Privacy policy

The personal data operator is TopBiznes, Tashkent, Republic of Uzbekistan. This policy is adopted under the Law of the Republic of Uzbekistan “On personal data”. It covers data processed through the topbiznes.uz site, businesses' sites on *.topbiznes.uz, the business cabinet (my.xgo.uz), the till (pos.xgo.uz) and the mobile apps. The business cabinet and the till are shown under the XGo name.

• Account: first and last name, email, phone number, password (stored only as a hash) and avatar; optionally, birth date, gender and city.
• If you sign in with Google or Telegram: your Google identifier, name, email and a link to your profile picture, or your Telegram identifier, name and the phone number you shared through the bot.
• Addresses: the addresses you save and, optionally, a map pin, so you can check out faster.
• Orders and bookings: name, phone, delivery address, note, and the chosen products, service and time.
• Job and task applications: name, phone, message, an optional CV or portfolio (PDF), and for a task the price and time you propose.
• Cashback: your balance at each business and the history of its changes.
• Business details: company name, TIN, address and branches, contacts, verification documents, team members and invitations.
• Activity and messages: saved items, follows, reviews, messages to businesses, support chat, reports, and notification settings.
• Payments: records of payments for plans, AI packs and Top places, and the transaction number from the payment system. We do not store card details.
• Technical data: IP address and browser type for sign-in sessions, a device identifier for push notifications, and language.
• Statistics: a random visitor identifier, page views, searches, and the city derived from your IP address. The IP address itself is not stored in statistics.

We do not track your location continuously. We use only the city you choose and the address pins you set yourself.

• to create your account, protect it and let you sign in;
• to show businesses near you and relevant results;
• to pass your order, booking or application to the business you chose;
• to deliver the messages, notifications and emails you asked for;
• to give businesses the till, customer list, cashback and reports;
• to moderate content and prevent fraud and abuse;
• to process businesses' payments for plans, AI packs and Top places;
• to improve the Platform based on aggregated statistics.

We process data on the basis of the consent you give when you register. We also process it when this is needed to carry out a service you asked for (an order, booking, application or payment), to comply with the law, or to protect the legitimate interests of users and the Platform. You can withdraw consent at any time; this does not affect processing already carried out.

Your name and avatar are shown next to your reviews. Everything a business puts in its profile is public. Nobody can see whom you follow or what you have saved.

A business receives information about you only when you deal with it:

• when you order or book: your name, phone, address and note;
• when you apply for a job or task: your application, phone and CV; the business may add its own rating and note to it, which you do not see;
• when you message the business: your name and messages;
• when you give your phone number at the till: your purchases, debt and cashback balance are recorded in that business's customer list.

When a business works with its customers through the Platform (till sales, orders, bookings, cashback, debts or its customer list), it is an independent controller of that data. It decides why it collects the data, how it uses it and when it deletes it. TopBiznes stores this data for the business only to provide its service, and does not show it to other businesses.

For requests about your data in a business's customer list, contact that business first. If it does not reply, write to us and we will help.

Some businesses use an AI assistant to answer messages. When you write in Platform chat, on a business's site, to its Telegram bot or to the owner's Telegram account, the reply may come from AI. To make this work, the chat history, your name and phone, and the business's catalog are sent to the Google Gemini service.

TopBiznes's own support chat also uses an AI assistant and hands the conversation to a staff member when needed. AI also checks the text of businesses, products and services during moderation, and edits product photos that businesses upload. A short summary of each conversation is kept for staff and for the business.

We do not sell personal data. We share it only with suppliers the Platform needs to work, only as much as needed, and under a duty of confidentiality:

• Paylov: card payments and SMS confirmation. We never see or store card details;
• Google Gemini: AI replies, moderation and image editing;
• Google Firebase: push notifications. A new-message notification includes the sender's name and the start of the message;
• Cloudflare: storage for uploaded files, including photos and CVs;
• Resend: email delivery;
• Telegram: Telegram sign-in and businesses' Telegram channels;
• Google: Google sign-in;
• OpenStreetMap: turning an address you type into a map point. Your IP address is not sent.

Some of these suppliers keep their servers outside Uzbekistan. Data goes to them only for the purposes above. Where the law requires, we also share data with the competent state authorities.

Personal data of citizens of Uzbekistan is stored on servers located in the Republic of Uzbekistan. We use encrypted connections and password hashing, and give access only to staff who need it. We do not store card details at all.

CV and portfolio files are stored under a random link that cannot be guessed and are shown only to the business you applied to.

Data is kept for as long as the account exists. Some data has its own time limit:

• job and task applications, with their CVs, are deleted 180 days after a decision or after the listing closes;
• expired or revoked sign-in sessions, with their IP address and browser details, are deleted after 30 days;
• raw statistics records and searches are kept for 13 months;
• when you delete your account, it is anonymised at once and for good. Your email, phone, password, name, avatar, birth date, gender and linked Google and Telegram accounts are removed. Your applications, CVs, saved items, follows, addresses, reviews and notifications are deleted, and your businesses are closed together with their catalogs.

After your account is deleted, your messages with businesses are kept without your name. Records of orders, bookings, purchases, receipts, debts, cashback and payments are also kept, for accounting and as the law requires. Each business manages its own customer list; to remove an entry from it, contact that business.

• to know what data we hold about you and get a copy of it;
• to correct inaccurate data, most of it directly in your profile;
• to delete your data and account, yourself from your profile page or by writing to us;
• to withdraw consent and object to processing;
• to complain to the competent state authority for personal data protection.

To use these rights, write to us from the email linked to your account. We reply within 30 days.

The Platform is not meant for children under 16, and we do not knowingly collect their data. If you think a child has created an account, tell us and we will delete it.

Updates are published on this page with a new effective date. Registered users are told about significant changes by email or notification.