Privacy policy
Last updated: 3 October 2026
This policy explains, in plain words, what personal data Kublet collects, why, where it is kept, who can see it and what your rights are. It covers kublet.uz, kublet.app, my.kublet.app and every business system at an address ending in .kublet.app.
1. Who we are
Kublet is run by "B2B SOFTWARE" LLC (STIR 312858863), 33, 2nd Taraqqiyot Passage, Tashkent 100073, Uzbekistan. We decide how the data described here is handled and we are responsible for it. Write to us at salom@kublet.app.
2. What we collect about you
• Your account: name, phone number or email, password (stored only as a one-way hash) and chosen language. • What you send us through the forms on the website: business name, city, name, phone, email and what you write about your business. • Payments: which plan you bought, for how long and how you paid. Card details are handled by Polar, our reseller and merchant of record, and its payment processor; we never see them. • Technical data: sign-in times, IP address, browser and device type, used to keep your account safe and to find faults.
3. Data you put into your system
Your system holds your business's records: your clients, their phones and addresses, sales, payments, debts, stock and your staff. For this data you are in charge and Kublet processes it on your behalf, as set out in our data processing terms. We use it only to run your system, never for our own purposes.
4. Faces and attendance
If you use attendance by face, the terminal or tablet recognises your staff by a photo of the face and a template made from it. This is biometric data. Each employee must agree in writing before their face is added; the tablet asks for that consent and the owner confirms it. Photos and templates are used only to record arrival and departure, stay inside your system and on your own terminals, and are deleted when the employee is removed or asks for it.
5. Cameras
When camera features are switched on, a picture from your till camera is kept with the sale or payment it belongs to. It is your duty to tell customers and staff that the area is filmed, for example with a sign. Pictures follow the same retention as the record they belong to.
6. The AI assistant
Kublet's assistant runs on Google Gemini through Google Cloud. When you use it, we send it your message, the description of your system and, for answers, only the figures Kublet has worked out — not your whole database. Pictures you attach are sent too. Google processes this under its business terms and does not use it to train its models. If you connect your own Claude subscription, the records you ask about go to Anthropic under your agreement with them. You can stop using either at any time.
7. Why we use it
• To create your account and run your system. • To contact you about the invite code you asked for. • To take payments and issue invoices. • To protect accounts and find faults. • To tell you about changes to the service. We do not sell data, do not show advertising and do not use your system's records to market to your clients.
8. Your consent
We process your data with your consent, which you give when you send a form or create an account, and because we need it to provide the service you signed up for. You can withdraw consent at any time; we will then stop using the data, except what the law requires us to keep.
9. Where it is kept
Personal data of citizens of Uzbekistan is collected and stored in databases on servers in the Republic of Uzbekistan, as the Law on Personal Data requires. Copies of backups are encrypted. Where a service we use is outside Uzbekistan (listed below), we send it only what that service needs.
10. Services that help us
• Hosting: a data centre in the Republic of Uzbekistan. • Google Cloud (Gemini): the AI assistant. • Resend: sending emails such as sign-in links. • Sentry: technical error reports, without your records. • Telegram: notifications you switch on. • Polar (Polar Software, Inc.) and its payment processor Stripe: payments. Each is bound to protect the data and use it only to provide its service to us.
11. Who can see it
You and the staff you invite, each within their role. Kublet's team looks at your system only when you ask us to, to fix a problem, and every such visit is recorded. We disclose data to state bodies only when the law requires it.
12. How long we keep it
While your account is open. Deleted records can be restored for 30 days and are then removed for good. Form applications are kept for 12 months. When you close your account we delete your data within 30 days, except payment records, which the tax law requires us to keep.
13. How we protect it
Every connection is encrypted; each business's data is separated at the level of the database; passwords are hashed; guessing attempts are blocked; access by our staff is limited and logged; backups are made every night. If a breach ever affects your data, we will tell you without delay, and in any case within 72 hours, along with what we are doing about it.
14. Your rights
Under the Law of the Republic of Uzbekistan «On personal data» you may ask us to tell you what we hold, correct it, stop processing it, delete it, or give you a copy. Write to salom@kublet.app; we answer within 30 days. If you think we got something wrong, you may also complain to the authorised state body.
16. Children
Kublet is a service for businesses and is not meant for anyone under 18.
17. Changes
When we change this policy we update the date above. If a change matters, we tell account holders by email or in the product at least 14 days before it applies.
18. Contact
"B2B SOFTWARE" LLC, 33, 2nd Taraqqiyot Passage, Tashkent 100073, Uzbekistan. Email: salom@kublet.app.