Privacy policy

Nozi is run by individual entrepreneur (YaTT) Rojiboyova Madinabonu G‘ayratjon qizi, registered in Uzbekistan. Write to privacy@nozi.uz about anything in this policy.

When you log in and set up your business, we store:

• your Telegram account: user id, name and username, and your email if you sign in with Google;
• your business profile: name, description, type, languages, time zone and opening hours;
• the Instagram accounts you connect: account id, username, name, account type and profile picture, and the access key Instagram gives us, stored encrypted;
• what you give the agent to learn from: website addresses, pasted text, the posts of your Telegram channel and of your connected Instagram accounts (text, link and date), and the facts drawn from them, which you check before the agent uses them;
• login records: sessions, stored only in hashed form.

When a business connects Telegram or Instagram, we receive the messages its customers send and the replies to them, together with the name, username and any phone number or other details a customer shares in the chat. We process this data on behalf of the business, which decides why it is collected. The business is responsible for telling its customers that an AI assistant answers them. We use this data only to answer, to hand conversations to the business, and to show them in its dashboard.

• to provide the service: log you in, answer your customers, notify you;
• to keep it secure and working: stop abuse, find and fix errors;
• to improve answers for your business, from facts you approved.

We do not sell personal data, we do not show ads, and we never use one business's data to answer another business's customers.

The agent's answers and the facts it learns are produced by Google's Gemini models through Google's paid API. Under Google's terms for paid services, Google does not use this data to train its models.

This website, our database and servers are at Hetzner in Helsinki, Finland (European Union). These providers process data only to run their part of the service:

• Google: the Gemini AI models;
• Telegram and Meta (Instagram): deliver messages between customers and the business.

We keep your data while your account is open. Sessions end after 30 days and an unfinished login within 15 minutes. When you delete your account, or a business asks us to delete its customers' data, we delete it within 30 days.

You can ask to see the data we hold about you, to correct it or to delete it, and you can withdraw your consent at any time. Write to privacy@nozi.uz and we answer within 30 days. If you are a customer of a business that uses Nozi, you can also ask the business. Step by step: delete your data.

We use only the cookies the service needs:

• smm_session keeps you logged in, for up to 30 days;
• smm_csrf protects your account from forged requests;
• smm_login links a Telegram login to this browser, for up to 15 minutes;
• NEXT_LOCALE remembers your language, for a year.

We use no advertising or tracking cookies.

Nozi is a service for businesses and is not meant for children under 16.

When we change this policy we update the date at the top. We tell account owners about important changes in the dashboard or through our Telegram bot before they take effect.