Privacy Policy

1. Introduction

RateConfirm ("we," "our," or "us") provides an AI-assisted Telegram load bot and web application for freight dispatchers. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you use rateconfirm.uz, app.rateconfirm.uz, and our Telegram bot @artelog_bot (collectively, the "Service").

By creating an account or using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

2. Who we are

Controller: RateConfirm. Address: Namangan viloyati, Namangan sh. Kurasxona MFY, Abdulla Qaxxor 2-berk ko‘chasi, 3-uy, Republic of Uzbekistan. Contact: [email protected] · +998 95 128 32 52.

3. Information we collect

3.1 Account information

• Name, email address, and password credentials (or OAuth identifiers if you sign in with Google or another supported provider).
• Profile image if you provide one.
• Workspace and subscription status (plan tier, trial/active/canceled, renew dates).

3.2 Telegram data

• Your Telegram user ID, username, and display name when you link Telegram.
• Groups where you add our bot, group IDs/titles, and bot admin status.
• Messages, captions, and files (including PDF rate confirmations) that appear in monitored groups or that you send to the bot — processed to extract loads, brokers, and related logistics fields.
• Content from other group participants may be processed when the bot is added to a group. You are responsible for having the right to add the bot (see our Terms).

3.3 Load, broker, and chat data

• Structured load offers, broker names, MC/DOT identifiers, blacklist entries, and related notes you create or that we extract.
• AI chat prompts and responses in your workspace.
• Broker credit check queries and results returned by third-party providers (for example RTS Pro).

3.4 Payment information

• We do not store full card numbers on our servers.
• International card payments (Visa/Mastercard) may be processed by Polar (polar.sh), which may act as merchant of record and use underlying card networks/processors.
• Local Uzbekistan card payments (when enabled) may be processed by Payme.
• We may store subscription status, invoice metadata, masked card indicators, and processor references needed for billing support and renewals.

3.5 Technical and usage data

• IP address, browser/device type, approximate location derived from IP, timestamps, and diagnostic logs.
• Session cookies and similar technologies required to keep you signed in and secure the Service.
• Product analytics limited to operating and improving the Service (for example feature usage counts).

4. How we use information

• Provide, operate, secure, and improve the Service.
• Monitor Telegram groups you connect, extract logistics data, and power AI chat.
• Run broker credit checks you request via third-party data providers.
• Process subscriptions, renewals, receipts, dunning, and fraud prevention via payment processors.
• Send service communications (security, billing, material policy changes).
• Comply with law and enforce our Terms.
• Use aggregated or de-identified data to understand product performance.

We do not sell your personal information.

5. AI processing

To generate chat answers and extract structured fields from messages/PDFs, we may send relevant content to large-language-model providers. Currently this includes DeepSeek’s API (or a successor provider we name in our subprocessors list). Content may be processed on servers outside Uzbekistan for inference. We use this processing to provide the Service — not to sell your messages.

AI outputs can be incomplete or incorrect. See our Terms for disclaimers and your duty to verify before relying on results.

6. Sharing and subprocessors

We share data only as needed to run the Service, including with:

• Telegram — delivery of bot messages and group APIs under Telegram’s terms.
• Polar — international card checkout, subscriptions, and related billing events.
• Payme — Uzbekistan payment processing when that method is enabled.
• RTS Pro (or similar) — broker identifiers you query for credit checks.
• DeepSeek (or successor AI vendor) — prompts/context for AI features.
• Hosting, database, email, and security vendors that process data on our instructions.
• Authorities when required by law or to protect rights, safety, and the Service.

Processors apply their own terms and privacy policies to data they receive. A current summary of key subprocessors is maintained in this Policy; material changes will be reflected in an updated “Last updated” date.

7. International transfers

Because we use cloud hosting, AI APIs, and international payment rails, information may be processed in countries other than Uzbekistan. Where we transfer personal data internationally, we take reasonable contractual and technical steps appropriate to the risk and applicable law.

8. Cookies and sessions

We use essential cookies and local/session storage for authentication, CSRF protection, preference storage (for example theme), and basic security. We do not use third-party advertising cookies on the Service. You can clear cookies in your browser; doing so may sign you out.

9. Retention

• Account profile: while your account is active, then up to 30 days after deletion request (unless longer retention is required by law).
• Telegram-linked group content, loads, blacklists, and AI chat: while the account/workspace is active; deleted or anonymized within 30 days after account deletion, subject to backups rolling off on a short cycle.
• Billing and invoices: typically retained for at least 3 years (or longer if required for tax/accounting/dispute resolution).
• Security logs: typically 90 days unless needed longer for investigations.

10. Security

We use TLS in transit, access controls, encrypted storage where appropriate, and authenticated internal service calls. No method of transmission or storage is 100% secure. You are responsible for safeguarding your credentials and Telegram admin settings.

11. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of personal data we hold about you, and object to certain processing. Contact [email protected] or +998 95 128 32 52. We may need to verify your identity and will respond within a reasonable period. Some billing records cannot be fully erased where law requires retention.

12. Children

The Service is for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child provided data, contact us and we will delete it.

13. Changes

We may update this Policy. Material changes will be indicated by updating the “Last updated” date and, where appropriate, notice in the app or by email. Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact

Questions: [email protected] · +998 95 128 32 52. RateConfirm — Namangan viloyati, Namangan sh. Kurasxona MFY, Abdulla Qaxxor 2-berk ko‘chasi, 3-uy, Republic of Uzbekistan.