Privacy Policy
Last updated: 19 October 2026
This policy explains how YTT Ravshanov Jahongir Abdurashidovich (the "Operator") collects, uses and protects the personal data of users and guests of the taklifim.uz website.
Data is processed in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and other legislation. By using the Site you agree to this policy.
1.What we collect
- Phone number — to register and log in.
- Telegram account ID — kept when you log in with Telegram, so our bot can send you your guests' replies.
- Invitation data — names, event date, venue name and address, photos, chosen or uploaded music, and optionally a map link, card number and contact phone.
- Guests' replies — name, whether they're coming, how many people, and an optional wish.
- Payment data — the order (amount, design, invitation) and the Payme transaction number and times. Bank card details are entered only on Payme's page; the Operator never receives or stores them.
- Technical data — IP address (for security and abuse prevention) and request logs.
Guests share data only when they choose to reply to an invitation; their IP address is used temporarily for security. The Site uses no advertising or analytics trackers.
2.Why we use it
- To provide the service: logging in, creating, storing and showing invitations to guests.
- To pass guests' replies to the invitation's owner, in their cabinet and on Telegram.
- To process payments and keep accounting records.
- For security: rate limiting and abuse prevention.
- To answer user requests and meet legal obligations.
3.Who sees your data
The content of a published invitation (names, date, address, photos, card number and phone) is visible to anyone with the link. The User decides whom to send the link to.
Guests' replies and wishes are not shown to other guests: only the invitation's owner (in their cabinet and on Telegram) and administrators see them.
Data is shared only where needed to provide the service:
- Telegram — to log in, you share your phone number with our Telegram bot yourself, and the bot sends you your guests' replies; Telegram keeps that chat under its own rules.
- Hosting and file storage providers — to run the site and store photos.
- Payme — the order number and amount for the payment, and for the receipt the service name (with the couple's names). Card details are taken by Payme itself.
- Government authorities — only where required by law.
The Operator does not sell personal data or share it with third parties for advertising.
4.How long we keep it
- Drafts — kept; their photos and uploaded music are deleted 7 days after the last edit.
- Invitations (text: names, date, venue, card and phone numbers) — drafts you can delete in your account; published ones are kept until you ask for the invitation or the account to be deleted; their photos and uploaded music are deleted one year after the event date.
- Guests' replies — deleted together with the invitation; its owner can delete them at any time.
- Payment data — kept for the period the law requires for accounting and tax records, including after the invitation or account is deleted.
- Photos and music not attached to an invitation — deleted after 24 hours.
- Phone number (account) — kept until you ask for the account to be deleted.
- Login session — valid for up to 30 days.
- Request logs (IP address, page requested, time) — kept for 30 days, then deleted automatically.
5.Cookies
The Site uses only the cookies it needs to work:
- access_token and refresh_token — to keep you logged in (httpOnly, not readable by JavaScript).
- NEXT_LOCALE — your chosen language.
Also, when a guest sends a reply, their browser remembers it (localStorage) so it isn't sent twice. This stays only on the guest's device.
While an invitation isn't saved yet, what you entered (picked photos and music included) is also kept in this browser, so it isn't lost if you leave the page. It's cleared once the invitation is saved and isn't sent to the server.
6.Security
Data travels over an encrypted connection (HTTPS), session cookies are protected from scripts, and access to data is limited to its owner and authorized administrators.
As required by law, the personal data of citizens of Uzbekistan is stored on servers located in the Republic of Uzbekistan.
7.Your rights
- To get information about your data.
- To correct your data — by editing your invitation in your account.
- To delete your data — by deleting drafts in your account, or by asking us to delete published invitations or your account.
- To withdraw your consent to processing.
- Guests can ask the invitation's owner or the Operator to delete their reply or wish.
Send requests to jakhongir_ravshanov@icloud.com or on Telegram (@taklifim_uz_admin).
8.Age limit
The Site is not intended for accounts of people under 16.
9.Changes and contact
The Operator may change this policy; a new version takes effect once published on the Site.
- YTT Ravshanov Jahongir Abdurashidovich
- Email: jakhongir_ravshanov@icloud.com
- Telegram: @taklifim_uz_admin
