Maxfiylik siyosati

Tahrir sanasi: 2026-yil 12-oktabr

Ushbu siyosat iOS uchun StyleCart CRM mobil ilovasi (bundle uz.stylecart.crm), StyleCart boshqaruv paneli va ularning serveri qanday ma’lumotlarni qayta ishlashini tasvirlaydi. Ilova kelinlik va kechki liboslar salonlari xodimlari uchun mo‘ljallangan, keng omma uchun emas. English version: pastdagi bo‘limga qarang.

Biz kimmiz va qanday rolda

StyleCart (stylecart.uz) xizmatni ishlab chiqadi va yuritadi. Salon o‘z mijozlari ma’lumotlarining egasi: ismlar, telefonlar, o‘lchamlar va buyurtmalarni salon xodimlari kiritadi, ular nima uchun kerakligini salon hal qiladi. StyleCart bu ma’lumotlarni salon topshirig‘i bilan va faqat xizmat ishlashi uchun qayta ishlaydi. Xodimlar akkauntlari ma’lumotlarini xizmat operatori sifatida qayta ishlaymiz.

Qanday ma’lumotlarni qayta ishlaymiz

• Xodim akkaunti: elektron pochta manzili, salondagi roli (masalan, egasi yoki menejer), parol xesh ko‘rinishida (parolning o‘zi saqlanmaydi) va sessiya tokenlari. Telefonda tokenlar Keychain himoyalangan xotirasida turadi.
• Salon mijozlari ma’lumotlari, ularni xodimlar kiritadi: ism, telefon va Telegram ID (ixtiyoriy), o‘lchamlar va eslatmalar, buyurtmalar, kiyib ko‘rishlar va yozuvlar, to‘lovlar va garovlar.
• Liboslar katalogi: nomlar, kodlar, narxlar, holatlar va xodim kamerada olgan yoki galereyadan tanlab serverga yuklagan suratlar.
• Assistentga ovozli xabarlar: mikrofon yozuvi serverga yuboriladi va Google Gemini xizmati orqali matnga aylantiriladi. Audio saqlanmaydi va jurnallarga tushmaydi. Matn assistentga oddiy xabar sifatida ishlaydi, assistent bilan yozishmalar tarixi esa serverda saqlanadi.
• Assistentga matnli xabarlar: server ularni qayta ishlaydi va tashqi til modeli provayderiga (server sozlamasiga qarab Anthropic yoki Google) uzatadi. Modelga ketadigan ma’lumotlardan mijozlarning telefonlari va Telegram ID lari olib tashlanadi.
• Push-bildirishnomalar ma’lumotlari: Apple Push (APNs) tokeni, ilova identifikatori, muhit va interfeys tili. Ular buyurtmalar va kiyib ko‘rishlar haqida bildirishnoma yuborish uchun kerak. Akkauntdan chiqilganda qurilma serverda bekor qilinadi.
• Nosozlik ma’lumotlari: agar yig‘ilmada Sentry yoqilgan bo‘lsa, unga ilova nosozliklari va xatolari haqida qurilma va versiya bo‘yicha texnik ma’lumotli hisobotlar yuboriladi. IP-manzil va foydalanuvchi ma’lumotlari uzatilmaydi.
• Serverdagi texnik ma’lumotlar: so‘rovlar vaqti va yo‘nalishi, javob kodlari, so‘rov identifikatorlari, xatolar. Parollar va tokenlar jurnallarga yozilmaydi.

Kamera QR-birkalar va shtrix-kodlarni skanerlash hamda liboslar suratini olish uchun kerak; skanerlash qurilmaning o‘zida bajariladi. Mikrofon faqat assistentga ovozli xabarlar uchun kerak. Ruxsatni iOS sozlamalarida bekor qilish mumkin.

Biz nima qilmaymiz

Biz foydalanuvchilarni boshqa kompaniyalarning ilovalari va saytlari bo‘ylab kuzatmaymiz, reklama identifikatoridan foydalanmaymiz, reklama ko‘rsatmaymiz va ma’lumotlarni sotmaymiz. Ilovada uchinchi tomon reklama va analitika SDK lari yo‘q; foydalanish voqealari faqat ilovaning texnik jurnaliga yoziladi.

Bu ma’lumotlar nima uchun kerak

Faqat xizmat ishlashi uchun: akkauntga kirish, salon mijozlari, buyurtmalari, katalogi va kassasini yuritish, push-bildirishnomalar, ovozli va matnli assistent, nosozliklarni aniqlash va suiiste’molchilikdan himoya.

