Privacy policy

In short

• Who is responsible. [company name] ("Fast-CRM") — for our own data on the Site and the Platform.
• What we collect. Site requests (name, phone, email, company, message), account data, payments, support requests and server logs. No advertising or analytics cookies.
• Why. To answer your request, provide the Service, handle billing, keep things secure and meet legal requirements. We do not sell data.
• Where requests go. They are stored in our system and sent to our sales team's Telegram chat.
• Where it is stored. On Contabo GmbH servers in Germany (European Union). Encrypted copies of the backups are kept with [off-site backup provider].
• How long. Requests — up to 3 years, account data — up to 30 days after the account is closed, logs — up to 90 days, backups — up to 35 days.
• Our customers' CRM data. The customer itself is responsible for it. We process it only on the customer's instructions (Annex).
• Your rights. To see, correct or delete your data, or to withdraw consent, write to info@fastcrm.uz.

This is a summary. The full text is below. If they differ, the full text prevails.

This English text is a translation for convenience. If it differs from the Uzbek text, the Uzbek text prevails.

This Privacy policy (the "Policy") explains how [company name] ("we", the "Provider") processes your personal data (data that relates to you and makes it possible to identify you). It covers the website www.fastcrm.uz (the "Site") and the Fast-CRM Cloud service (the "Service"), including its platform at fastcrm.uz (the "Platform").

1. Who we are

1.1. For the data of Site visitors, people who submit a request on the Site, Platform users and representatives of our customers, [company name] is the owner and operator of the personal data database (we decide why and how the data is used): tax ID (STIR) [taxpayer ID (STIR)], address [legal address].

1.2. We work under Law of the Republic of Uzbekistan No. ZRU-547 "On personal data" of 2 July 2019 (the "Law"), the amendments made to it by Law No. ZRU-1125 of 2026 (to be verified), and other legislation.

1.3. Contact for personal data questions: info@fastcrm.uz, phone [phone].

2. Scope

2.1. This Policy applies to:

• Site visitors and people who submit a request through the form on the Site;
• Platform users and representatives of our customers;
• billing contacts.

2.2. Data that our customers put into the Platform (their clients' contacts, deals, messages from channels, calls and their audio recordings, files) is governed by the Data processing annex, not by this Policy. The customer itself is the owner and operator of that data; we process it only on the customer's instructions. If one of our customers has entered your data, please contact that customer. We forward any such requests we receive to the relevant customer.

2.3. This Policy does not apply to other services reached through links on the Site or connected by customers to the Platform (for example, Telegram or payment systems). Their own rules apply.

3. What data we collect

3.1. Through the request form on the Site:

• name;
• phone number;
• email address (optional; required for a trial request);
• company name;
• request type (demo, trial or question);
• message;
• chosen language;
• UTM labels (marketing labels showing which ad or link brought you to the Site);
• the time of consent and the version of the consent text.

3.2. With every request to the Site and the Platform: IP address and technical request data (time, page, browser data — user-agent). This is recorded in server logs and used to protect the Service against abuse.

3.3. For a Platform account:

• name, email address and phone number;
• password — stored only as a hash (an irreversible one-way code); we do not know the password itself;
• two-factor authentication settings;
• the time you accepted the terms at registration, IP address and user-agent;
• login history, IP address and user-agent;
• the log of actions in the account (audit log).

3.4. For billing: billing contact details, and records of invoices and payments.

3.5. When you contact support: the content of your request and your contact details.

3.6. Cookies and browser storage: the Site has no advertising or analytics cookies. The Site does not load external resources (fonts, maps, analytics). UTM labels are kept only in the browser's session storage, for the visit. The Platform uses browser storage only where it needs it to work (the signed-in state and interface settings).

3.7. Biometric data: we do not collect biometric data (data based on a person's biological features, such as the face). Face recognition is switched off in Fast-CRM Cloud. It works only in the on-premise edition, on the customer's own servers, and no data from it reaches us.

4. Purposes

4.1. We process personal data to:

• answer your request on the Site, contact you and advise you about Fast-CRM;
• open and maintain accounts, check sign-ins and provide the Service under the Public offer;
• keep the Service secure: prevent and detect abuse and unauthorised access, and keep the action log;
• issue invoices, receive and record payments, and keep accounting and tax records;
• provide support;
• send service notices about the Service, its terms, maintenance and security;
• comply with the law and lawful requests of authorised state bodies.

4.2. We do not use data for purposes incompatible with those for which it was collected, and we do not sell it.

5. Legal bases

5.1. Under the Law we process data on the following bases:

• your consent — for example, in the request form on the Site or at registration; the time of consent and the version of the text are recorded;
• concluding and performing a contract (the Public offer) to which you, or the customer you represent, are a party;
• obligations imposed on us by law (for example, accounting and tax records);
• other cases in which the law allows processing without consent, including keeping the Service secure to the extent the law allows.

6. Where data is stored

6.1. Site and Platform data is stored on servers of Contabo GmbH in the Federal Republic of Germany (European Union).

6.2. The database is backed up every day. Backups are kept on that server for 7 (seven) days. Their encrypted copies (encrypted with the age tool before they leave the server) are kept with [off-site backup provider] for up to 35 (thirty-five) days.

