Data processing terms
Last updated: 30 September 2026
Your system holds personal data of your clients and staff. For that data your business is the owner (the controller) and Kublet processes it on your behalf. These terms form part of our agreement with every business that uses Kublet.
1. What these terms cover
Personal data that you, your staff or your devices put into your system, for as long as you use Kublet and until the data is returned or deleted.
2. Who is who
Your business decides why and how the data is used and is responsible for having a lawful basis, including consent where the law requires it. [Company legal name] processes the data only to provide Kublet to you.
3. Which data
• Clients: names, phones, addresses, purchases, payments and debts. • Staff: names, phones, roles and working times. • Attendance by face: photos and face templates of staff who agreed. • Camera pictures linked to sales and payments, when switched on. • Anything else you choose to record.
4. Only on your instructions
We process the data only to run your system as you set it up and as you ask, and not for our own purposes. If we believe an instruction breaks the law, we tell you.
5. Confidentiality
Everyone at Kublet with access to the data is bound to keep it confidential. Access is given only to those who need it to support you, and every access is recorded.
6. Security
We keep the measures described in the privacy policy: encryption of every connection, separation of each business's data in the database, hashed passwords, blocked guessing, limited and logged staff access, and nightly backups.
7. Other processors
We use the services listed in the privacy policy to provide Kublet. Each is bound to terms at least as protective as these. We tell you at least 30 days before adding or replacing one, and you may object.
8. Helping with requests
If one of your clients or staff asks to see, correct or delete their data, the tools in your system let you do it; where they do not, we help you within 10 working days.
9. If something goes wrong
If a breach affects your data we tell you without undue delay and in any case within 72 hours, with what happened, which data and what we are doing, so you can meet your own duties.
10. Where the data goes
Your system's data is kept in the Republic of Uzbekistan. Only what the services listed in the privacy policy need leaves it — for example the text you send to the AI assistant — and only for that purpose.
11. At the end
When the agreement ends you can download your data for 30 days. After that we delete it, including backups within their normal 30-day cycle, unless the law requires us to keep it.
12. Checks
On request, once a year, we give you the information you need to check that these terms are kept. Larger checks can be agreed in writing.
13. Liability
Liability under these terms follows the limits in the public offer and the terms of use, except where the law does not allow it to be limited.