Privacy Policy

1. Data controller and contact

The data controller is Khizmatrasonii Nav LLC, Dushanbe, Republic of Tajikistan.

For any privacy questions or to exercise your rights, contact support@hizmatrason.tj.

2. Data we collect

We collect the minimum data needed to run the Service:

• Account data: name, email address, phone number (for account recovery), password hash.
• Link content: destination URLs, short codes (slugs), titles, tags, QR settings and typed-link data (Wi-Fi, vCard, text).
• Click analytics: when a short link is opened we store the IP address (to derive country/region via an offline GeoIP database), device and browser type, operating system, referrer, UTM tags, language, date and time.
• Technical data: session cookie and functional cookies (see the Cookie Policy).
• Payment data is handled by our payment provider; we do not store full card details.

3. Purposes and legal bases

• Providing the Service: creating links and QR codes, redirecting, showing analytics (performance of our contract with you).
• Security and abuse prevention: detecting spam, phishing and malicious links (legitimate interest).
• Support and notifications: responding to requests, sending service emails about limits and account status.
• Legal compliance: meeting the requirements of the law of the Republic of Tajikistan.

4. Sharing with third parties

We do not sell your personal data. We may share data with a limited set of recipients:

• Infrastructure and hosting providers processing data on our behalf.
• The payment provider, to process subscription payments.
• Government authorities, only upon a lawful and justified request.
• Trust and safety partners, to prevent fraud and abuse.

5. Retention

Account data is kept while the account exists. Detailed click analytics is retained depending on your plan — from 30 days to 3 years. After account deletion, related personal data is deleted or anonymized, except where we must retain it by law.

6. Security

Passwords are stored as cryptographic hashes (bcrypt). Sessions are protected with signed httpOnly cookies. Access is restricted, and we support two-factor authentication and log-out-everywhere. No service, however, can guarantee absolute security.

7. Your rights

• Access and export your data via the dashboard.
• Correct your name, email and other data in Settings.
• Delete your account and associated data.
• Withdraw consent and object to certain processing.

To exercise your rights, contact support@hizmatrason.tj. We may ask you to verify your identity.

8. Children

The Service is not intended for anyone under 13, and we do not knowingly collect their data. If such data reaches us, we will delete it on request.

9. International transfers

Servers and service providers may be located outside the Republic of Tajikistan. In such cases we take reasonable measures to protect data in transit.

10. Governing law

Data processing is carried out in accordance with the law of the Republic of Tajikistan, including the Law on Personal Data Protection.

11. Changes

We may update this Policy. We will announce material changes on the website or by email. The last-updated date is shown at the top of the page.