Dukonline is a retail management (POS/ERP) application for stores: point of sale, inventory, customers and reports. This policy explains how your data is collected, used and protected when you use the Dukonline mobile app (App Store and Google Play) and the dukonline.uz web service.

Developer: Asilbek Yuldashev (individual developer, Uzbekistan).

Account data: name, phone number, login and password (stored encrypted), organization and store name.

Business data: products, prices, stock, sales, receipts, customer lists and contacts, debts, and reports that you enter. This data belongs to you — we store it solely to provide the service.

Photos: with your permission, the app can access the camera and photo library so you can take or upload product photos. Uploaded images are stored on our servers as part of your product catalog and are used for no other purpose. The camera is also used for barcode scanning — scan frames are processed on the device and are not stored or uploaded.

Technical data: server logs (request time, IP address, device type) for service reliability.

The app does not collect location data, does not use advertising identifiers, and contains no third-party ads or tracking SDKs.

If a store connects its Instagram professional account (via Instagram Login) or its Telegram bot, messages that customers send to that store — text, photos and voice messages — are received through the official Instagram API (Meta) or Telegram Bot API and used only to answer those customers on behalf of the store: finding products, prices, availability and taking orders.

We receive the Instagram account's ID, username and name, an access token (stored encrypted) and the content of direct messages sent to the connected account. Customer names and usernames are shown to the store in its conversation log.

To generate replies, message text and photos are processed by AI providers (OpenAI); voice messages are converted to text by speech recognition providers (OpenAI, UzbekVoice). Providers process this data only to return the result and do not use it for advertising.

Instagram data is never sold, never used for advertising and never shared with other stores. The store can disconnect Instagram at any time — the access token is deleted immediately. Data deletion instructions: dukonline.uz/data-deletion.

To provide the service (POS, inventory, reports, product catalog with photos), authenticate and secure your account, diagnose technical issues, and comply with legal obligations. Your data is never sold or used for advertising.

Data may be shared only with infrastructure providers (hosting) that process it strictly for storage, with AI and speech recognition providers strictly to process Dukonline AI requests (section 2a), or with authorities when legally required. No other sharing.

Data is stored on protected servers and transmitted over HTTPS (TLS). Access is protected by passwords and session tokens; staff access is limited to your own organization according to permissions you configure.

Data is kept while your account is active. To delete your account and all related data (including uploaded photos and Instagram/Telegram conversations), contact us using the details below — requests are fulfilled within 30 days. See also Data deletion instructions.

You may access, correct, export, or request deletion of your data at any time via the contacts below.

Dukonline is a business application, not directed at children under 13, and does not knowingly collect data from them.

We may update this policy; material changes will be posted on this page with an updated "Last updated" date.

Developer: Asilbek Yuldashev

Phone: +998 97 802 20 08

Telegram: @iamyshv

Website: dukonline.uz

Dukonline — do'konlar uchun savdo boshqaruv (POS/ERP) ilovasi: kassa, ombor, mijozlar va hisobotlar. Ushbu hujjat Dukonline mobil ilovasi (App Store va Google Play) hamda dukonline.uz veb-xizmatidan foydalanganingizda ma'lumotlaringiz qanday yig'ilishi, ishlatilishi va himoyalanishini tushuntiradi.

Ilova dasturchisi: Asilbek Yuldashev(yakka tartibdagi dasturchi, O'zbekiston).

Hisob ma'lumotlari:ism-familiya, telefon raqami, login va parol (parol shifrlangan holda saqlanadi), tashkilot va do'kon nomi.

Biznes ma'lumotlari:siz kiritgan tovarlar, narxlar, qoldiqlar, sotuvlar, cheklar, mijozlar ro'yxati va ularning kontaktlari, qarzlar, hisobotlar. Bu ma'lumotlar sizning mulkingiz — biz ularni faqat xizmat ko'rsatish uchun saqlaymiz.

Fotosuratlar:ruxsatingiz bilan ilova kamera va fotogalereyaga kirib, tovar rasmini olish yoki yuklash imkonini beradi. Yuklangan rasmlar tovar katalogingizning bir qismi sifatida serverlarimizda saqlanadi va boshqa maqsadda ishlatilmaydi. Kamera shtrix-kod skanerlash uchun ham ishlatiladi — skaner kadrlari qurilmaning o'zida qayta ishlanadi, saqlanmaydi va serverga yuborilmaydi.

