Privacy Policy
This document defines what data the Alif AI platform collects about its users, why it processes it, whom it may share it with and which rights you have. We want you to know what happens to your data before you fill in a single form field.
1. Definitions
"Personal data" is any information linked to an identified person: name, email address, phone number and other details you provide. "Processing" is any action with that data: collection, storage, analysis, transfer or deletion. The "operator" is the Alif AI platform; a "processor" is a third party engaged by the operator to process data.
2. Personal data
In the registration form and contact requests we receive the following: first and last name, email address, phone number and the content of your message. During identity verification, identification documents (passport or ID card) and a live image may also be used.
Data about financial operations (deposits, withdrawals, commissions) is likewise linked to your personal record, because this is required for accounting and by law.
3. Usage data
We record technical usage information: browser type, operating system, language, pages viewed and time on site. It is collected in aggregate form and does not directly identify you. Its purpose is to improve the site's structure and speed.
4. Cookies
The site uses technical cookies that keep your session working and remember login details in the browser. Analytics cookies may also be present, showing which pages are most useful. You can disable or clear cookies in your browser settings; some functions (for example signing in) will not work without them.
5. Operator and processors
The data operator is the Alif AI platform. Third parties are engaged for some processing: identity-verification providers, email services and IT infrastructure. All processors operate under contract and applicable requirements, and may not use the data for their own purposes.
6. Collection and use of information
We process your data for these purposes: creating and activating your account, contacting you, identity verification (KYC), executing financial operations, keeping operation history, preventing fraud and meeting legal obligations. Each data item is processed only for a purpose stated on this page or at the moment of collection.
7. Legal bases
Processing rests on: performance of the contract between you and the platform (account and services), compliance with a legal duty (KYC/AML, accounting), the platform's lawful interest (account security, fraud prevention) and your separate consent for marketing messages. You can withdraw marketing consent at any time.
8. Data retention
Retention depends on the data type: registration and contact data are kept while the account is active or until your question is resolved; KYC documents are kept for the longer period required by law; site usage data up to 24 months. When the period ends, the data is deleted or anonymised.
9. Data transfers
Data may go to: identity-verification and IT-infrastructure providers, banks and payment systems executing your operations, affiliated companies assisting with compliance, and competent authorities upon lawful request. Transfers to third countries are allowed only within protection safeguards.
10. Disclosure of data
We do not sell your personal data or hand it to others for advertising. Disclosure happens in three cases only: with your consent, to meet a legal obligation, or during a security incident within a formal legal process.
11. Security
Data is encrypted in transit and at rest. Access is limited to staff who need it for their work, and every action is logged. We maintain a key-rotation procedure and regular security reviews.
12. Your rights
You may: request the data we hold about you (access), ask for corrections, request deletion, ask us to restrict processing, or object to it. To exercise any right, write to [email protected]: requests are reviewed within 30 calendar days. If you believe your rights were violated, you may approach the competent data-protection authority.
13. Service providers
The platform relies on these services: hosting and CDN for site delivery, email systems, identity-verification services and payment-confirmation systems. Each receives only the necessary data and processes it under contract.
14. Analytics
To understand which sections of the site help users most, we analyse aggregate usage data. The analytics counter may use cookies but does not identify individuals. Results feed internal reports only.
15. Advertising and retargeting
If you give marketing consent, we may send you messages. We do not sell your data to advertising networks for retargeting. If an external advertising network uses third-party cookies, your browser settings control them independently.
16. Links to third-party sites
Our pages contain links to external resources. The privacy policies of those sites are beyond our control: read them yourself before sharing information. Their trackers and terms operate independently.
17. Children's privacy
The platform's services are not intended for persons under 18, and we do not knowingly collect data from children. If we discover that a child's data has been collected, we delete it immediately.
18. Changes
We may update this policy. The new version takes effect from publication on this page; material changes are announced by email. The latest revision date is shown at the bottom of the page.
19. Contact us
Send any privacy-related question to [email protected] or write to the platform's official address at Rudaki Avenue 55, Dushanbe 734000, Tajikistan. The Client Support & Compliance department answers during Monday to Friday, 9:00–18:00 (Dushanbe time).
Examples of data processing
Example 1: you complete the registration form. We take your name, email and phone number and use them to create your account. Legal basis: performance of the contract. Retention: while the account is active or until related questions are resolved.
Example 2: you give marketing consent. We send you news about updates and offers. Basis: your consent. Retention: until you withdraw consent, which you can do from any message.
Example 3: a formal authority request. A competent authority lawfully requests defined data about you. We provide what the request lawfully covers and record the transfer. This case is rare, but we are always prepared.
Every example repeats one general truth: your data is processed only for a declared purpose, and every processing action is logged. If you have a question about any processing case, write to us: the answer comes with a reference to the relevant clause of this policy.