Privacy policy

1. Controller

Controller: AIYNTOR LLC (“AIYNTOR” MCHJ), Tax ID 312546089, Tashkent. Enquiries about personal data, including withdrawal of consent, correction or deletion: info@aiyntor.com, +998 88 842 13 13.

2. Data we collect

• Form data: name, phone, email, company name, comment, chosen service, chosen contact channels.
• AI agent conversation data: message text, name and phone if you provide them, the language of the enquiry.
• Calculator data: the parameters you entered and the documents generated if you requested a PDF.
• Technical data: page address, referrer and campaign tags, date and time, browser language. The IP address is stored only as a salted, irreversible hash.
• Analytics data: anonymised visit events through web analytics services — only after your consent in the cookie banner.

3. Purposes

• Handling the enquiry and contacting you through the chosen channels.
• Preparing an estimate, quote or invoice.
• Operating the AI agent: answering questions and passing the contact to a manager.
• Rate limiting and protection from automated submissions.
• Improving the site based on anonymised statistics.

4. Legal basis

Processing is based on your consent given by ticking the box next to a form or in the chat (Article 21 of the Law) and on the preparation and performance of a contract at your request. The consent is logged with date, time and the version of this policy.

5. Recipients

• CRM system — storage of requests and communication history; a lead is created only when a contact is provided.
• Telegram — manager notification and, at your choice, delivery of the document to Telegram.
• AI model provider (USA) — processing conversation text to generate replies; API keys are kept server-side.
• Email service — sending the quote to the email you provided.
• Web analytics services — anonymised statistics with consent to analytics cookies.

The site’s servers are located in Germany, and AI agent conversation text is processed in the USA. Both states are on the list of states ensuring personal data protection approved by the Cabinet of Ministers resolution of 29 July 2026, so the transfer does not require a separate permit. Data is not shared with other third parties except as required by law.

6. Retention

• Requests, conversations, saved estimates and quotes on the site — 12 months, then deleted automatically.
• Data in the CRM — 3 years, the limitation period for contractual disputes.
• On withdrawal of consent the data is deleted earlier, except records the controller must keep under accounting legislation.

7. Cookies

Necessary cookies keep the site working: chat session, form protection, language and theme choice, the consent record. Analytics and marketing tags are not loaded into the page until you choose in the banner. The choice can be changed through the “Cookie settings” link in the footer; on withdrawal analytics and marketing cookies are deleted. Declining non-essential cookies does not limit access to the site.

8. Security and incidents

Data is transmitted over HTTPS and stored in an access-restricted database; integration and model keys never reach client-side code; only the company director has access to the hosting panel and the database.

If a personal data leak is detected, the controller notifies the authorised state body within 24 hours of detection and within 72 hours reports the causes and the measures taken. Affected data subjects are notified through the contacts they provided.

9. Changes

A new dated version is published when the policy changes. The version in force at the time of your consent is recorded in the log.