Privacy Policy

Definitions

• User – any natural or legal person registered on the DiagnoAI platform who uses its functionality. -
• Personal data – information recorded on electronic, paper, or other media that relates to or makes it possible to identify a specific natural person. -
• Confidentiality – a mandatory requirement for persons authorized to use personal data not to process or disclose such data without the data subject’s consent or other lawful basis. -
• Anonymization – actions that make it impossible to determine the ownership of personal data to a specific data subject. -
• Special categories of personal data – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health status, or private life. -

Information We Collect

We collect the following categories of personal data:

• Information you provide directly
• Identifiers such as name, e-mail, phone number collected during account registration or service inquiries. Pseudonymous identifiers (e.g., “User 00000”) may also be created.
• Content of all messages you send via chat-bot or support channels.
• Ratings, suggestions, or ideas submitted through the “feedback” function in your personal cabinet.
• Service-type used, access dates and times.
• We use cookies and Google Analytics to improve user experience. Google Analytics collects anonymous aggregated data such as pages visited, time spent, device/browser type, approximate city-level location, traffic source, and interaction patterns. It does NOT collect name, e-mail, phone, payment data, exact IP addresses, or any data that could identify you personally.

How We Use Your Data

We process personal data to:

• Establish direct communication with you in accordance with this Privacy Policy and the DiagnoAI Terms of Use;
• Send you service-related or event information;
• Create and manage your DiagnoAI account;
• Prevent fraud, abuse, or unlawful activity and protect the rights of the company and users;
• Conduct security checks and troubleshooting.

We do NOT use personal data to train models or for any purposes not envisaged by the Law “On Personal Data”.

When We May Disclose Data

We disclose personal data only when required by Uzbek law or with your explicit consent. You are advised not to submit any confidential information while using the services; if you do, DiagnoAI is not responsible for protecting such confidential information. We assume no liability for disclosure of third-party personal data you may share.

Your Rights and Choices

Under Article 30 of the Law “On Personal Data”, you have the right to:

• Obtain confirmation of whether your personal data exist and access their content;
• Receive information on how your data are processed;
• Obtain information on conditions of access to your data;
• Appeal to competent state bodies or courts to protect your rights;
• Grant or withdraw consent to processing (unless otherwise provided by law);
• Consent to dissemination of your data for general access;
• Demand temporary suspension of processing if data are incomplete, outdated, unlawfully obtained, or no longer necessary for the stated purpose.

To exercise these rights, send a request to diagnoaiuz@gmail.com. We may ask for additional information to authenticate you. If your request is denied, you may file a complaint to the same e-mail. DiagnoAI will not discriminate against you for exercising your privacy rights.

Our AI services (chat-bot, document generator, legal analyst) do NOT collect special-category data. You are responsible for any information you enter.

Cross-Border Transfers

We do NOT transfer personal data outside Uzbekistan except as permitted by the Law “On Personal Data” (e.g., protection of constitutional order, public morals, or international treaties to which Uzbekistan is a party).

Data Retention & Security

We store personal data while your account exists. Upon deletion, data are erased in accordance with statutory requirements. We apply technical and organizational measures (regular security updates, physical access control, role-based access, staff training, vulnerability testing) to protect data against loss, misuse, or unauthorized access. In case of force-majeure events beyond our control (government actions, natural disasters, outages), we will notify users and take all feasible steps to restore data security.

Changes to This Policy

We may update this Privacy Policy. Material changes will be announced on the website and/or e-mailed to you at least 15 days before they take effect.

Contact Us

Dispute Resolution

Disputes relating to personal-data processing shall be resolved under the legislation of the Republic of Uzbekistan. You may also file a complaint with the Centre for Personalisation under the Cabinet of Ministers or with the courts.