Privacy Policy

This Privacy Policy explains how Online Service Group (OSG) ("we", "us") collects, uses, stores and protects the personal data of users of our mobile application and the https://osg.uz website (together, the "Service"). By using the Service, you agree to this policy.

1. Information we collect

• Account data: when you register — email address, username and password (passwords are stored only as a secure hash).
• Feedback form: full name, phone number, email, selected service and message text.
• Technical data: IP address, device type, sign-in/sign-out times. Approximate location (country, city) may be derived from your IP address.
• AI chat: messages you send to the AI assistant and its replies.
• Polls: your selected answer; your IP address is kept temporarily for 24 hours to prevent duplicate votes.
• Subscription: your email address when you subscribe to news.
• Biometric sign-in (Face ID / Touch ID / fingerprint): biometric data is processed only on your device and is never sent to us. Our server stores only a device key identifier.

2. How we use your information

• To create your account, authenticate you and keep the Service secure;
• To respond to your requests and provide our services;
• To answer your questions through the AI assistant;
• To send news and notifications (with your consent);
• To prevent fraud, spam and abuse;
• To analyze and improve the Service.

3. Sharing with third parties

• We do not sell your personal data or share it with third parties for advertising. Data may be shared only with providers needed to run the Service:
• Google Gemini API — to process AI chat messages;
• ip-api.com — to determine approximate location from an IP address;
• Telegram — for internal notifications to our staff about new requests;
• Competent government authorities — where required by law.

4. Data retention

Account data is kept while your account is active. Requests and chat history are kept as long as needed to handle them. After account deletion, your data is erased within 30 days, except where retention is required by law.

5. Data security

Data is transmitted encrypted over HTTPS (TLS), passwords are hashed, and access is protected with JWT tokens. Only authorized staff can access our servers.

6. Your rights

You may access, correct or request deletion of your data and withdraw your consent at any time by writing to info@osg.uz.

7. Account deletion

To delete your account and all associated data, email info@osg.uz from the address you registered with, using the subject "Account deletion". We complete the request within 30 days and will confirm by email.

8. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect their data; if we learn that we have, we will delete it promptly.

9. Governing law

Personal data is processed in accordance with the Law of the Republic of Uzbekistan "On Personal Data" (No. ZRU-547 of 02.07.2019).

10. Changes to this policy

We may update this policy. Changes will be posted on this page with a new "Last updated" date.