purposes of ensuring security, protecting the rights of third parties, and complying with the rights of the Company or the terms of service provision.
  • With the Consent of the Data Subject: Disclosure of personal data may be carried out with the permission or instruction of the data subject to disclose such information, including within the framework of the provided services.

It is recommended to refrain from providing confidential information when using the service. In case of disclosure of such information, Tuzuk IS NOT RESPONSIBLE for ensuring the protection of confidential data.

Tuzuk is not responsible for the disclosure of third parties’ personal data by the user when using the service and does not assume obligations to ensure the protection of such data.

4. Rights and Choices

Data subjects have certain rights regarding their personal data, regardless of their place of residence, actual location, or applicable legislation in the respective territory. The Company adheres to the principle of prioritizing the protection of personal data and compliance with all applicable provisions of the Republic of Uzbekistan’s legislation on privacy. In accordance with Article 30 of the Law of the Republic of Uzbekistan “On Personal Data”, the data subject has the right to:

  • obtain information about the existence of their personal data held by the owner and/or operator, or a third party, and their composition;
  • obtain information about the processing of personal data from the owner and/or operator upon request;
  • obtain information about the conditions for granting access to their personal data from the owner and/or operator;
  • address issues of protecting their rights and legitimate interests regarding their personal data to the authorized state body or court;
  • provide consent for the processing of their personal data and withdraw such consent, except in cases provided for by legislation;
  • provide consent to the owner and/or operator, or a third party, for the dissemination of their personal data in publicly accessible sources of personal data;
  • require the owner and/or operator to temporarily suspend the processing of their personal data if the personal data is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the purposes of processing.

To exercise the aforementioned rights, the data subject or their representative may send a request via email to info@tuzuk.ai. Upon receiving the request, it may be verified by requesting information sufficient to confirm the user’s authorization. The data subject also has the right to appeal rejected requests via email to info@tuzuk.ai. Tuzuk does not discriminate based on the exercise of privacy rights by data subjects.

Automatic Data Collection: When using services (AI chatbot, document drafter, legal analyzer), the Tuzuk software does not collect special categories of personal data. The user is solely responsible for the information entered when using each Tuzuk function.

Sale and Targeted Marketing of Tuzuk Products and Services: Tuzuk does not “sell” users’ personal data.

5. Data Transfer

Tuzuk does not carry out cross-border transfers of personal data, except in cases provided for by the Law of the Republic of Uzbekistan “On Personal Data”. Clauses 2 and 3 of Part 3 of Article 15 of the Law of the Republic of Uzbekistan “On Personal Data” provide for cross-border transfers of personal data to the territories of foreign states that do not ensure adequate personal data protection in cases:

  • necessary for the protection of the constitutional order of the Republic of Uzbekistan, public order, citizens’ rights and freedoms, health, and morality of the population;
  • provided for by international treaties of the Republic of Uzbekistan.

6. Data Storage and Security Measures

Tuzuk stores users’ personal data for the duration of their accounts’ existence. In case of deletion of a user’s account, their personal data is automatically destroyed, deleted, and erased in accordance with the requirements of applicable legislation.

Tuzuk guarantees the security and safety of the information (documents and requests) entered by the user during the use of TUZUK, except in cases explicitly provided for by this Privacy Policy and the TUZUK SOFTWARE USAGE AGREEMENT.

De-identified Information

Negative user feedback is collected. In the case of such feedback on responses from Tuzuk, requests with de-identified personal data may be processed for the purposes of analysis, research, and examination of errors.

Security Measures for Personal Data Processing

The Company implements appropriate technical and organizational security measures aimed at protecting personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. In accordance with Article 27¹ of the Law of the Republic of Uzbekistan “On Personal Data”, Balcomsoft LLC ensures the collection, systematization, and storage of personal data of citizens of the Republic of Uzbekistan on technical means physically located in the territory of the Republic of Uzbekistan (at the address: Tashkent city, Yashnabad district, Dustobod MSG, Makhtumkuli street, house 81) and registered in the State Register of Personal Data Databases under the Center for Personalization at the Cabinet of Ministers of the Republic of Uzbekistan.

  • regular updates of security systems
  • control of physical access to servers
  • restriction of access to personal data to authorized employees only
  • regular training of personnel on personal data processing rules
  • regular testing of systems for vulnerabilities

In the event of circumstances beyond the control of the “Platform Administrator”, such as government actions, terrorist acts, natural disasters (earthquakes, fires, floods, etc.), as well as issues related to working conditions, Internet connection failures, or server system malfunctions that may affect data confidentiality, users will be promptly notified, and all possible measures will be taken to restore data security.

7. Changes to the Privacy Policy

The Company reserves the right to make changes to this Privacy Policy. In the event of significant changes to this Privacy Policy, users will be notified by posting a corresponding notice on the website and/or sending an email to the address associated with the user’s account, 15 days before the changes take effect.

8. Contact Information

Tuzuk (Balcomsoft LLC)
Address: Republic of Uzbekistan, Tashkent city, Yashnabad district, Dustobod MSG, Makhtumkuli street, house 81
TIN: 309335414
E-mail: info@tuzuk.ai
Phone: +998 78 555-59-55

Data Protection Officer: Akbar Ziyodov

9. Dispute Resolution

Disputes related to the processing of personal data are resolved in accordance with the legislation of the Republic of Uzbekistan. The data subject has the right to file a complaint with the State Center for Personalization at the Cabinet of Ministers of the Republic of Uzbekistan or in court.