Maxfiylik siyosati

Oxirgi yangilanish: 2026-yil 22-avgust

Operator: «GRAF-CORP» MAS'ULIYATI CHEKLANGAN JAMIYAT (STIR 311 230 000), Samarqand viloyati, Samarqand shahri, Raxmatobod MFY, Beruniy ko'chasi, 87-uy. Mahsulot: Tamal CRM (tamalcrm.uz).

01Umumiy qoidalar

Tamal CRM — qurilish-sotuv kompaniyalari uchun mijozlar bilan ishlash tizimi (CRM). Tizimdan kompaniyalar taklif asosida foydalanadi. Ushbu hujjat qanday ma'lumotlar yig'ilishi, ular qanday ishlatilishi va qanday himoyalanishini tushuntiradi.

Har bir kompaniya o'z ma'lumotlarining egasi hisoblanadi; «GRAF-CORP» MChJ esa ularni kompaniya topshirig'iga binoan qayta ishlaydi va texnik saqlashni ta'minlaydi.

02Yig'iladigan ma'lumotlar

• Hisob ma'lumotlari: xodimning ismi, elektron pochtasi, telefoni va lavozimi — tizimga kirish va huquqlarni belgilash uchun.
• Mijoz va lid ma'lumotlari: kompaniya xodimlari kiritgan yoki integratsiyalar orqali kelgan ism, telefon raqami, elektron pochta va so'rov tafsilotlari.
• Bitim ma'lumotlari: xonadonlar, buyurtmalar, shartnomalar va to'lovlar bo'yicha yozuvlar.
• Texnik jurnallar: tizimga kirish, muhim amallar va o'zgarishlar tarixi — xavfsizlik va nizolarni hal qilish uchun.

03Meta (Facebook / Instagram) ma'lumotlari

Agar kompaniya o'z Facebook sahifasini tizimga ulasa, Tamal CRM Meta platformasidan faqat quyidagilarni oladi:

• foydalanuvchi boshqaradigan sahifalar ro'yxati;
• reklama lead-formalari orqali yuborilgan arizalar: ism, telefon, elektron pochta va formadagi javoblar.

04Mobil ilova (Tamal BOSS)

«Tamal BOSS» — kompaniya rahbari uchun iOS ilovasi. U yangi ma'lumot yig'maydi: faqat CRM'dagi mavjud ko'rsatkichlarni ko'rsatadi. Ilova bilan bog'liq ma'lumotlar:

• Kirish sessiyasi: telefonda xavfsiz saqlanadigan token (iOS Keychain) va qurilma nomi — qaysi qurilmadan kirilganini ko'rish va sessiyani bekor qilish uchun.
• Bildirishnoma tokeni: Apple xizmati (APNs) beradigan qurilma identifikatori — faqat yangi to'lov va yangi shartnoma haqida xabar yuborish uchun. Ilova o'chirilsa yoki hisobdan chiqilsa, token o'chiriladi.
• Qurilmadagi nusxa: oxirgi ko'rsatkichlar internetsiz ham ko'rinishi va vidjetlarda chiqishi uchun telefon xotirasida saqlanadi. Serverga qaytarilmaydi.

Face ID / Touch ID: ilovani qulflash uchun ishlatiladi. Biometrik ma'lumot to'liq telefon ichida qoladi — biz uni ko'rmaymiz va olmaymiz.

Ilovada reklama yo'q, kuzatuv (tracking) yo'q, ma'lumot uchinchi tomonlarga sotilmaydi.

05Ma'lumotlardan foydalanish maqsadi

• murojaatlarni qayd etish va sotuv jarayonini yuritish;
• shartnoma va to'lov hujjatlarini shakllantirish;
• kompaniya rahbariyati uchun hisobot va tahlil tayyorlash;
• tizim xavfsizligini ta'minlash va nosozliklarni bartaraf etish.