7. Cross-border transfer

7.1. Because the servers are in Germany, storing data on them is a transfer outside Uzbekistan (cross-border transfer).

7.2. The transfer is carried out on grounds provided by law. Germany is on the list of states that adequately protect the rights of data subjects, approved by Cabinet of Ministers Resolution No. 415 of 29 July 2026 (to be verified). The providers of off-site backups and of system emails are also chosen from states on this list. Where the law requires it, the transfer is based on your consent.

7.3. If a customer connects its own services (SMS, messengers, email, AI providers) to the Platform, data may be transferred to them on its instructions, including to other countries. The customer ensures the legal basis for such transfers (where necessary, data subjects' consent). The customer chooses and connects the AI provider itself; we recommend providers located in states on the list in clause 7.2.

7.4. Notices about Site requests and new registrations on the Platform are sent to our sales team's Telegram chat (clause 8.4). Telegram's servers are outside Uzbekistan. This transfer is based on the consent given in the form on the Site or at registration; the consent text names Telegram explicitly.

8. Sharing with third parties

8.1. To process our own data we use the following processors (sub-processors):

• Contabo GmbH (Germany) — servers and the backups on the server;
• [off-site backup provider] — encrypted off-site backups;
• [email delivery provider] — system emails (confirmation codes, password reset);
• Telegram (Telegram Messenger Inc.) — notices to the sales team about requests and registrations (clause 8.4).

We do not use outside services for error tracking or analytics.

8.2. The current list is available on request at info@fastcrm.uz.

8.3. If you pay through Payme or Click, the payment system processes the payment data under its own rules. We receive only the result of the payment.

8.4. Each request is stored in our system and sent through a Telegram bot to our sales team's Telegram chat: name, phone, email, company, request type, language, UTM labels and the first 300 characters of the message. When a new account is opened on the Platform, the workspace address and the owner's email are sent to the chat. Only sales staff read the chat. Telegram processes these messages under its own rules.

8.5. We disclose data to authorised state bodies only in the cases and in the manner provided by law.

9. Retention

9.1. We keep data no longer than needed for its purpose:

• Site requests — up to 3 (three) years after the last contact, or until consent is withdrawn, whichever is earlier;
• account data, login history and the action log — for the life of the account and up to 30 (thirty) days after it is closed;
• invoice and payment records — for as long as tax and accounting law requires;
• messages in the sales team's Telegram chat — up to 1 (one) month (auto-delete is on in the chat);
• server logs — up to 90 (ninety) days;
• backups — 7 (seven) days on the server and up to 35 (thirty-five) days off-site; then they are replaced by newer ones.

9.2. When the period ends, data is destroyed or depersonalised (anonymised — made impossible to link to you).

10. Security measures

10.1. We take organisational and technical measures:

• encryption in transit (HTTPS/TLS);
• access by roles and permissions; our staff access data only to the extent their work requires, and their access to a customer's workspace is recorded in the audit log;
• storing passwords only as hashes, and two-factor authentication;
• storing integration keys and tokens in encrypted form;
• login history and the action log;
• daily backups; off-site copies are encrypted before they leave the server.

10.2. More detail: the Security and data page. This Policy does not mean that we hold a certificate under any security standard. No method is completely secure, but we take reasonable measures as required by law.

11. Your rights

11.1. Under the Law you have the right to:

• receive information about the processing of your data and access it;
• require inaccurate or outdated data to be corrected or completed;
• require data to be destroyed or blocked (its use temporarily stopped);
• withdraw your consent;
• object to processing;
• complain to the authorised state body for personal data or to a court.

11.2. Send your request to info@fastcrm.uz or in writing to [legal address]. We may ask for additional information to confirm your identity. We answer within the period set by law.

11.3. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. If another legal basis exists (for example, a contract or a legal requirement), processing may continue. If you withdraw consent for a request, we delete it from our system, and the message in the Telegram chat is deleted too.

11.4. If a request concerns data that our customers have put into the Platform, we forward it to the relevant customer and help that customer.

12. Children

12.1. The Site and the Platform are for business use and not for persons under 18 (eighteen). We do not knowingly collect children's data. If we learn that such data has reached us, we delete it.

12.2. Our customers (for example, training centres) may put data about minors into the Platform. The legal basis for it, including the consent of a parent or other legal representative, is the customer's responsibility. We process such data only on the customer's instructions (Annex, clause 3.4).

13. Breach notification

13.1. If personal data security is breached, we immediately take measures to limit the consequences.

13.2. We notify affected customers without undue delay and no later than 24 (twenty-four) hours after the breach is discovered.

13.3. We notify the authorised state body and affected people in the cases and within the periods set by law (24 and 72 hours under ZRU-1125, to be verified).

14. Changes to this Policy

14.1. We may update this Policy. A new version is published on the Site with its update date. We announce significant changes in advance on the Platform or by email.

15. Contact

15.1. For questions and requests about personal data:

• [company name]
• Address: [legal address]
• Email: info@fastcrm.uz
• Phone: [phone]

15.2. This Policy applies from [date].