1. General provisions
This Privacy Policy (the “Policy”) describes what data is collected and processed by the TRACE OS service (the “Service”), owned and operated by TRACE-OS LLC (the “Company”, “we”), registered in the Republic of Uzbekistan at: Qiyot massif, 67, Tashkent, Uzbekistan.
By using the Service (the trace-os.uz website, {subdomain}.trace-os.uz subdomains and related apps), you agree to the terms of this Policy. If you do not agree, please do not use the Service.
2. What data we collect
Depending on how you use TRACE OS, we may collect:
- Account and tenant data — restaurant/company name, contact details (email, Telegram, phone), access credentials (including
iiko_login/iiko_password), and a unique tenant identifier (UUID) generated automatically by the Service. - Restaurant business data — transactions, checks, revenue, menu and prices, stock balances and write-offs, staff and shift data, loyalty programme data — received through the integration with the iiko Cloud API (api-ru.iiko.services) or another POS system at your request.
- Website form data — name, contact (Telegram/phone), restaurant name, area of interest — when you request a demo, send feedback or apply for a job.
- Technical data — IP address, device and browser type, request logs — collected automatically to keep the Service running and secure.
3. How we use data
- To provide the Service’s features: dashboards, analytics, forecasts, P&L and Cash Flow reports.
- To authorise and connect your account to the iiko Cloud API and/or the venue’s local server.
- To communicate with you: replies to requests, demos, support, technical notices.
- To improve the Service: fixing bugs, building new features.
- To keep things secure: detecting and preventing unauthorised access.
We do not use your business data for advertising and do not sell it to third parties.
4. Sharing data with third parties
We do not share your personal or business data with third parties for marketing purposes. Data may be shared with the following categories of recipients solely to keep the Service technically running:
- The POS integration provider (e.g. iiko) — to sync your venue’s data at your explicit request and using the credentials you provided.
- Hosting providers and cloud infrastructure, whose servers physically store the Service’s data — solely for storing and processing data, in encrypted form.
Data may be disclosed to government authorities only in cases expressly provided for by the laws of the Republic of Uzbekistan.
5. Data storage and protection
- Data is transmitted over secure channels with TLS 1.3 encryption and stored encrypted (AES-256).
- Only authorised Company staff who need it to do their jobs have access to the data.
- After a subscription or contract ends, data is kept for another 90 days — during this period you can request a full export of the data in CSV/PDF format. After this period the data is permanently deleted unless the law requires otherwise.
6. Cookies
The website may use technical (functional) cookies — for example, to remember the interface language you chose. We do not use advertising or third-party tracking cookies. By using the website you agree to the use of technical cookies; you can turn cookies off in your browser settings, but this may affect how some website features work.
7. Your rights
You have the right to:
- Request a copy of the data we hold about you or your company.
- Request that inaccurate data be corrected.
- Request that data be deleted (subject to the retention periods in section 5).
- Withdraw consent to processing of data sent through the website’s forms.
To exercise these rights, write to main@trace-os.uz.
8. Changes to this Policy
We may update this Policy from time to time. We will notify you of changes that materially affect your rights through the website or by email. The date of the last update is shown at the top of the document.
9. Contact
TRACE-OS LLC
Republic of Uzbekistan, Tashkent, Qiyot massif, 67
Email: main@trace-os.uz