Uchinchi tomon AI xizmatlari: Google Gemini va Anthropic

StyleCart CRM assistenti tashqi til modellarida ishlaydi. Assistentdan foydalansangiz, serverimiz kontentingizni Google (Gemini API)ga va, server sozlamalarida yoqilgan bo‘lsa, Anthropicga uzatadi. Assistentga murojaat qilmasangiz, bu ma’lumotlar yuborilmaydi.

• Nima yuboriladi: assistentga aytib yozdirgan ovozli yozuvingiz; assistentga xabarlaringiz matni, jumladan ovozning matnga aylantirilgani; savolingizga javob berish uchun zarur salon ma’lumotlari (masalan, buyurtmalar, liboslar, kiyib ko‘rishlar, summalar va bazadagi mijozlar ismlari). Mijozlarning telefonlari va Telegram ID lari bu ma’lumotlardan yuborishdan oldin olib tashlanadi. O‘zingiz yozgan yoki aytganingiz o‘zgarishsiz yuboriladi.
• Kimga: ovozli yozuvlarni faqat Google Gemini qayta ishlaydi. Xabarlar matni va javob uchun ma’lumotlarni serverda qaysi model yoqilganiga qarab Anthropic yoki Google Gemini qayta ishlaydi.
• Nima uchun: faqat ovozni matnga aylantirish va assistentdagi so‘rovingizga javob berish uchun.
• Bu ma’lumotlarni reklama va kuzatuv uchun ishlatmaymiz, ular asosida reklama profillarini tuzmaymiz va provayderlarga bunday maqsadda uzatmaymiz. Audio bizda saqlanmaydi; assistent bilan yozishmalar tarixi serverimizda saqlanadi.

Ma’lumotlarni kimga uzatamiz

• Xosting: ma’lumotlar bazasi va yuklangan suratlar saqlanadigan StyleCart serveri.
• Apple (APNs): push-bildirishnomalarni yetkazish.
• Google (Gemini API): ovozli xabarlarni matnga aylantirish; assistent javoblari uchun ham ishlatilishi mumkin.
• Anthropic: server sozlamalarida yoqilgan bo‘lsa, assistentning til modeli.
• Sentry: yig‘ilmada yoqilgan bo‘lsa, nosozlik hisobotlari.
• Telegram: xodim o‘z Telegramini ulagan bo‘lsa, assistent va bildirishnomalar u yerda ham mavjud; bu qismga Telegram siyosati amal qiladi.

Bu provayderlarga faqat tegishli funksiya uchun zarur narsani uzatamiz.

Xavfsizlik

Ma’lumotlar HTTPS orqali uzatiladi. Parollar faqat xesh ko‘rinishida saqlanadi. Turli salonlar ma’lumotlari ma’lumotlar bazasi darajasida bir-biridan ajratilgan.

Ma’lumotlarni qancha saqlaymiz

Ma’lumotlar salon xizmatdan foydalanayotgan vaqt davomida saqlanadi. Ma’lumotlar bazasining zaxira nusxalari serverda 14 kun saqlanadi. Sessiyani yangilash tokeni 30 kun amal qiladi. Ovozli xabarlar audiosi saqlanmaydi.

Ma’lumotlar va akkauntni o‘chirish

Xodimlar akkauntlarini salon egasi boshqaruv panelida (dashboard.stylecart.uz) yaratadi va o‘chiradi. Xodim o‘z akkauntini ilovada o‘zi o‘chirishi mumkin: «Yana» → «Akkauntni o‘chirish»; shundan keyin u bilan kirib bo‘lmaydi, email, Telegram va bildirishnoma qurilmalari o‘chiriladi. Salon o‘z mijozlari yozuvlarini tuzatishi va o‘chirishi mumkin. O‘z akkauntingizni yoki salonning barcha ma’lumotlarini o‘chirish uchun bizga yozing (kontaktlar pastda); so‘rovni o‘rinli muddatda ko‘rib chiqamiz. Agar siz salon mijozi bo‘lsangiz, salonning o‘ziga murojaat qiling: ma’lumotlaringizni aynan salon boshqaradi.

Bolalar

Xizmat bolalar uchun mo‘ljallanmagan va biz ularning ma’lumotlarini ataylab yig‘maymiz.

Siyosatdagi o‘zgarishlar

Biz ushbu siyosatni yangilashimiz mumkin. Joriy versiya va tahrir sanasi doim shu sahifada ko‘rsatiladi.

Kontaktlar

Ma’lumotlar bo‘yicha savollar uchun saydaleiv@gmail.com manziliga yoki Telegramda @saydaleivs ga yozing.

