Privacy Policy

1. Who we are

SAFA ONE MChJ ("we", "us", "our") is a limited liability company registered in the Republic of Uzbekistan.

• Legal name: SAFA ONE MChJ
• Registered address: Mirzo Ulugbek MFY, Khalqabad-2 street 65/6, Tashkent 100001, Uzbekistan
• STIR (tax ID): 312911394
• Legal registration number: 3174629 (Ministry of Justice of the Republic of Uzbekistan)
• DUNS number: 933906791
• Contact for privacy inquiries: privacy@safaone.uz
• Phone: +998 50 333 39 00

2. Data we collect

Depending on which of our services you use, we may collect:

3. How we use your data

We use your personal data to:

• Provide and operate our services (driver onboarding, taxi fleet operations, customer support)
• Verify your identity as required by transportation regulations of Uzbekistan
• Communicate with you about your account, applications, and service updates
• Comply with legal obligations (tax records under UZ Tax Code, transportation licensing)
• Detect fraud and abuse

4. How we store and protect your data

Data is stored on servers physically located in Uzbekistan, operated by SAFA ONE MChJ. Access is restricted to authorized personnel. Documents (identity photos) are stored encrypted at rest.

Communications received via Instagram DM are stored in our self-hosted Chatwoot instance. This instance is operated by SAFA ONE MChJ on our own infrastructure — we do not use Chatwoot Cloud or any third-party SaaS provider for message content.

5. Retention

• Active accounts — for as long as you use our services.
• After account deletion or archival — 3 years, as required by the Tax Code of Uzbekistan for financial record-keeping. After this period, personal data is permanently erased.
• Instagram messages — same retention as your account.
• Anonymized aggregated statistics may be kept indefinitely.

6. Data sharing

We share your data only when necessary:

• Ride-hailing aggregators (Yandex Fleet, Wildberries Taxi) — driver onboarding data (name, PINFL, passport, driver license, vehicle data) is transmitted to these platforms so you can drive under their brand. This is core to the service; you cannot opt out and still use it.
• Government authorities (State Tax Committee "Soliq") — as required by tax registration law.
• SMS delivery provider (Eskiz.uz) — phone numbers for OTP and transactional messages.
• Meta Platforms Inc. — receiving messages you send us via Instagram; we do not push additional data to Meta beyond replies.
• Payment processors (Payme, Click, Multicard) — payment identifiers when you make or receive payments through our platform.

7. Your rights

Under the Law of the Republic of Uzbekistan "On Personal Data" (No. 547-V, 2019, as amended) you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — request correction of inaccurate data.
• Delete — request deletion of your account and personal data. See our Data Deletion Instructions (/data-deletion).
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Object — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.

8. Data deletion

You may request deletion of your account and personal data at any time. See Data Deletion Instructions (/data-deletion). Alternatively, if you have a Nur Taxi account, you can delete it directly from the app: Profile → Delete account.

• Your account is soft-deleted immediately and hidden from operators; you have 30 days to restore it by logging in again with the same phone number.
• After 30 days deletion becomes permanent (personal data anonymized or removed, except records we are legally required to retain — see Section 5).
• Documents in secure storage are marked for deletion and physically erased within 30 days.
• Instagram DM history is deleted from our system; note that Meta may retain copies according to their own Data Policy.

9. Children

Our services are not directed to persons under 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, contact privacy@safaone.uz and we will delete it.

10. International transfers

Personal data is stored in Uzbekistan. When you interact with us via Instagram, your message content passes through Meta infrastructure (which may include servers outside Uzbekistan) before reaching us — this transfer is inherent to using Instagram and is governed by Meta's own privacy policy.

11. Cookies

We use only functional/session cookies necessary for authentication in our web applications. We do not use advertising or tracking cookies. No cross-site tracking.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top of this document indicates the current version.

13. Contact

• Privacy questions and data requests: privacy@safaone.uz
• General inquiries: info@safaone.uz
• Phone: +998 50 333 39 00
• Mail: SAFA ONE MChJ, Mirzo Ulugbek MFY, Khalqabad-2 street 65/6, Tashkent 100001, Uzbekistan

14. Governing law and dispute resolution

This Privacy Policy is governed by the laws of the Republic of Uzbekistan. Any disputes arising in connection with this policy shall be resolved in accordance with UZ law, in the courts of Tashkent City.