Privacy Policy

The personal data controller is Uy+ (Uyplyuz), Tashkent, Republic of Uzbekistan. Contact: azimjon.nodir@gmail.com +998 93 383 51 58.

We collect only the minimum data required to provide the service:

• Identification: phone number, full name; for legal entities — company name, TIN, address and details of the authorised person;
• Accounts: utility account (personal account) and meter numbers, site addresses, meter readings and payment history;
• PV integration: access tokens/API keys for inverter cloud services (Deye, SolaX, Huawei FusionSolar, Solis) — stored encrypted — and the generation data retrieved from them;
• Payments: transaction ID, amount and status. We do not store your bank card number — it is tokenised by the payment provider;
• Technical: device type, app version, IP address, error logs, push notification identifier;
• Enquiries: messages you send to support and technician orders.

We do not request or process special categories of data (health, religious beliefs, etc.). Location is accessed only when you call a technician, and only with your permission.

Data is processed for the following purposes, on the basis of the performance of the agreement (public offer) and your consent:

• creating an account and identifying the user;
• making utility payments and exchanging data with suppliers;
• PV monitoring, reports and revenue figures;
• preparing invoices, contracts and accounting documents;
• fulfilling technician and store orders;
• security, fraud prevention and troubleshooting;
• compliance with legal requirements (tax, accounting).

Marketing messages are sent only with your separate consent and can be switched off at any time in the app settings.

In accordance with Article 27-1 of Law ZRU-547, the personal data of citizens of the Republic of Uzbekistan is collected and stored on servers (databases) located in Uzbekistan.

Safeguards: TLS in transit, encryption of passwords and integration tokens in the database (passwords as irreversible hashes), role-based access, activity logging, regular backups and confidentiality obligations for staff.

No system is 100% secure; if a data breach is detected we notify the competent authority and the users who may be affected, as required by law.

Data is shared only to the extent necessary to provide the service, with the following categories of partners:

• payment providers and banks — to process payments (amount, payment ID, account number);
• utility suppliers (electricity, gas, water and heating companies) — to retrieve account data and transfer payments;
• inverter manufacturers' cloud services (Deye Cloud, SolaX Cloud, Huawei FusionSolar, SolisCloud) — to read the PV data you have connected; these services have their own privacy policies;
• SMS and push notification providers — to deliver codes and notifications;
• technicians/contractors — only your name, phone number and address, to fulfil an order.

We do not sell personal data. Information is provided to government authorities only on the grounds and in the manner prescribed by law.

Account data — while the account is active and for 30 days after deletion (to allow recovery).

Payment and invoice documents — 5 years, as required by law (accounting and tax records).

Technical logs — up to 12 months. Integration tokens — deleted immediately when the integration is removed.

Under Law ZRU-547 you have the right to:

• obtain information about your data and how it is processed;
• request the correction of inaccurate or incomplete data;
• withdraw your consent and request the deletion of your data;
• opt out of marketing messages;
• lodge a complaint with the competent government authority about a breach of the law.

Requests are handled within 10 business days. To verify your identity we may ask for confirmation from the phone number registered in your account.

In the app: Profile → Delete account → confirm. The account and all associated data are deleted after a 30-day recovery period.

By e-mail: send a message to azimjon.nodir@gmail.com with the subject “Delete account”, stating the phone number registered in your account. Details: uyplyuz.uz/delete-account/

Financial documents that must be retained by law (invoices, payment history) are kept in anonymised form until the end of the statutory retention period.

The website and dashboard use only essential cookies (session, language preference). Anonymised error and usage statistics may be collected to improve the app; no advertising trackers are used.

The service is not intended for persons under 18. If we learn that a minor has created an account, the account and its data will be deleted.

New versions of this policy are published at uyplyuz.uz/privacy/ we notify you of material changes via the app.

Questions about personal data: azimjon.nodir@gmail.com +998 93 383 51 58, Tashkent.