Privacy Policy
This Privacy Policy explains how Konnekt (the service at konnekt.uz operated by ODILBEKOV MIRAKBAR ODILBEKOVICH, “Konnekt”, “we”, “us”) collects, uses, shares and protects personal data. Konnekt is a software service that helps businesses answer their customers on Instagram and Telegram: automated replies and flows, an inbox for the team, broadcasts, review cards and, where enabled, an AI assistant.
Two kinds of people use Konnekt. Account holders are the businesses and their team members who sign up and use the panel. End customers are the people who write to those businesses on Instagram or Telegram or leave a review. For account holders’ data we decide how it is used (we are the data controller). End customers’ data is processed on behalf of the business they wrote to: the business decides what it collects and why, and Konnekt processes it only to provide the service to that business.
1. Data we collect
Account holders
- Account data: name, email address, password (stored only as a one-way hash), interface language, and the company name you enter.
- Google sign-in: if you choose “Continue with Google”, we receive your name, email address and whether Google has verified it. We do not get access to your Google contacts, files, mailbox or any other Google data.
- Team data: invitations you send (the invitee’s email address and role) and the roles of your team members.
- Connected channels: the ID, username and name of the Instagram professional account, Telegram bot or Telegram Business account you connect, and the access tokens needed to work with it. Tokens are stored encrypted and are never shown in the browser.
- Owner notifications: if you link our Telegram notification bot, your Telegram chat ID and language.
- Content you add: documents, FAQ answers, product catalog, flows, broadcast texts and settings.
- Integrations: if you connect a CRM (for example amoCRM), its address and access credentials, stored encrypted.
- Billing: your plan and its period. Payments are currently arranged directly with our team; we do not collect or store bank card details.
End customers (on behalf of the business)
- Profile data provided by the platform: Instagram or Telegram user ID, username and display name.
- Conversations: messages sent to and from the business account (text and references to media), comments on the business’s posts and replies to its stories, with their timestamps.
- Answers in flows: information the person chooses to share when a flow asks for it, such as a phone number, name or answers to questions, and the tags and fields the business assigns.
- Reviews: the rating, comment and, if the person enters it, phone number left on a Konnekt review page, and the time a review card was scanned.
- Link clicks: which button in a message was clicked, so the business can see which offers work.
Technical data
- IP address, browser type and the pages requested, recorded in server logs for security and troubleshooting.
- Cookies that are strictly necessary for the site to work: a session cookie that keeps you signed in, a security (CSRF) token and your language choice. We do not use advertising or third-party analytics cookies.
2. How we use the data
- To provide the service: receive and send messages through the connected accounts, run the flows and broadcasts the business sets up, show conversations in the inbox and, if the AI assistant is enabled, prepare answers from the business’s own documents and FAQ.
- To create and secure accounts: sign-in, email verification, password reset, account deletion, and protection against abuse (for example limiting repeated sign-in attempts).
- To send service emails: confirmations, invitations, security notices and important changes. We do not send marketing emails without your consent.
- To support you and to fix errors, and to improve the service using aggregated, non-identifying statistics.
- To comply with the law and to protect our rights.
We do not sell personal data, do not use it for advertising, do not build advertising profiles, and do not use end customers’ messages to train artificial intelligence models.
3. Instagram and Meta data
Konnekt works with Instagram only through Meta’s official Instagram API, and only with professional accounts that their owners connect themselves through Meta’s authorization screen. We request these permissions:
- instagram_business_basic — to read the connected account’s ID, username and profile name and show which account is connected;
- instagram_business_manage_messages — to receive messages sent to the account and to send the replies, flows and messages the business sets up or its team writes in the inbox;
- instagram_business_manage_comments — to receive comments on the account’s posts and to reply to them as the business configures (for example, sending information to people who commented a keyword).
Data received from Meta is used only to provide these functions to the business that connected the account. It is not sold, not shared with data brokers or advertisers, not used for profiling or surveillance, and not transferred except as described in section 4. We follow the Meta Platform Terms and Developer Policies. A business can disconnect its Instagram account at any time: removing the channel in Konnekt (Channels) deletes the stored access token at once; removing Konnekt in Instagram (Settings → Apps and websites) revokes the token, after which we can no longer receive or send anything for that account.
