Privacy Policy

This Privacy Policy sets out how MilliyBot ("we", "us") processes personal data within the MilliyBot platform. The platform includes:

• the milliybot.uz website and the web panel for merchants;
• the mobile app for merchants;
• the MilliyBot platform bot and the shops that run through merchants' own Telegram bots (the Telegram Mini App storefront and the web storefront).

This Policy is prepared in accordance with the Law of the Republic of Uzbekistan No. ZRU-547 of 2 July 2019 "On Personal Data" and other applicable legislation.

By registering or using the platform you confirm that you have read this Policy. The rules for using the platform are set out in a separate document, the Terms of Use.

The platform has two kinds of users, and we process their data in different roles:

• Merchants and their staff (panel accounts). We are the operator (controller) of this data: we decide how and why it is used, and we are accountable for it under this Policy.
• Buyers: people who purchase from a merchant's shop via Telegram or the web storefront. The owner and operator of this data is the shop (the merchant). We process it only on the merchant's behalf, on their instructions and to the extent needed to provide the service (as a processor).

If you are a buyer, please contact the shop first about your data: the merchant sets the order, delivery and payment terms. The merchant is responsible to its buyers for lawful processing, including obtaining any consent required. We help the merchant fulfil such requests.

Merchant and staff accounts

• email, first and last name, username, profile picture (if you upload one), interface language;
• password: stored only as an irreversible hash, never in plain form;
• email verification time, account role and staff role in a shop, and who invited you.

Shop data

• shop name and address (slug), logo and brand settings, static pages;
• Telegram bot token, bot ID and username, the shop owner's Telegram ID;
• products, categories, prices, stock, delivery zones, promotions and gift cards;
• Payme and Click credentials, the Telegram payment provider token, integration settings (API keys, webhook URLs).
• when card transfer is enabled: the card number and cardholder name shown to buyers;

Sign-in sessions and devices

• IP address (at sign-in and most recent), browser and operating system, device type and model, the full User-Agent string;
• country and city derived from the IP address, sign-in method (password or Google), when the session started, was last active and ended;
• when push notifications are enabled in the mobile app: the device token, platform (Android/iOS), app version and language.

Billing and support

• plan, subscription periods, the payment receipt image and amount you upload, administrator notes;
• support tickets and your correspondence with us;
• the API key you enter for AI features.

Buyer data (on the merchant's behalf)

• Telegram ID, username, first and last name, Telegram language; on the web storefront with Telegram sign-in, a profile photo link;
• phone number, delivery addresses and map coordinates;
• orders: items, amounts, payment method, comments, status history; payment receipt screenshots; return requests and attached photos;
• reviews, favourites, cart, loyalty points, gift cards; notes and tags added by the merchant;
• messages and broadcasts sent through the shop's bot;
• storefront activity: shop and product views, add to cart, checkout start and order creation. These are linked to a random session ID and the Telegram ID and rolled up into daily statistics for the merchant.

What we do not collect

Buyers' card numbers and CVV codes are never entered on the platform: online payment happens on the Payme, Click or Telegram page, and we receive only the payment status. We do not ask for special categories of data (health, religious or political views, biometrics).

• to create your account, sign you in, launch your shop and connect your bot;
• to accept orders, notify the merchant and the buyer, confirm payments and pass fiscal receipt data to the payment provider;
• security: showing your active sessions, detecting suspicious sign-ins, preventing abuse;
• to track subscriptions and plan limits and to verify payment receipts;
• to prepare analytics and reports for merchants;
• service emails: email verification, password reset, staff invitations. We do not send marketing emails;
• to answer support requests and to keep the platform stable and improve it;
• to comply with the law and protect our rights.

We process personal data on the following bases:

• Consent. When you register or sign in with Google, you consent to this Policy. Buyers give their consent to the merchant when using the shop.
• Performance of a contract. Data needed to provide the service under the Terms of Use.
• Legal obligations. Tax and accounting requirements and lawful requests from competent authorities.
• Security and protection of rights. Session logs and abuse prevention.

You may withdraw your consent at any time (see "Your rights"). Without the data needed to provide the service, you may no longer be able to use your account.

When you click "Continue with Google", we request only the openid, email and profile scopes. Google gives us your email address, whether it is verified, your first and last name, and a link to your profile picture.

• We store your email, first and last name to create your account, sign you in and show your name in the panel.
• We do not store the profile picture link or your Google account ID.
• We do not sell data obtained from Google, do not use it for advertising and do not use it to train AI models.
• We share it with third parties only when necessary to provide the service or when required by law. Our staff access it only with your consent, for security purposes or when required by law.

MilliyBot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can revoke the access you granted at any time at https://myaccount.google.com/permissions.

We do not use advertising or third-party analytics cookies. Only files necessary for the service to work are used:

• dk_access and dk_refresh: the panel sign-in session. HttpOnly (not readable by JavaScript), Secure and SameSite=Lax; they last 30 minutes and 7 days respectively.
• NEXT_LOCALE: the language chosen on the website, kept until the browser is closed.
• mb_web_session (HttpOnly, 30 days) and miniapp_lang (1 year): the buyer's session and chosen language on the web storefront.
• Browser storage (localStorage/sessionStorage): cart, language, theme (light/dark), panel sidebar state, a random session ID for storefront statistics, and promo code.

