Privacy

Provider: ТОО «DalaVision», BIN 250540029829

Revision of 15.09.2026

This Policy has been developed in accordance with the Law of the RK of 21.05.2013 No. 94-V “On Personal Data and Its Protection” (the “Personal Data Law”). Under this Policy, the Provider acts as the owner and/or operator of a personal data database within the meaning of the Personal Data Law.

1. Terms

1.1. Personal data (PD) — information relating to a specific or identifiable individual.

1.2. User — an individual who uses the Website.

1.3. PD processing — the collection, organisation, storage, use and destruction of data.

1.4. Cookies — files saved by the browser to make the Website work.

1.5. Non-personal data — IP address, browser type, device parameters, request time.

2. What data is collected

2.1. Data provided by the User: first name, surname, phone, e-mail.

2.2. Service data: plot coordinates, queries to the AI assistant Aliya, uploaded files.

2.3. Technical data: cookies, IP address, request logs.

2.4. Payment data: full card details are neither collected nor stored by the Provider — they are processed by the payment operator.

3. Purposes of processing

• registration and authentication;
• conclusion and performance of the agreement;
• accepting payments and resolving incidents;
• communication with the User;
• generating recommendations by the AI assistant;
• improving the Service;
• information security;
• compliance with the legislation of the RK.

4. Legal grounds

4.1. The User's consent, the need to perform the agreement, and obligations under the law.

4.2. The User may withdraw consent by sending an application to dalavision1@gmail.com. Withdrawal does not affect the lawfulness of processing carried out previously.

4.3. Refusal to provide the necessary data may make it impossible to provide the service.

5. Automated processing and AI

5.1. The Service uses AI for personalised recommendations. The results are for information and reference purposes and have no legal consequences.

5.2. The User may request an explanation of the logic behind the recommendations.

6. Storage in Kazakhstan and transfer to third parties

6.1. The personal data database is hosted on a server located in the Republic of Kazakhstan (Almaty; hosting by Hoster.KZ Company LLP), as required by Article 12 of the Personal Data Law. Backups are encrypted and stored within the Republic of Kazakhstan.

6.2. Recipients in Kazakhstan: the hosting provider — storage of the database and of files uploaded by the User; the payment operator named on the checkout page — processing payments and refunds (name, e-mail, phone number, order contents and amount). Full bank card details are never passed to the Provider.

6.3. Outside the Republic of Kazakhstan, data is transferred in order to operate specific features of the Service:

• artificial intelligence services (Russian Federation, USA) — the text of requests to the AI assistant “Aliya”, uploaded plant photographs, the description and coordinates of the plot;
• the cloud platform hosting the application (USA) — IP address, HTTP request logs, and the contents of requests to the Service API;
• the e-mail service (USA) — e-mail address and the text of service messages;
• the error monitoring service (European Union) — IP address, browser, page address and error details;
• the web analytics service (USA) — anonymised information about the use of the Site;
• the messaging service — the Provider's internal alerts about technical failures.

6.4. Weather, soil and mapping services receive only the coordinates of the plot and, where necessary, the dates of interest — without the name, contact details, account identifier, or any indication that the plot belongs to the User.

6.5. The Provider maintains a register of the specific suppliers involved, stating the data transferred, the purpose and the country of processing. The register is provided at the request of the data subject or of the authorised state body.

6.6. Consent to cross-border transfer. By using features of the Service that require the transfer of data to the recipients listed in clauses 6.3–6.4, the User consents to the cross-border transfer of their personal data to the countries listed, in the scope and for the purposes set out in this section. Consent may be withdrawn as provided in clause 4.2; features that cannot operate without such transfer will become unavailable.

6.7. The Provider transfers the minimum necessary amount of data and only to suppliers ensuring an adequate level of protection (Article 16 of the Personal Data Law). Personal data is not sold and is not transferred for advertising purposes without the User's explicit consent.

6.8. Data may be disclosed to state authorities of the Republic of Kazakhstan on lawful grounds. When a new supplier is engaged, this Policy and the register of recipients are updated before any transfer begins.

7. Storage and protection

7.1. Organisational and technical protection measures are applied (HTTPS/TLS, access rights separation, backup).

7.2. Storage periods: account — for the term of validity + 3 years; payments — at least 5 years; logs — up to 12 months; cookies — according to browser settings.

8. User rights

The User has the right to: know about the existence of their PD; receive information about the processing conditions; request modification, blocking or destruction of the data; appeal against the Provider's actions.

Requests: dalavision1@gmail.com. Response time — 15 business days.

9. Minimum age

The Website is not intended for persons under 18. Minors' data is deleted upon discovery.

10. Cookies and analytics

10.1. The Website uses cookies for sessions and settings. Disabling them may limit functionality.

10.2. When third-party analytics are connected, the policies of the respective services apply.

11. Changes to the Policy

The Provider may amend the Policy. The current version is published on the Website.

12. Contacts