Skip to content

Legal

Privacy policy

  • 4 min read
  • 11 sections

In short

How osonai.uz collects, uses, stores and protects personal data of users of osonai.uz, including the prompts and files you submit to AI models, and what rights you have.

1. Who we are

1.1. The operator of personal data is osonai.uz (the “Provider”, “we”). This policy is issued in accordance with the Law of the Republic of Uzbekistan “On Personal Data” and applies to the osonai.uz website and applications.

1.2. By creating an account or using the Service you consent to the processing of your personal data as described in this policy.

2. What data we process

  • Account data: name, email address, password (stored only as a secure hash), Google account identifier and email if you sign in with Google, language preference.
  • Payment data: orders, amounts, payment status and the payment service used. Card data is entered on the payment service’s page and is not received or stored by us.
  • Content: prompts, uploaded images, videos and audio, generation settings and results (outputs), favorites.
  • Technical data: IP address, device and browser type, app version, session tokens, request logs, and data about errors and security events.
  • Communications: messages you send to support.

3. Why we process data

  • to create and maintain your account and sign you in;
  • to run generations and store your files and history;
  • to accept payments, add credits and keep accounting records required by law;
  • to prevent fraud, abuse and prohibited content, and to keep the Service secure;
  • to send service messages (email confirmation, password reset, payment and generation notifications);
  • to improve the Service using aggregated statistics.

We process data on the basis of your consent, the need to perform the agreement (public offer) with you, and obligations established by law.

4. AI inputs and outputs

4.1. To create a generation, your prompt, uploaded files and settings are transmitted to the provider of the selected AI model. Providers may be located outside the Republic of Uzbekistan. We transmit only what is needed for the generation and do not send your name or email.

4.2. We do not use your private inputs and outputs to train AI models and do not sell them. AI model providers process data under their own terms; we choose providers that do not use API data for training where such an option exists.

4.3. Outputs are stored in your private history. They appear in public galleries only if you choose to publish them.

4.4. Inputs and outputs may be checked automatically and, where necessary, reviewed by our staff to enforce the acceptable use rules.

5. Cookies and similar technologies

5.1. We use cookies that are necessary for the Service to work: a secure session cookie that keeps you signed in (not accessible to scripts), a cookie indicating that a session exists, and a cookie that remembers your language.

5.2. We do not use advertising cookies. If we introduce analytics or marketing cookies, we will update this policy and, where required, ask for your consent.

5.3. You can delete cookies in your browser settings; without the necessary cookies you will not be able to stay signed in.

6. Who we share data with

  • AI model providers — to perform generations (see section 4);
  • payment services — to process payments;
  • hosting, file storage and email delivery providers — to operate the Service;
  • government authorities — only in cases provided for by law.

Recipients process data only for the stated purposes. We do not sell personal data.

7. Storage and retention

7.1. Personal data of citizens of the Republic of Uzbekistan is stored in accordance with the requirements of the legislation of the Republic of Uzbekistan, including requirements on the location of databases.

7.2. Account data is kept while the account exists. After you delete the account, your personal data, files and generations are deleted or anonymized within 30 days, except for data we must keep by law (for example payment records for accounting and tax purposes).

7.3. Uploaded files and outputs are kept until you delete them or your account. Unfinished uploads are deleted automatically. Technical logs are kept for a limited period, usually no longer than 12 months.

8. Security

We protect data with encrypted connections (HTTPS), password hashing, restricted access for staff, private file storage with time-limited links, and monitoring of security events. No method of transmission or storage is completely secure, but we work to protect your data and will notify you of incidents as required by law.

9. Your rights

  • to know what data we process and to receive a copy of it;
  • to correct inaccurate data (most of it can be changed in the account settings);
  • to delete your data — you can delete the account in the account settings;
  • to withdraw consent to processing (this may make it impossible to use the Service);
  • to appeal against our actions to the authorized state body for personal data protection or to a court.

To exercise your rights, write to —. We will respond within the period established by law.

10. Children

The Service is not intended for children under 18 without the consent of their parents or legal representatives. If you believe a child has provided us with personal data without such consent, contact us and we will delete it.

11. Changes and contact

We may update this policy by publishing a new version on this page. Questions about personal data: —. The operator’s details are listed below.

Provider details

Company
—
TIN (STIR)
—
Address
—
Phone
—
Email
—

Questions about this document?

Write to us and we'll explain any point.

Contact support
Back to top