Texnik ma'lumotlar:xizmat barqarorligi uchun server jurnallari (so'rov vaqti, IP-manzil, qurilma turi).

Ilova geolokatsiya yig'maydi, reklama identifikatorlaridan foydalanmaydi va uchinchi tomon reklama/trekking tizimlarini o'z ichiga olmaydi.

Do'kon o'z Instagram professional akkauntini (Instagram Login orqali) yoki Telegram botini ulasa, mijozlar o'sha do'konga yuborgan xabarlar — matn, rasm va ovozli xabarlar — rasmiy Instagram API (Meta) yoki Telegram Bot API orqali qabul qilinadi va faqat shu mijozlarga do'kon nomidan javob berish uchun ishlatiladi: tovar, narx, bor-yo'qligi va buyurtma.

Biz Instagram akkaunt ID'si, username va nomini, kirish tokenini (shifrlangan holda) hamda ulangan akkauntga kelgan Direct xabarlarni olamiz. Mijozning ismi va username'i do'konga suhbatlar jurnalida ko'rsatiladi.

Javob tayyorlash uchun xabar matni va rasmlar AI provayderida (OpenAI), ovozli xabarlar esa nutqni matnga o'giruvchi provayderlarda (OpenAI, UzbekVoice) qayta ishlanadi. Provayderlar bu ma'lumotni faqat natija qaytarish uchun ishlatadi, reklamada ishlatmaydi.

Instagram ma'lumotlari sotilmaydi, reklamada ishlatilmaydi va boshqa do'konlarga berilmaydi. Do'kon Instagram'ni istalgan vaqtda uzishi mumkin — kirish tokeni darhol o'chiriladi. Ma'lumotlarni o'chirish tartibi: dukonline.uz/data-deletion.

— Xizmatni ko'rsatish: kassa, ombor, hisobot va rasmli tovar katalogi funksiyalari;

— Hisobingizni autentifikatsiya qilish va xavfsizligini ta'minlash;

— Texnik nosozliklarni aniqlash va bartaraf etish;

— Qonunchilik talablarini bajarish (talab qilingan hollarda).

Ma'lumotlaringiz reklama maqsadida ishlatilmaydi va uchinchi shaxslarga sotilmaydi.

Ma'lumotlar faqat quyidagi hollarda uchinchi tomonga o'tishi mumkin: (a) xizmatni ishlatish uchun zarur infratuzilma provayderlari (server/hosting) — ular ma'lumotni faqat saqlash uchun qayta ishlaydi; (b) AI va nutqni matnga o'giruvchi provayderlar — faqat Dukonline AI so'rovlarini bajarish uchun (2a-bo'lim); (c) qonuniy talab asosida vakolatli davlat organlariga. Boshqa hech kimga berilmaydi.

Ma'lumotlar himoyalangan serverlarda saqlanadi, uzatish HTTPS (TLS) orqali shifrlanadi. Hisobga kirish parol va sessiya tokenlari bilan himoyalangan. Xodimlar ma'lumotlarga faqat sizning tashkilotingiz ichida, siz bergan ruxsatlar doirasida kira oladi.

Ma'lumotlar hisobingiz faol bo'lgan davrda saqlanadi. Hisobingizni va unga bog'liq barcha ma'lumotlarni (yuklangan rasmlar, Instagram va Telegram suhbatlari bilan birga) o'chirishni istasangiz, quyidagi kontaktlar orqali murojaat qiling — so'rov 30 kun ichida bajariladi. Batafsil: ma'lumotlarni o'chirish tartibi.

Siz o'z ma'lumotlaringizni ko'rish, tuzatish, nusxasini olish va o'chirtirish huquqiga egasiz. Buning uchun kontaktlar bo'limidagi manzillarga murojaat qiling.

Dukonline biznes ilovasi bo'lib, 13 yoshgacha bo'lgan bolalarga mo'ljallanmagan va ulardan ataylab ma'lumot yig'maydi.

Ushbu siyosat yangilanishi mumkin. Muhim o'zgarishlar shu sahifada e'lon qilinadi va "Oxirgi yangilanish" sanasi yangilanadi.

Dasturchi: Asilbek Yuldashev

Telefon: +998 97 802 20 08

Telegram: @iamyshv

Veb-sayt: dukonline.uz