4. Who we share data with
We share personal data only with service providers that we need to run Konnekt, and only as much as each needs:
- Meta Platforms (Instagram) and Telegram — to receive and deliver messages and comments of the connected accounts.
- AI providers (OpenAI, Anthropic) — only when the AI assistant is enabled for the business: the customer’s question and the relevant parts of the business’s documents and FAQ are sent to generate an answer. We use these providers’ API services, under terms that do not allow them to use this data to train their models.
- CRM systems (for example amoCRM) — only if the business connects one: the contacts, their answers and hand-overs are sent to the business’s own CRM account.
- Google — for “Continue with Google” sign-in, and our website loads fonts from Google Fonts, which lets Google see your IP address.
- Hosting and email providers — our servers, database and email are hosted by Eskiz (Republic of Uzbekistan).
- Authorities — when the law requires it or to protect the rights and safety of people and of Konnekt.
Meta, Telegram, the AI providers, Google and some CRMs are located outside Uzbekistan, so data sent to them is transferred abroad as a necessary part of the service the business uses.
5. Where the data is stored and how long
Konnekt’s database and files are stored on servers in the Republic of Uzbekistan.
- Account data is kept while the account exists and is deleted when the account is deleted.
- End customers’ data is kept while the business uses Konnekt. The business can delete contacts and documents at any time; all its data is deleted when the company or its owner’s account is deleted. Chat history may also be deleted automatically after a retention period we set.
- Server logs and database backups are kept for up to 30 days and then overwritten, so deleted data disappears from them within that time.
- Data may be kept longer only where the law requires it.
6. Security
All traffic to Konnekt is encrypted with HTTPS. Passwords are stored as one-way hashes; access tokens and CRM credentials are encrypted. Each company sees only its own data, team access is limited by roles, and sign-in is protected against repeated attempts. No system is perfectly secure; if a breach affects your data, we will notify you and the competent authorities as the law requires.
7. How to delete your data
Account holders
- In the panel open Profile settings → Delete account. We email you a confirmation link; after you confirm, your account is deleted together with every company you are the only owner of (its channels, flows, contacts, conversations and documents). Companies that have other owners keep working; only your membership is removed.
- To disconnect Instagram without deleting the account, remove the channel in Channels, or remove Konnekt in Instagram under Settings → Apps and websites.
- You can also write to support@konnekt.uz from your account’s email address.
End customers
If you wrote to a business that uses Konnekt and want your data deleted, you can ask that business directly, or write to support@konnekt.uz with your Instagram or Telegram username and the name of the business. We will delete your data, or pass the request to the business and help it do so, within 30 days and confirm by email.
8. Your rights
Under the Law of the Republic of Uzbekistan “On Personal Data” and other applicable laws, you may ask to know what data we hold about you, to receive a copy, to correct it, to delete it, to withdraw a consent you gave, and to object to processing. Write to support@konnekt.uz; we answer within 30 days. If your data was collected by a business that uses Konnekt, we may forward the request to that business, as it decides about that data. You also have the right to complain to the authorized state body for personal data protection.
9. Legal grounds
We process personal data to perform our agreement with account holders (the Terms of Service), on the basis of consent where it is required, to comply with legal obligations, and for our legitimate interests in keeping the service secure and working. Businesses that use Konnekt are responsible for having a lawful basis, including consent where required, for processing their customers’ data and for informing their customers about it.
10. Children
Konnekt is a service for businesses and is not intended for children. Accounts may be created only by persons aged 18 or over. We do not knowingly collect children’s data for our own purposes; if you believe a child’s data has reached us, write to us and we will delete it.
11. Changes to this policy
We may update this policy as the service or the law changes. The date at the top shows the latest version. About important changes we will tell account holders by email or in the panel before they take effect.
12. Contact
Konnekt — konnekt.uz, Republic of Uzbekistan. Operator: ODILBEKOV MIRAKBAR ODILBEKOVICH.
Email for privacy questions and data requests: support@konnekt.uz.