Privacy policy

The operator of your personal data is RELAYT STUDIO LLC («RELAYT STUDIO» MChJ), trading as Relayt (the "Studio", "we"), taxpayer ID (STIR) 313338686, legal address: Toshkent shahri, Yashnobod tumani, Yashnobod MFY, 4-Aviasozlar mavzesi, 13, 8/1-uy. Full details are on the Company details page.

We process personal data in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No ZRU-547 of 2 July 2019 and other laws of the Republic of Uzbekistan.

This policy applies to the website relayt.studio (the old address relayt.uz leads to it), the client portal at relayt.space and the payment page pay.relayt.space (together, the "Portal"), to our own software products and online services that you use under a subscription or licence (the "Products"), and to our Telegram accounts, email and phone line.

It does not cover the systems we build or run for clients, or the data a client puts into our Products about its own customers or staff: there, the client decides what data is collected. See section 11.

When you use the contact form: your name, your phone number or Telegram username, and your message. We also record which page you sent it from, which page or advert brought you to the site, and how many seconds the form was open, which is how we tell a person from a bot.

When you write to us or call: your name, phone number, Telegram username or email address, and what you send us, including files.

When you work with us through the Portal or use one of our Products:

1. account details: name, email, phone number, position, photo, language and time zone, for you and for the users you add;
2. your company's details for contracts and invoices: name, taxpayer ID, address and bank details;
3. your Telegram account ID, if you connect Telegram to the Portal or a Product;
4. messages, files and documents you send us, and your approvals of documents (who approved what, and when);
5. what you and your users put into a Product;
6. subscription records: your plan, its billing periods, renewals and cancellations, and, where a plan is billed by usage, the amount used;
7. security records: sign-in times, IP address and browser, and two-factor authentication settings.

When you pay: the payer's name, invoice number, amount, date, payment status and method, and the transaction ID from the payment provider. Card details are entered on the payment provider's page. We never receive or store the full card number, expiry date or security code; a provider may send us a masked number such as 8600 **** **** 1234. If you turn on automatic renewal, the payment provider keeps your card and we receive only a token that lets us request the charges you agreed to.

Technical data about visits and cookies is described in section 8.

We do not ask for special categories of personal data (health, biometric data, beliefs and the like). Please do not send them to us.

We use personal data only to:

1. answer your enquiry and prepare a quote;
2. conclude and perform agreements, including through the Portal;
3. provide our Products, manage subscriptions and renewals, and remind you before a charge;
4. issue invoices, accept payments, make refunds and keep accounting and tax records;
5. send notifications about your projects, invoices and documents by email, Telegram or in the Portal;
6. protect accounts and services from unauthorised access and fraud;
7. see, in totals only, which pages of the website are read;
8. meet our obligations under the law.

We do not send advertising without your separate consent, and we do not sell personal data.

We process personal data on these grounds:

1. your consent, which you give by sending the contact form, writing to us or accepting the Public offer;
2. the need to conclude and perform an agreement with you;
3. obligations set by law, for example in accounting and tax.

You can withdraw your consent at any time (see section 10). This does not affect processing already done, or processing we must continue by law or to perform an agreement.

We share personal data only with those who help us provide the service, and only as much as each of them needs:

1. payment providers and banks, such as Payme, Click, Uzum Bank and TBC Bank: to accept payments and make refunds;
2. hosting and infrastructure providers, including Cloudflare: to run and protect the website and the Portal, and to store files and backups;
3. Resend: to send email notifications from the Portal;
4. Zoho: our mailbox;
5. Telegram: when you write to us there or connect the Portal bot; contact form messages also reach us through Telegram;
6. electronic document and tax reporting systems, and our accountant: for contracts, acts, invoices and reports;
7. state bodies, when the law requires it.

Service providers may use the data only for the task we give them. Payment providers, banks and Telegram also process data under their own policies, as independent operators.

We do not sell, rent or trade personal data.

We keep personal data only as long as we need it:

1. enquiries that do not lead to work: until it is clear no work will follow, and no longer than 12 months after the last message;
2. client, Portal and project data: for the term of the agreement and 3 years after it ends, so we can answer questions and claims;
3. what you put into a Product: for as long as your subscription runs, then 30 days for you to export it, after which we delete it (see Public offer, 7.15);
4. accounting documents and payment records: for the periods set by tax and accounting law;
5. security records: as long as needed to protect accounts, as a rule no longer than 12 months.

When a period ends, we delete the data or make it anonymous. Deleted data can stay in backups for a limited time, until they are overwritten.

The website relayt.studio sets one cookie, relayt-locale, and only when you choose a language in the switcher. It remembers that language for a year and holds nothing else.

We count page views with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device, builds no profile and cannot follow you to other sites. We see totals, not people.

The Portal uses a sign-in cookie, which it needs to keep you signed in, and keeps your theme and language choices in your browser.

There are no advertising or third-party tracking cookies on our sites.

Our servers and Cloudflare record technical data about requests (IP address, browser, time, the page requested) to keep the services working and secure.

We protect personal data with organisational and technical measures, including:

1. encrypted connections (HTTPS) on all our sites;
2. access to data only for people who need it for their work;
3. two-factor sign-in on the Portal, and passwords stored only as hashes;
4. encryption of access keys and other secrets we hold;
5. card payments only on the payment providers' own pages;
6. regular backups and protection against attacks.

If a breach affects your data, we will tell you and the authorised state body as the law requires.

You have the right to:

1. know whether we process your personal data, and receive a copy of it;
2. have inaccurate data corrected;
3. have your data deleted, or its processing stopped;
4. withdraw your consent;
5. complain to the authorised state body for personal data, or to a court.

To use any of these rights, write to [email protected] or call +998 50 800 84 47. We may ask you to confirm who you are. We reply within 10 business days, or sooner where the law sets a shorter time.

Some data we must keep by law even if you ask us to delete it, for example accounting documents. In that case we tell you what we keep and why.

When we build or run a system for a client (a CRM, a bot, an online shop), or a client uses one of our Products, and it holds personal data of the client's customers or staff, the client is the owner and operator of that data. We process it only on the client's instructions and only to do the agreed work or run the Product (see Public offer, 14.2).

If you are a customer of one of our clients, send requests about your data to that client first. We will help them answer.

Our services are for businesses and adults. We do not knowingly collect personal data of people under 18. If you believe a child has sent us their data, write to us and we will delete it.

We publish every new version of this policy on this page, with its version number and the date it takes effect. If a change matters for how we use your data, we also tell clients through the Portal or by email.

Requests about personal data: [email protected]. General questions: [email protected]. Phone: +998 50 800 84 47. By post: RELAYT STUDIO LLC, Toshkent shahri, Yashnobod tumani, Yashnobod MFY, 4-Aviasozlar mavzesi, 13, 8/1-uy.