Privacy policy

1. General

IlmBaza (ilmbaza.uz, the “Platform”) processes users’ personal data in accordance with the Law of the Republic of Uzbekistan “On Personal Data”. This policy explains what data we collect, why we use it, how long we keep it and what your rights are.

By using the Platform or signing up, you agree to this policy.

2. What we collect

When you sign up and sign in

• name, email and password (the password is stored only as an encrypted hash – nobody, including our staff, can see it);
• if you sign in with Google – your Google account ID, name, email and profile picture;
• if you sign in with Telegram or use the bot – your Telegram ID and name. An account is created for you automatically the first time you use the bot – you can delete it at any time;
• your plan, subscription term, interface language, sign-up and last sign-in dates.

When you use the Platform

• the number of results you get from the tools (for the daily limit). For visitors without an account this count is kept by IP address;
• settings and lists synced to your account: pinned tools, saved templates, tracked journals, deadlines, roadmap, title page and length data, council document checkmarks;
• surveys you create and the responses they receive;
• messages sent through the contact form or the “Report an error” button: name, contact, topic, text, page and IP address;
• payment orders: plan, term, amount, payment method and status. For card transfers – the receipt image and comment you upload.

Automatically

• anonymous visit statistics: the page opened, language, device type, browser and OS, and the site you came from. Your IP address is not stored; a random anonymous ID is saved in your browser;
• to protect accounts – the IP address and email of failed sign-in attempts.

We do not collect: card numbers, expiry dates, CVV or other payment details – these are entered directly in Payme or Click.

3. Files in the tools

In document check, Word formatting, the academic proofreader, author’s abstract, presentation and other tools, the DOCX and PDF files you choose are processed in your browser and are not sent to our server. The result (for example, a corrected file) is also created on your device. Only a count of the result is sent to the server.

4. How we use data

• to create your account, sign you in and keep it secure;
• to run the tools, plans and daily limits;
• to keep your settings the same on all your devices;
• to send notifications you turned on: deadline reminders, journal status, sign-in and confirmation codes;
• to record payments and activate subscriptions;
• to answer your requests;
• for general anonymous statistics to improve the Platform.

We do not sell your data or share it with third parties for advertising.

5. Third-party services

The Platform uses the following services; they process data under their own rules:

• Payme and Click – online payments;
• Google – when you choose to sign in with Google;
• Telegram – bot notifications and sign-in with Telegram;
• an email service (SMTP) – to deliver emails;
• Google Analytics and Yandex Metrica – only if enabled, for general statistics.

Where required by law, data may be provided to authorised government bodies upon their official request.

6. Cookies and browser storage

• a sign-in session cookie – 30 days, readable only by the server;
• a cookie with your chosen language;
• browser storage (localStorage): theme (light or dark), the anonymous statistics ID, tool data while you work as a guest, and when the sign-up suggestion was shown.

You can delete them in your browser settings. You will then be signed out and some settings will return to their defaults.

7. Retention

• account data – until the account is deleted;
• daily usage counts – to calculate limits and statistics;
• payment orders – kept for accounting even after the account is deleted, without being linked to you;
• requests – until they are handled and for the time needed to do so.

8. Security

• passwords are stored as encrypted hashes;
• the session cookie is sent only over a secure connection and is not accessible to page scripts;
• secret keys in the admin panel are stored encrypted;
• sign-in attempts are rate-limited;
• changing your password or clicking “Sign out everywhere” closes sessions on your other devices.

9. Your rights

• view and correct your data – Settings → Profile;
• disconnect Google or Telegram and turn off notifications;
• delete your account – in Settings. This deletes the account, synced data, surveys and their responses, and usage counts;
• ask how your data is used.

10. Changes to this policy

This policy may be updated. The new version is published on this page with its date and takes effect on the day it is published.

11. Contact

Questions about personal data: info@ilmbaza.uz or the Contact page.