Privacy Policy

BAHA AI ("we") respects user privacy and takes personal data protection seriously. This Policy describes what data we collect, how we use it, with whom we share it and how we protect it when you use the BRIX.UZ website, Telegram bots and related services.

By using the Service, you consent to the data processing terms set forth in this Policy. If you do not agree, please stop using the Service.

Depending on how you use the Service, we may collect:

Request (RFQ) data: name or organization name, contact phone, email address (optional), delivery region and address, request description and product quantity.

Account data: when registering via Google or Telegram — name, email address, the provider account identifier and avatar (if provided); when registering by email — the email address and a secure password hash.

Listing data: title, description, photos, price, and the contact details you provide for publication (phone, Telegram username).

Seller data: company name, country, phone and other profile details.

Payment data: payment identifier and status, amount and service type. We do not receive or store bank card details — they are handled by the payment provider.

Technical data: IP address, device and browser type, visited pages, traffic source, and information obtained through cookies and analytics (see the cookies section).

We use cookies and similar browser storage technologies. They fall into two groups.

Necessary (functional) cookies — ensure the basic operation of the Service and are always on. These include, for example:

• interface language selection (brix_locale)
• a session identifier for correct list rendering (brix_session_seed)
• remembering your cookie choice (brix_cookie_consent)
• authorization tokens in browser local storage — for signing in to personal cabinets

Analytics cookies — help us understand how the Service is used (e.g., Google Analytics). They are loaded only after we obtain your consent via the cookie notice.

On your first visit you can "Accept cookies" or "Decline cookies". If you decline, analytics scripts are not loaded. You can change your choice by clearing cookies in your browser settings. Disabling necessary cookies may cause some features to work incorrectly.

Collected data is used to:

• Process and fulfill user requests
• Register, authenticate and operate personal cabinets
• Moderate and publish listings
• Process and confirm payment for paid services
• Contact users to clarify details and provide offers
• Forward requests to suppliers in anonymized or partially anonymized form
• Improve website operation, analytics and ensure security
• Comply with applicable legal requirements

The bases for processing are performance of a contract (providing services at your request), your consent (e.g., for analytics cookies) and our legitimate interests (security and development of the Service).

The private classifieds section is designed so that the contact details you provide (phone number and Telegram username) become publicly available after moderation. This is a deliberate exception to the general rule of hiding contacts and is necessary for direct contact between users.

Do not include in a listing any data you are not willing to make public. Email addresses are not published in listings.

We do not sell or rent your personal data. We share it only to the extent necessary to operate the Service:

• Suppliers — for request processing (name and contacts are disclosed only after your explicit consent)
• Google — for sign-in with a Google account, web analytics (Google Analytics) and cloud file storage
• Telegram — for sign-in via Telegram and operation of Telegram bots
• Payment provider (Rahmat) — to process payment for paid services
• Email delivery service (Resend) — for confirmation and account-recovery emails
• Cloudflare Turnstile — to protect forms from automated registrations
• Government authorities — upon justified request in accordance with the law

All technical partners process data under confidentiality terms and only for the stated purposes.

Personal data is stored on secure servers for the time necessary for the purposes described in this Policy, but no longer than the period established by applicable law.

After the storage period expires, data is deleted or anonymized.

We apply technical and organizational measures to protect data from unauthorized access, modification, disclosure or destruction. This includes HTTPS encryption, storing passwords as a secure hash, employee access control and regular security audits.

Despite the measures taken, we cannot guarantee absolute data security on the Internet.

You have the right to:

• Request a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your data or account (subject to legal limitations)
• Withdraw consent to processing, including analytics cookies
• File a complaint with the authorized body

To exercise your rights, contact us at: sales@brix.uz.

The Service is not intended for persons under 18. We do not knowingly collect data of minors. If you believe we have obtained such data, let us know and we will delete it.

We may periodically update this Policy. Material changes are published on this page. The last update date is indicated at the top of the document.