Torus

Privacy policy

Version of 10.10.2026

This policy describes what personal data [company name] (the Operator) processes when operating the torus.uz website and the Torus service, why, and how it is protected. It is prepared in accordance with the Law of the Republic of Uzbekistan “On Personal Data”. This English version is provided for convenience; in case of discrepancy the Russian version prevails.

1. Data we process

  1. 1.1.Account data: first and last name, email address, password (as an irreversible hash), interface language; optionally phone, position, profile photo.
  2. 1.2.Company data: name, address in the Service, details provided for invoices.
  3. 1.3.Technical data: IP address, browser and device information, login and last activity time, activity log in the Service.
  4. 1.4.Payment data: amount, date, method and payment number. Bank card data is processed by the Payme and Click payment systems — the Operator neither receives nor stores it.
  5. 1.5.If Telegram is connected — the chat ID used to send notifications.
  6. 1.6.Content users place in the Service (issues, comments, documents) is processed on behalf of the customer company, which determines the purposes of its processing.

2. Purposes

  1. 2.1.Registering companies and users, logging in and operating the Service.
  2. 2.2.Sending service emails and notifications: email confirmation, password reset, reminders, plan and payment information.
  3. 2.3.Accepting payments and issuing invoices.
  4. 2.4.Security: protection against automated sign-ups, incident investigation, activity log.
  5. 2.5.User support and improving the Service based on anonymised statistics.

3. Legal grounds

  1. 3.1.Consent of the data subject, given at registration or when a user is added to a company.
  2. 3.2.Performance of the agreement (public offer) with the customer company.
  3. 3.3.Requirements of the laws of the Republic of Uzbekistan (accounting and tax).

4. Sharing with third parties

  1. 4.1.The Operator does not sell personal data and shares it only as needed to run the Service:
  2. 4.2.with the Payme and Click payment systems — to process payments;
  3. 4.3.with the email service provider — to deliver emails;
  4. 4.4.with Cloudflare (Turnstile) — to check that a human is signing up;
  5. 4.5.with Telegram — to deliver notifications if the user connected the bot;
  6. 4.6.with Anthropic — the text of a document the user sends for AI analysis to draft a backlog. The user starts this feature manually; the data is transferred outside the Republic of Uzbekistan;
  7. 4.7.with public authorities — where required by law.

5. Storage

  1. 5.1.Personal data of citizens of the Republic of Uzbekistan is stored and processed in databases located in the Republic of Uzbekistan.
  2. 5.2.Data is kept while the account or company exists. After a company is deleted its data is deleted within 30 days, except records whose retention period is set by law (e.g. payment documents).

6. Protection

  1. 6.1.Each company's data is isolated: users of one company cannot access another company's data.
  2. 6.2.Connections to the Service are encrypted (HTTPS), passwords are stored only as hashes, and the Operator's staff access to company data is restricted and logged.

7. Cookies

  1. 7.1.The Service uses only necessary cookies: for the login session, protection against request forgery (XSRF) and remembering the language. No advertising or third-party analytics cookies are used.

8. Your rights

  1. 8.1.You may obtain information about your personal data and its processing, request its correction, blocking or deletion, and withdraw your consent to processing.
  2. 8.2.Profile data can be changed in the Service. For other requests write to [email]; we reply within 10 working days. If you are a user of a customer company, some requests (such as deleting your account) are handled by your company's administrator.

9. Changes and contacts

  1. 9.1.The Operator may update this policy; the new version is published at torus.uz with the date of change.
  2. 9.2.Operator: [company name], TIN [TIN], address: [registered address]. Email: [email], phone: [phone].