Legal

Privacy Policy

Last updated: August 25, 2026

1. General Provisions

This Privacy Policy (the "Policy") defines how personal data of users, clients, advertisers, partners, contractors and other persons interacting with the platforms, services, software, digital solutions and other products of CANNECT.AI LLP (the "Company") is collected, processed, stored, protected and transferred.

The Company processes personal data in accordance with the legislation of the Republic of Kazakhstan, including:

Law of the RK No. 94-V dated 21 May 2013 "On Personal Data and Its Protection";
Law of the RK "On Online Platforms and Online Advertising";
Law of the RK "On Informatization";
other regulatory legal acts of the Republic of Kazakhstan.

Use of the website, platform, mobile application, smart/digital stations, advertising services and other CANNECT.AI solutions constitutes the user’s consent to this Policy.

2. Personal Data Operator

The personal data operator is:

CANNECT.AI LLP (ТОО «CANNECT.AI»)
BIN: 251140014640
Registered address: Republic of Kazakhstan, Almaty, Medeu district, ST Koktobe 1, building 48

3. What Data May Be Collected

3.1 Personal data

full name
phone number
e-mail
IIN (where required by contract, KYC or law)
position
company information (for B2B clients and advertisers)
payment details
other data voluntarily provided by the user

3.2 Technical data

IP address
device type
browser
operating system
cookies
geolocation data (if access is allowed by the user)
device ID
activity log

3.3 Commercial and operational data

advertising requests
order history
support requests
interaction data with digital/smart stations
platform usage analytics

4. Purposes of Processing Personal Data

The Company processes data solely for the following purposes:

user registration and account creation
conclusion and performance of contracts
provision of advertising services
placement and management of digital/online advertising
operation of smart stations and digital solutions
acceptance of requests
processing payments and integration with payment services
KYC / AML / compliance checks
customer support
analytics and platform improvement
security
fraud prevention
compliance with RK legislation

5. Legal Grounds for Processing

consent of the data subject
performance of a contract
legitimate interests of the Company
compliance with legal requirements
protection of the rights of the Company and third parties

6. Cookies and Digital Analytics

CANNECT.AI may use cookies and similar technologies for: authorization, storing user settings, analytics, security, statistics, improving the user interface, and optimizing advertising tools.

The user may restrict cookies through browser settings.

7. Transfer of Data to Third Parties

The Company may transfer data to:

banks
payment services
acquiring providers
KYC/AML partners
contractors
hosting providers
IT integrators
advertising contractors
state bodies in cases provided for by law
affiliated and partner structures

Transfer is carried out to the extent necessary to fulfil obligations.

8. Cross-Border Data Transfer

The Company may transfer data to recipients located outside the Republic of Kazakhstan, in particular:

Amazon Web Services — cloud hosting and AI processing, EU region (eu-central-1, Germany);
payment, analytics and anti-fraud providers, which may process data in the European Union and the United States.

Cross-border transfer is carried out only to countries that ensure the protection of personal data, on the basis of the data subject’s consent and contractual safeguards, in accordance with the Law of the RK No. 94-V dated 21 May 2013 "On Personal Data and Its Protection". Where required, the Company obtains the subject’s separate consent for cross-border transfer.

9. Data Retention

Personal data is retained:

for the duration of the contract
for the period of platform use
within the periods established by RK legislation
until the purposes of processing are achieved
until consent is withdrawn, unless otherwise required by law

10. Data Protection

The Company takes reasonable technical, organizational and legal measures, including:

access restriction
employee access control
encryption
server protection
action logging
backup
protection against unauthorized access

11. Rights of the Data Subject

The user has the right to:

know about data collection
receive information about processing
request correction
withdraw consent
request deletion, if not contrary to law
restrict processing
appeal the operator’s actions

12. Electronic Consent

The user confirms consent to the Policy by: registration, account creation, ticking a checkbox, using the platform, submitting a request, placing advertising, using the mobile application, using a smart/digital station, paying for services, or electronic acceptance.

13. Advertising and Online Platforms

When using CANNECT.AI advertising tools, the Company may collect data necessary for: placing advertising, identifying the advertiser, fulfilling the requirements of the Law of the RK "On Online Platforms and Online Advertising", storing data on advertising campaigns, and complying with online advertising labelling requirements.

14. Minors

The Company’s services are not intended for independent use by persons below the age established by RK legislation without the consent of their legal representatives.

15. Limitation of Liability

The Company is not liable for: actions of third parties beyond the Company’s control; internet network failures; actions of payment providers; unlawful actions of users; consequences of data transfer by the user to third parties.

16. Changes to the Policy

The Company may amend this Policy. The current version is posted on the official resources of CANNECT.AI. Continued use of the platform constitutes acceptance of the changes.

17. Contacts

For matters concerning personal data, privacy and compliance:

CANNECT.AI LLP (ТОО «CANNECT.AI»)
BIN: 251140014640
Address: Republic of Kazakhstan, Almaty, Medeu district, ST Koktobe 1, building 48
E-mail: info@cannect.ai