Privacy Policy and Consent to Data Processing Uniqore
This document simultaneously describes the processing of personal data, the terms of the user's consent, the use of cookies and the receipt of marketing communications. It applies to the user's own data; the lawfulness of the data of employees, clients and other persons is ensured by the Customer under the public offer.
1. The Operator and scope
1.1. The Operator is Uniqore LLC, BIN 260840038553, address: Republic of Kazakhstan, 010000, Astana, Saraishyk district, 10/1 Rakymzhan Koshkarbayev Avenue, non-residential premises 18, email: hi@uniqore.ai, phone: +7 777 687 95 77.
1.2. The Policy applies to the website uniqore.ai, the account, the application, support, payment and direct communications of Uniqore. The Product is intended for legal entities, individual entrepreneurs and adult individuals who use it exclusively in their professional or entrepreneurial activity and not as consumers. The Product is not intended for personal, family, household or other needs unrelated to entrepreneurial activity, nor for persons under 18 years of age.
2. Data, purposes and legal grounds
2.1. Uniqore may process:
- first name, last name, organisation, position, work email and phone number;
- information on the type of Customer and the professional or entrepreneurial purpose of use;
- the IIN of an individual or the BIN of an organisation, the address and other details required for the contract, invoicing, payment and mandatory accounting;
- data of the account, the Plan, invoices, the amount, currency, period, purpose and status of payment, requests and selected settings;
- a token or masked details of the payment method received from the payment provider;
- IP address, date, time, device, application, account, organisation and session identifiers, sign-in, error and security logs;
- statistics on the use of features, models, requests, tokens and cost;
- requests entered by the user, correspondence and other content, as well as transcripts, classifications, summaries and other results of processing.
2.2. Uniqore does not request a copy of an identity document, full payment card details, medical information, biometrics, passwords or state secrets, unless a separate feature and a lawful ground expressly provide for this. Full card details are processed by the payment provider; Uniqore must not receive or store them.
2.3. Purposes of processing: to confirm a permitted purpose of use; to create and protect the account; to conclude and perform the contract; to provide, support and bill for the Product; to issue invoices, accept payment and keep mandatory records; to prevent abuse and incidents; to fix errors; to protect rights; to comply with the law; to improve reliability on the basis of technical, aggregated or anonymised data; to send marketing only with voluntary consent.
2.4. The legal ground is the consent of the data subject, the contract, a requirement of law or another ground provided for by the legislation of the Republic of Kazakhstan. For a new incompatible purpose, Uniqore obtains a new ground.
3. The user's consent
3.1. By ticking a mandatory checkbox that is not pre-ticked, the user gives Uniqore LLC consent to collect and process the personal data listed in clause 2.1 for the purposes of clause 2.3, other than marketing.
3.2. Permitted actions: collection, recording, systematisation, accumulation, storage, updating, retrieval, use, transfer to providers and outside Kazakhstan on the terms of section 4, blocking, anonymisation and deletion. Processing may be automated, non-automated or mixed. The consent does not include dissemination of the data in publicly accessible sources.
3.3. The consent is valid until the purposes are achieved, until it is withdrawn or until the end of the mandatory retention period. After withdrawal, Uniqore may continue processing if this is required by law, mandatory record-keeping, the defence of claims or an unperformed obligation, and may immediately disable the features or the account for which the data is necessary.
3.4. Uniqore records the full name, email, type of Customer, confirmed purpose of use, the text and version of the document, the checkboxes selected, the date, time and technical identifiers of the event. The user confirms the accuracy of the data they have provided.
4. Providers, storage and transfer
4.1. The database containing personal data is stored in the territory of the Republic of Kazakhstan. Until this condition is technically confirmed, Uniqore does not start processing real personal data.
4.2. For the operation of selected features, data to the extent necessary may be received by providers of infrastructure, artificial intelligence, speech recognition, email, payments, support and integrations. Uniqore does not sell personal data.