If you sign in with Google, Google may set its own cookies on its own domains, governed by Google's privacy policy. You can disable cookies in your browser settings, but you will not be able to sign in to the panel.

We do not sell data. We share it only with the following services, only for the stated purpose and only to the extent necessary:

• Telegram: Bot API, Mini Apps and Telegram Login, to send messages, recognise the buyer and open the shop. Telegram processes data under its own policy.
• Google: Google Sign-In. When push notifications are enabled in the mobile app, Firebase Cloud Messaging.
• Payme, Click and Telegram Payments: online payments. For fiscal receipts, product names, MXIK and unit codes, price, VAT and barcode are sent to the payment provider.
• Email delivery service (SMTP provider): verification, password reset and invitation emails.
• Cloudflare: network protection and traffic delivery; determining country and city from the IP address.
• Anthropic: only if the merchant connects their own API key (BYOK). When the merchant asks, the product name, category, attributes, up to 3 photos and catalogue text for translation are sent to Anthropic under the terms between the merchant and Anthropic. Buyers' personal data is not sent.
• OpenStreetMap (map tiles and Nominatim): when a buyer picks an address on the map, map tiles are loaded and the coordinates are converted into an address.
• Sentry: when enabled, for error monitoring. Personal data is removed from each report before it is sent: IP addresses, email addresses, phone numbers, passwords and tokens, cookies and request bodies. Users are identified only by an internal ID.

We disclose data to competent authorities only in the cases and in the manner provided by law.

Under Article 27-1 of the Law "On Personal Data", personal data of citizens of the Republic of Uzbekistan collected and processed using information technologies, including the internet, must be stored on technical means physically located in Uzbekistan and in databases registered in the State Register of Personal Databases. MilliyBot undertakes to comply with this requirement.

Some of the services listed above (Telegram, Google, Cloudflare, Anthropic, OpenStreetMap, Sentry) have servers outside Uzbekistan. Data is transferred to them only to the extent the relevant feature requires and in compliance with the conditions for cross-border transfer provided by law. By using the platform, you consent to such transfers.

• Account and shop data: while the account is active. When you delete your account, your profile is anonymised immediately, every session and device is signed out, and your staff memberships in other shops are removed.
• Sign-in sessions: deleted automatically 30 days after the session expires or is revoked.
• Webhook delivery logs: 30 days.
• Payment receipt images not attached to an order: deleted after 24 hours.
• Links: email verification is valid for 24 hours, password reset for 1 hour, staff invitations for 72 hours.
• Buyer session on the web storefront: 30 days.
• Orders, buyers, analytics and support correspondence: kept for the merchant while the shop is active. The merchant or we may keep them for as long as the law requires (for example, for accounting).
• A shop whose owner deletes their account is blocked immediately: the storefront closes and the bot is disconnected. After 30 days, that shop's buyers' personal data (name, phone, address and similar) is anonymised.

When the period ends or upon a deletion request, data is deleted or anonymised, except data the law requires us to keep.

• connections to the website, panel and API are encrypted with HTTPS (TLS);
• passwords are stored only as hashes; integration API keys are hashed too;
• Telegram bot tokens, the Telegram payment provider token, Payme and Click credentials, webhook signing secrets and AI API keys are stored encrypted in the database;
• sign-in tokens are kept in HttpOnly cookies that JavaScript cannot read;
• each shop's data is kept in a separate database schema; staff see only the sections their role allows;
• in the panel you can see all your active sessions and end any of them; important administrative actions are logged.
• personal data is stripped automatically from reports sent to our error monitoring (see “Third-party services”).

Product photos and shop logos are served via public links so the storefront can show them; please do not put personal data in them. Payment receipts (from buyers and for subscriptions), photos attached to return requests and profile pictures are kept in private storage and opened only by people allowed to see them, via short-lived signed links (valid for up to 15 minutes).

No system is perfectly secure. If we detect a data breach, we will notify you and the competent authority as required by law.

Under the law you have the right to:

• know whether your data is processed, for what purpose and to whom it has been disclosed;
• obtain a copy of your data;
• correct inaccurate or outdated data;
• request deletion of your data or that processing stop;
• withdraw your consent;
• lodge a complaint with the competent state authority or a court.

How to exercise them

• You can change your name, password and interface language in the panel settings and end active sessions there.
• You can export products, orders and the buyer list to Excel/CSV from the panel.
• You can download a copy of your data as a file under Account in the panel settings, and delete your account yourself in the same place. What deletion does is described under “Retention periods”. For any other request, contact us at @milliybotuz_bot.

We may ask you to verify your identity before fulfilling a request. We respond within the time limits set by law. Buyers should first contact the relevant shop about their data; we help the merchant fulfil such requests.

The merchant panel is intended for people aged 18 or over with full legal capacity. We do not knowingly collect data about children. The platform does not verify buyers' ages; shops must follow Telegram's rules and the law.

If you learn that a child has given us data without parental consent, let us know at @milliybotuz_bot and we will delete it.

We may update this Policy. The current version is published on this page with its date shown above. We will notify you of material changes in advance by email or in the panel. Continuing to use the platform after the changes means you accept the new version.

For questions about privacy, your data or this Policy, contact us:

Telegram support

@milliybotuz_bot

Website

milliybot.uz