Privacy Policy

What data we collect

• Account data: company name, user name, email, phone number and role in the system.
• Business data entered by the customer: leads, orders, production stages, warehouse stock, financial records, documents and files.
• Employees' Telegram identifiers: the Telegram ID and username are stored so the bot can send a task to the right person.
• Technical logs: sign-in time, IP address and error records — for security and troubleshooting.
• Website analytics: the marketing site loads analytics through Google Tag Manager. It collects visit statistics and does not touch business data inside the ERP.

Why we use it

Data is used only to provide the service: running the system, sending tasks via Telegram, calculating reports, providing technical support and keeping the service secure.

We do not sell a customer's business data, do not share it for advertising and do not show it to other customers. Each company's data is stored separately within its own account.

Storage and processing

Data is stored on cloud servers and encrypted in transit (HTTPS). Access is limited by roles: a worker sees only the stage assigned to them, and finance requires a separate permission.

Our team accesses customer data only for technical support or to fix a fault, and at the customer's request.

A public order-tracking link shows only that order's stage and payment status; price lists, other customers and internal accounting are never exposed through it.

Who owns the data

All business data entered into the system — leads, orders, stages, warehouse and financial records — belongs to the customer company. We store it; we do not own it.

If you stop using the service, you can ask us to export your data in a machine-readable format. After the export it is deleted from the system; backups are cleared in the next rotation cycle.

Third-party services

• Telegram — to send tasks and notifications through the bot.
• Google Tag Manager and the analytics connected to it — on the marketing site only.
• Cloud hosting and database provider — to run the system.
• Meta (Instagram, Facebook) — only when a business connects the Instagram integration: to receive messages and comments and to send replies.

Instagram and Facebook integration data

When a business connects its Instagram business account (and the Facebook Page linked to it) to SISTEMATOR, the following data is stored:

• The Instagram username and profile picture of the connected business account.
• The name and ID of the linked Facebook Page.
• Access tokens — stored encrypted.
• Direct messages and comments received and sent through the integration, and their attachments (images, videos, files).
• The Instagram usernames, profile names and IDs of people who message or comment on the business.
• Phone numbers those people write in comments.
• Leads and tasks created from those messages and comments.

Use, retention and deletion of Instagram and Facebook data

This data is used only to show conversations to the business's staff inside the CRM and to create leads from them. It is not sold, not used for advertising and not shared with third parties other than infrastructure providers (cloud hosting and database).

The data is kept while the integration is connected and the business uses the CRM. Access tokens are deleted when the integration is disconnected. A business can delete individual leads and conversations in the CRM itself; a deletion request sent to general@sistemator.uz is completed within 30 days.

We handle data received from the Meta platform in accordance with the Meta Platform Terms and Meta Developer Policies.

How to request data deletion →

Requests

To access, correct or delete your data, write to general@sistemator.uz. We review requests within business days and confirm in writing what was done.

If this policy changes, the new version is published on this page and the effective date is updated.