Uzbekistan OSReturn home

Your information

Privacy Policy

This policy explains what information Uzbekistan OS handles, why we use it, which providers help us, and the choices available to you.

Effective 11 August 2026

In plain language

We use account details and saved conversations to provide personalized visa guidance. We do not sell personal information. The service uses Supabase, OpenAI, Vercel, Cloudflare, and DevSMS, and data may currently be processed outside Uzbekistan. Do not enter passport numbers, PINFLs, payment details, or government credentials in chat.

On this page

  1. Who we are
  2. Information we collect
  3. How we use information
  4. How AI processing works
  5. When we share information
  6. International processing and localization
  7. How long we keep information
  8. Your rights and choices
  9. Security and account protection
  10. Children
  11. Changes and contact

01

Who we are

Uzbekistan OS is an independent information service operated from Tashkent, Uzbekistan. We are not a government agency, immigration authority, law firm, or official application portal.

For questions or requests about this policy or your personal information, email us at info@uzbekistanos.com.

02

Information we collect

We collect only the information needed to operate the service:

  • Account and contact information: email address or international phone number, account identifiers, verification status, and authentication records. Passwords are handled by our authentication provider and are not available to us in plain text.
  • Profile information: first and last name, nationality, preferred language or residency information you choose to provide, and an optional profile image.
  • Conversations and guidance: questions, travel or immigration details you type, assistant responses, citations, and saved conversation titles. If you report incorrect, outdated, or unclear guidance, we also collect the issue category, optional comments, the response being reported, and its review status. This may include nationality, travel dates, host or sponsor details, and other information relevant to your request.
  • Security and operational data: request IDs, dates and times, route and response status, rate-limit usage, device and network information, CAPTCHA challenge results, and diagnostic events. Our application logs do not intentionally record chat text, passwords, one-time codes, phone numbers, or email addresses.
  • Analytics and performance data: page views, referrer, approximate location, browser, operating system, device type, and page-performance measurements. Vercel Web Analytics is designed to use aggregated, cookie-free data rather than persistent cross-site identifiers.

Uzbekistan OS does not currently ask you to upload identity documents or provide a PINFL, passport number, payment card, or government account credential. Please do not include those items in chat.

03

How we use information

We use information to:

  • create, verify, secure, and support your account;
  • provide personalized guidance and save conversation history;
  • review reports of incorrect, outdated, unclear, or incomplete guidance and improve the supporting evidence;
  • send account confirmation, recovery, and SMS verification;
  • retrieve official sources and generate structured assistant responses;
  • prevent fraud, abuse, excessive usage, and security incidents;
  • measure reliability, usage, and website performance; and
  • meet legal obligations and enforce our Terms of Use.

Depending on the context and applicable law, we process information with your consent, to provide the service you request, for legitimate interests such as security and product improvement, or to comply with law. You may withdraw consent where consent is the applicable basis, but that will not affect processing already completed lawfully.

04

How AI processing works

When you use the assistant, Uzbekistan OS sends a bounded portion of your recent conversation and relevant official-source excerpts to OpenAI to produce and validate a response. OpenAI may also perform a restricted search of approved official government domains when the retained evidence is insufficient.

OpenAI states that API inputs and outputs are not used to train its models by default unless the account holder opts in. Under OpenAI’s default API controls, prompts, responses, and related abuse-monitoring data may be retained for up to 30 days, and some Responses API state may also be retained for that period. See OpenAI’s API data controls.

AI responses can be incomplete or incorrect. Uzbekistan OS retains the saved conversation in your account so it can be available across devices; OpenAI is not the system of record for that history.

05

When we share information

We use service providers to operate Uzbekistan OS:

  • Supabase for authentication, PostgreSQL account data, private profile-image storage, and session management;
  • OpenAI for AI response generation and restricted official-source web search;
  • Vercel for website hosting, security logs, cookie-free web analytics, and performance monitoring; and
  • Cloudflare for Turnstile CAPTCHA challenges used to identify automated or abusive account activity; and
  • DevSMS for phone verification, which receives the destination phone number and one-time verification details needed to deliver the message.

We may also disclose information when required by law, to protect users and the service, or as part of a merger, financing, reorganization, or transfer of the service subject to appropriate safeguards. We do not sell personal information or use it for third-party targeted advertising.

06

International processing and localization

Uzbekistan OS is operated from Uzbekistan, but its current hosting, primary customer database, authentication, AI, analytics, and messaging providers may process information in the United States and other countries. Those countries may have different privacy laws from your country.

Uzbekistan has specific registration and local-storage requirements for databases containing Uzbek citizens’ personal data. We are evaluating the infrastructure and registration changes required for localization. This policy describes the service’s current technical setup and does not claim that localization work is complete.

07

How long we keep information

Saved conversations do not currently expire automatically. We keep a saved conversation and its messages until you delete that conversation or delete your account. Account details, profile information, optional profile images, and checklists are kept while your account remains active or until you remove them through the available controls.

Deleting a conversation removes that conversation and its messages and related guidance reports from the active customer database. Deleting your account removes your authentication account and active profile, profile image, saved conversations, messages, checklists, guidance reports, and account-linked usage-limit records. These actions cannot be undone.

Short-term rate-limit records are also removed on a rolling basis. Operational logs, backups, authentication events, analytics, SMS delivery records, and AI-provider records follow security, legal, and provider retention schedules. Limited copies may therefore remain temporarily in provider systems or backups after you use a deletion control. As described above, OpenAI API records may remain for up to 30 days under its default controls.

08

Your rights and choices

Subject to applicable law, you may ask to access, correct, receive, restrict, object to, or delete your personal information, or withdraw consent. Account settings let you download a current JSON export of your account data or permanently delete your account, and conversation history includes a control to delete each saved conversation. You can also update several profile and contact fields there. For other requests, email info@uzbekistanos.com from the address associated with your account so we can verify the request.

You may also contact the competent privacy authority or a court. In Uzbekistan, information about personal-data rights and complaints is available from the Personal Data Authority.

09

Security and account protection

We use access controls, encrypted connections, owner-scoped database policies, private profile-image storage, signed access links, authenticated sessions, CAPTCHA challenges, request-size limits, and rate limits. No online service can guarantee absolute security. Use a unique password and tell us promptly if you believe your account has been compromised.

10

Children

Uzbekistan OS is not directed to children under 16. If you are under the age at which you can consent to data processing in your country, use the service only with the involvement of a parent or legal guardian. Contact us if you believe a child provided personal information without appropriate authorization.

11

Changes and contact

We may update this policy as the service, providers, or legal requirements change. We will revise the effective date and provide additional notice when a change materially affects your rights.

Privacy contact: Uzbekistan OS, Tashkent, Uzbekistan · info@uzbekistanos.com

Uzbekistan OS · Tashkent, Uzbekistan
Privacy PolicyTerms of Useinfo@uzbekistanos.com