DOCUMENT
Privacy policy
This policy explains what data the Oshxona app and its website (“Oshxona”, “we”) collect, why we use it, and how we store and protect it.
1. What data we collect
Demo request form
When you fill in the “Get a demo” form on the website, we receive:
- your name and phone number;
- your restaurant's name, number of branches and message — if you entered them;
- what you are interested in: a demo, the free trial, pricing or something else;
- the address of the page the request was sent from and the site language.
The website does not store this data in its own database: it is sent straight to our team's Telegram chat through a Telegram bot.
Registration
To open an account in the app we ask for the restaurant's name, a phone number, the administrator's name, a login and a password. The password is never stored as plain text — only its hashed form is kept. To prevent fake sign-ups, the IP address of the device used to register is also recorded.
Business data in the app
Data the restaurant enters into the app itself: menu and prices, tables, staff (name and login), orders, payments, expenses and reports. The restaurant enters and manages this data; we store it only to provide the service.
Subscription payments
For subscription payments we record the date, amount, payment method and the new subscription end date. Bank card details are never requested or stored, either on the website or in the app.
2. How we use data
We use your data to:
- respond to your demo request and contact you;
- create your account and give you access to the app;
- keep track of your subscription period and payments;
- answer your questions and provide technical support;
- keep the service secure and prevent abuse.
We do not sell your data or share it with third parties for advertising.
3. Who we share data with
Your data may be passed to others only in these cases:
- Telegram — data from the demo request form is delivered to our team through a Telegram bot; you can also send a request or question via Telegram yourself. Telegram's own rules then also apply to your message.
- Server and hosting providers — only as far as needed for the app to work.
- Government authorities — only in the cases and manner provided for by the laws of the Republic of Uzbekistan.
4. Storage and protection
- Each restaurant's data is kept separate from other restaurants.
- Staff only see the sections their role allows: for example, waiters cannot see reports or settings.
- Passwords are stored hashed.
If the app is installed on the restaurant's own computer, the data is stored on that computer and is not sent to our servers. In that case the restaurant is responsible for the security of the computer and its data.
Retention. Account data is kept while the account is active. When a subscription ends, the data is not deleted — you can carry on once the subscription is renewed. Demo requests are kept for as long as needed to communicate with you. You can ask us to delete your data at any time.
No system can fully guarantee the security of data sent or stored over the internet, but we take reasonable measures to protect it.
6. Your rights
You have the right to:
- know what data about you is stored;
- ask for incorrect data to be corrected;
- ask for your data to be deleted — except data we are required by law to keep;
- withdraw your consent to the processing of your data.
To do so, use the contacts below.
7. Changes to this policy
This policy may be updated. Changes are published on this page and the “Last updated” date at the top is changed.
8. Contact us
If you have any questions or requests, contact us:
- +998 90 061 67 04
- Telegram: @tillo_khamdamov_admin