06Saqlash va xavfsizlik

Ma'lumotlar O'zbekiston Respublikasi hududidagi serverlarda saqlanadi. Aloqa shifrlangan HTTPS orqali amalga oshiriladi. Har bir kompaniyaning ma'lumotlari boshqa kompaniyalardan dasturiy jihatdan to'liq ajratilgan.

• rol asosida ruxsatlar — xodim faqat o'ziga tegishli bo'limlarni ko'radi;
• muhim amallar audit jurnalida qayd etiladi;
• ma'lumotlar bazasidan har kuni zaxira nusxa olinadi va shifrlangan holda saqlanadi.

07Uchinchi tomon xizmatlari

Tizim ishlashi uchun quyidagi xizmatlardan foydalanilishi mumkin: telefoniya provayderi (qo'ng'iroqlar), SMS-gateway (xabarnomalar), Meta platformasi (reklama lidlari), Telegram (xizmat bildirishnomalari). Ularga faqat tegishli funksiya uchun zarur bo'lgan minimal ma'lumot uzatiladi.

08Ma'lumotlarni o'chirish va murojaat

Siz o'zingiz haqingizdagi ma'lumotlarni ko'rish, tuzatish yoki o'chirishni so'rashingiz mumkin. Buning tartibi alohida sahifada berilgan: ma'lumotlarni o'chirish yo'riqnomasi.

Murojaat uchun: grafuzcorp@gmail.com. So'rovlar 30 kun ichida ko'rib chiqiladi.

09O'zgarishlar

Siyosatga o'zgartirish kiritilsa, yangilanish sanasi ushbu sahifada ko'rsatiladi.

Privacy Policy

Last updated: 22 August 2026

Operator: GRAF-CORP LLC («GRAF-CORP» MAS'ULIYATI CHEKLANGAN JAMIYAT), Tax ID 311230000, Beruniy street 87, Rakhmatobod MFY, Samarkand, Uzbekistan. Product: Tamal CRM (tamalcrm.uz).

01Overview

Tamal CRM is a customer relationship management system for real-estate sales teams, available to companies by invitation. This policy explains what data we collect, how it is used and how it is protected. Each company owns its data; GRAF-CORP LLC processes it on that company's behalf.

02Data we collect

• Account data: employee name, email, phone and role, used for authentication and permissions.
• Customer and lead data: names, phone numbers, emails and enquiry details entered by staff or received through integrations.
• Deal data: units, orders, contracts and payment records.
• Technical logs: sign-ins and audit records kept for security purposes.

03Meta (Facebook / Instagram) data

When a company connects its Facebook Page, Tamal CRM receives only the list of Pages the user manages and the leads submitted through Lead Ads forms (name, phone, email and form answers). This data is stored solely in that company's workspace and used to process sales enquiries. We do not sell it and do not share it with third parties for advertising.

04Mobile app (Tamal BOSS)

Tamal BOSS is an iOS app for company directors. It collects no new information and only displays figures that already exist in the CRM. App-related data:

• Sign-in session: a token stored securely on the device (iOS Keychain) and the device name, so sessions can be listed and revoked.
• Notification token: the device identifier issued by Apple (APNs), used only to deliver alerts about new payments and new contracts. It is deleted on sign-out or when Apple reports the token as no longer valid.
• On-device copy: the latest figures are cached on the phone for offline use and home-screen widgets. This cache is never sent back to the server.

Face ID / Touch ID is used to lock the app. Biometric data never leaves the device and is not accessible to us.

The app contains no advertising, no tracking, and no data is sold to third parties.

05Storage and security

Data is stored on servers located in Uzbekistan and transmitted over HTTPS. Each company's data is fully isolated from others. Access is role-based, sensitive actions are written to an audit log, and encrypted database backups are taken daily.

06Deletion and contact

To access, correct or delete your data, see the data deletion instructions or contact grafuzcorp@gmail.com. Requests are handled within 30 days.