Privacy Policy

Welcome to Servy (servy.uz). Servy is an AI-powered chatbot platform that helps small businesses answer customer questions 24/7 across Web, Instagram, and Telegram channels.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using Servy, you agree to the terms outlined in this policy.

Effective date: March 2026.

We collect the following categories of information to provide and improve our services:

• Account information — your name, email address, and a securely hashed version of your password. We never store passwords in plain text.
• Business data — information you provide about your business, including products, FAQs, business hours, logo, and other knowledge base content used to train your chatbot.
• Customer conversation data — messages exchanged between your end customers and the AI chatbot across all connected channels (Web, Instagram, Telegram).
• Usage analytics — aggregated data about how you and your customers interact with the platform, including conversation volumes, response times, and feature usage.
• Cookies and session data — authentication tokens and session identifiers necessary for the platform to function.

We use the information we collect to:

• Provide the service — power your AI chatbot, deliver responses to your customers, and manage your business profiles.
• Improve AI responses — use your knowledge base and product catalog to generate accurate, context-aware answers for your customers.
• Send notifications — deliver important service updates, security alerts, and account-related communications via email.
• Process payments — manage subscriptions and billing through our payment processor, Paddle.
• Analytics — provide you with insights into your chatbot's performance and customer engagement.

Servy uses OpenAI's GPT-4o-mini model to process customer conversations and generate responses. When a customer sends a message to your chatbot, the message content along with relevant knowledge base context is sent to the OpenAI API for processing.

Important: We do NOT use your conversation data or business data to train any AI models. Your data is used solely to generate responses for your customers in real time.

As a business owner, you are responsible for the data your customers share during conversations with your chatbot. We recommend informing your customers that they are interacting with an AI-powered chatbot and advising them not to share sensitive personal information in conversations.

We share data with the following third-party service providers, solely to operate the platform:

• Paddle — payment processing, invoicing, and tax compliance.
• OpenAI — AI conversation processing via GPT-4o-mini.
• Resend — transactional email delivery (account notifications, alerts).
• Meta (Instagram) — Instagram Direct Message integration for businesses that connect their Instagram channel.
• Telegram — Telegram Bot API integration for businesses that connect their Telegram channel.

We do NOT sell your personal data to any third party, ever.

We take the security of your data seriously and employ industry-standard measures to protect it:

• Infrastructure — our services are hosted on Railway with managed PostgreSQL and Redis instances.
• Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Password security — user passwords are hashed using bcrypt before storage. We never store or have access to your plain-text password.
• Encryption at rest — database storage is encrypted at rest to protect against unauthorized physical access.

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of any inaccurate or incomplete personal data.
• Deletion — request deletion of your account and all associated data.
• Data export — request an export of your data in a portable format.

To exercise any of these rights, please contact us at support@servy.uz. We will respond to your request within 30 days.

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):

• Data Controller — the business owner who creates an account and deploys a chatbot is the data controller for their customers' data.
• Data Processor — Servy acts as a data processor, handling data on behalf of the business owner according to their instructions.

A Data Processing Agreement (DPA) is available upon request. Please contact support@servy.uz to request a copy.

Servy uses a minimal set of cookies strictly necessary for the platform to function:

• Session cookies — used to maintain your authenticated session and store your language preference.
• Authentication tokens — stored in your browser to keep you logged in.

We do not use any third-party tracking cookies, advertising cookies, or analytics cookies from external providers.

Servy is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@servy.uz.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page.
• Send an email notification to all registered users informing them of the changes.

We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: