Bileto Privacy Policy
Version dated [DD.MM.YYYY]
This policy describes what data [Legal entity name], TIN [TIN], address: [address] (hereinafter "Bileto", "we") collects in the Bileto mobile application and website, why, and to whom we transfer it.
We process personal data in accordance with the Law of the Republic of Uzbekistan "On Personal Data". By using the Service, you consent to the processing of your data on the terms of this policy.
1. What data we collect
At registration: name, phone number, role (buyer or seller), application language.
In seller listings: event name, city, section, row, seats, quantity, price, handover method, photo or screenshot of the ticket. The photo is seen only by Bileto operators.
In purchase requests: the name, phone number and number of tickets you provided, as well as the listing the request was sent for.
Favorites: the list of saved listings.
Technical data: device model, operating system and application version, IP address, error logs.
The application requests access to the photo gallery only to select a photo of the ticket. We receive only the image you select.
2. Why we use data
- signing in to the account and operating the application;
- processing requests: the operator contacts the buyer and the seller, checks the ticket and arranges the handover;
- checking listings and protecting against fraud;
- handling complaints and refunds;
- complying with legal requirements;
- improving the Service based on anonymized statistics.
We do not sell your data and do not use it for third-party advertising.
3. To whom we transfer data
Other users. Buyers see the seller's name and rating. The seller's phone number is hidden in the listing (for example, +998 90 ••• •• 67).
Bileto operators. To carry out a transaction, operators see the name and phone number of the buyer and the seller, the listing details and the photo of the ticket.
Telegram. Requests and new listings, together with the names and phone numbers of the parties, are automatically sent to a private Bileto operators' chat via a Telegram bot. This data is stored on Telegram servers, which may be located outside the Republic of Uzbekistan. By submitting a request or posting a listing, you consent to such transfer.
Contractors. Hosting and IT contractors process data on our behalf and are obliged to keep it confidential.
Government authorities — upon a lawful request or if fraud is suspected.
4. Where and how long data is stored
4.1. Bileto's main database is located on servers in the Republic of Uzbekistan.
4.2. Retention periods:
- account data — while the account exists and for [3 years] after its deletion;
- requests and listings — [3 years] to resolve possible disputes;
- ticket photos — [90 days] after the event date;
- technical logs — up to [12 months].
When the period expires, the data is deleted or anonymized.
5. How we protect data
- data is transferred only over a secure connection;
- ticket photos are not accessible to other users;
- operators access data only to carry out transactions.
6. Your rights
You have the right to find out what data of yours we process, to correct it, to withdraw your consent and to delete your account, and also to appeal our actions to the authorized body or in court.
To do so, write to [[email protected]] from the phone number specified in your account. We will respond within [10] business days.
Messages already sent to the Telegram operators' chat are deleted at your request together with the account.
7. Children
The Service is not intended for persons under 16 years of age. If we learn that we have received a child's data without parental consent, we will delete it.
8. Changes to the policy
We may update the policy. We will notify you of material changes in the application. The current version is always available in the application profile.
9. Contacts
[Legal entity name], TIN [TIN]
Address: [address]
Email: [[email protected]]
Phone: [+998 ...]