4.3. The following list is maintained and kept current:
| Provider and legal entity | Country of processing | Data | Purpose |
|---|---|---|---|
| netcup GmbH (VPS hosting, Coolify) — until the database is relocated to the Republic of Kazakhstan | Germany | account, device tokens, logs, acceptance records, CRM cache | hosting of the server and database |
| OpenRouter, Inc. | USA | model requests: anonymised aggregates, "Manager #N" labels, dialogue audio and text when speech analytics is enabled | AI models and speech recognition |
| Resend, Inc. | USA | email, sign-in code | sign-in emails |
| Google LLC | USA | email and Google identifier — only when signing in with Google | sign in with Google |
| The Customer's CRM (Bitrix24, amoCRM) | per the Customer's own agreement | portal data read on the Customer's instruction | data source for automations |
4.4. The user consents to the transfer to the providers from the current list, including cross-border transfer, where it is required by the selected feature. Transfer to a state that does not ensure the required protection is performed on the basis of this consent or another ground expressly provided for by law. If a change of provider goes beyond the scope of this consent, Uniqore requests a new one; refusal makes the dependent feature unavailable and does not oblige Uniqore to create a local replacement.
4.5. The user's content is not used to train publicly available models without the separate consent of the Customer. Technical, aggregated and irreversibly anonymised information may be used for security, analytics and improvement of the Product.
5. Retention periods, security and rights
5.1. Account and contract data is retained for the term of the contract and the mandatory periods of record-keeping and defence of claims. The IIN, BIN, invoices and payment details are retained for the period required for mandatory accounting, tax and other record-keeping. Integration data is retained until deletion, until the feature is disabled or until the end of the technical period. Logs and backups are deleted according to the internal schedule. The period is extended where required by law, a dispute or an investigation; the data is then deleted or anonymised.
5.2. Uniqore applies access control, protection of connection secrets, logging, backups and organisational measures commensurate with the risk. Absolute security is not guaranteed. Uniqore notifies data subjects, customers and authorities of a confirmed incident in the cases and within the time limits established by law.
5.3. The data subject has the right to learn of the existence, purposes, sources, composition, transfer and periods of processing; to demand rectification, blocking or deletion where there are grounds; to withdraw consent; to opt out of marketing; to apply to the authorised body or a court.
5.4. A request is sent to hi@uniqore.ai with the name, the account email and the demand. Uniqore may verify the identity and authority of the applicant and responds within the time limit established by law. Withdrawal does not affect the lawfulness of prior processing.
6. Cookies
6.1. The website may use cookies and similar technologies for loading, security, sign-in, sessions and settings. Such necessary cookies provide the requested function; blocking them may disrupt the operation of the website.
6.2. Analytics and marketing cookies that make it possible to identify the user directly or indirectly are not enabled until the user makes a separate choice. Silence or continued browsing does not constitute consent.
6.3. A technical scan is carried out before publication. If only necessary cookies are used, the website states this expressly and does not display a sham consent banner. If there are non-essential cookies, the interface allows the user to accept or reject them before they are set and to change the choice later; the list of names, providers, purposes, periods and countries is published in the interface or in this Policy.
7. Marketing communications
7.1. Marketing is not a condition of registration or purchase. Only by ticking a separate checkbox that is not pre-ticked does the user agree to receive news, offers, surveys and invitations from Uniqore via the email, phone, SMS or messenger selected by them.
7.2. For this purpose, the name, organisation, position, work email and phone number, the selected channel and language, the source and date of consent, and information on delivery, opens, clicks and opt-out are processed. The consent is valid until withdrawn via the link, a command in the message, in the account or through hi@uniqore.ai. Uniqore keeps a minimal record of the opt-out so as not to resume the mailing by mistake.
7.3. Messages about sign-in, security, payment, changes to the contract and the operation of the account are service messages and may be sent without marketing consent if they are necessary for the contract or the law and contain no advertising.
8. Changes and contacts
8.1. Each edition has a version and a date. Uniqore may update the Policy when the Product, providers or the law change. New consent is requested if the user's expression of will changes or if the law so requires. Previous editions are kept in the archive.
8.2. Questions and requests: hi@uniqore.ai, +7 777 687 95 77. The postal address of the Operator is given in clause 1.1.