Privacy Policy (English)

Effective date: October 12, 2026

This policy describes the data processed by the StyleCart CRM iOS app (bundle ID uz.stylecart.crm), the StyleCart web dashboard and their server. The app is a staff tool for bridal and formal-wear salons and is not a consumer app.

Who we are

StyleCart (stylecart.uz) builds and operates the service. The salon is the controller of its own client data: salon staff enter client names, phone numbers, measurements and orders. StyleCart acts as a processor of that data on the salon's behalf and only to run the service. We process staff account data as the service operator.

Data we process

• Staff account: email address, role within the salon (e.g. owner or manager), password stored only as a hash, and session tokens. On the phone, tokens are kept in the iOS Keychain.
• Salon client data entered by staff: name, optional phone number and Telegram ID, measurements and notes, orders, fittings and appointments, payments and deposits.
• Dress catalog: names, codes, prices, statuses and photos that staff take with the camera or pick from the photo library and upload to the server.
• Voice messages to the assistant: the microphone recording is sent to our server and transcribed to text by Google Gemini. The audio is not stored and is not written to logs. The transcript is handled like a regular message to the assistant, and the assistant conversation history is stored on the server.
• Text messages to the assistant: processed by our server and sent to an external language-model provider (Anthropic or Google, depending on server configuration). Client phone numbers and Telegram IDs are removed from the data sent to the model.
• Push notification data: Apple Push (APNs) device token, app bundle ID, environment and interface language, used to deliver order and fitting notifications. On sign-out the device is revoked on the server.
• Crash data: if Sentry is enabled in the build, crash and error reports with technical device and app-version information are sent to Sentry. IP address and user identity are not sent.
• Server technical logs: request time and route, response codes, request IDs and errors. Passwords and tokens are not logged.

The camera is used to scan QR tags and barcodes (scanning runs on the device) and to photograph dresses. The microphone is used only for voice messages to the assistant. You can revoke these permissions in iOS Settings.

What we do not do

We do not track users across other companies' apps and websites, do not use the advertising identifier, do not show ads and do not sell data. The app contains no third-party advertising or analytics SDKs; usage events are written only to the app's technical log.

Why we use the data

Only to run the service: sign-in, managing a salon's clients, orders, catalog and cash desk, push notifications, the voice and text assistant, crash diagnostics and abuse prevention.

Third-party AI services: Google Gemini and Anthropic

The StyleCart CRM assistant runs on external language models. When you use the assistant, our server sends your content to Google (Gemini API) and, if enabled in server settings, to Anthropic. If you do not use the assistant, this data is not sent.

• What is sent: the voice recording you dictate to the assistant; the text of your messages to the assistant, including the voice transcript; and the salon data needed to answer your question (for example orders, dresses, fittings, amounts and client names from the database). Client phone numbers and Telegram IDs are removed from this data before sending. What you type or say yourself is sent as is.
• To whom: voice recordings are processed only by Google Gemini. Message text and the data needed for the answer are processed by Anthropic or Google Gemini, depending on which model is enabled on the server.
• Why: only to transcribe your voice and answer your request in the assistant.
• We do not use this data for advertising or tracking, do not build advertising profiles from it and do not pass it to providers for such purposes. We do not store the audio; the assistant conversation history is stored on our server.

Who we share data with

• Hosting: the StyleCart server that stores the database and uploaded photos.
• Apple (APNs): push notification delivery.
• Google (Gemini API): transcription of voice messages; may also be used for assistant replies.
• Anthropic: the assistant's language model, if enabled in server settings.
• Sentry: crash reports, if Sentry is enabled in the build.
• Telegram: if a staff member links their Telegram account, the assistant and notifications are also available there; Telegram's own policy applies to that part.

We share with these providers only what the relevant feature needs.

Security

Data is transmitted over HTTPS. Passwords are stored only as hashes. Different salons' data is isolated from each other at the database level.

Retention

Data is kept while the salon uses the service. Database backups are kept on the server for 14 days. Session refresh tokens are valid for 30 days. Voice message audio is not stored.

Deleting data and accounts

Staff accounts are created and removed by the salon owner in the dashboard (dashboard.stylecart.uz). A staff member can also delete their own account in the app: More → Delete account; the account can no longer sign in, and its email, Telegram link and notification devices are removed. A salon can correct and delete records about its own clients. To delete your account or all of a salon's data, contact us (below) and we will handle the request within a reasonable time. If you are a salon's client, contact the salon: it controls your data.

Children

The service is not intended for children and we do not knowingly collect their data.

Changes

We may update this policy. The current version and its effective date are always shown on this page.

Contact

For privacy questions write to saydaleiv@gmail.com or on Telegram at @saydaleivs.