This Personal Data Privacy Policy (hereinafter referred to as the "Privacy Policy") is a public agreement concluded between the owner of the service, ON.AI Business LLP (the "Provider"), and the Client (also the "User"), in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan. It is based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" and applies to information containing personal data of Clients that the service at https://ooon.ai (hereinafter the "Service") may obtain about Clients during their use of the Service website.
Personal data means information relating to a specific or identifiable data subject, recorded on electronic, paper, or other tangible media.
Non-personal data means information automatically transmitted when the Client views advertising blocks or visits pages containing a statistics script: requested page address, cookie data, IP address, browser information, referrer (previous page address), and access time.
Collection of personal data means actions aimed at obtaining personal data.
Processing of personal data means actions aimed at accumulation, storage, modification, supplementation, use, distribution, anonymization, blocking, and destruction of personal data.
Protection of personal data means a set of measures, including legal, organizational, and technical measures, carried out for the purposes established by the Law of the Republic of Kazakhstan "On Personal Data and Their Protection."
Service means a website located on a server in Almaty, accessible at https://ooon.ai, where subscriptions are offered for purchase by Clients.
Website Services means all services available for use on https://ooon.ai and its subdomains.
Client means a user of the Service.
Provider means ON.AI Business LLP, the owner of the Service, BIN 210340009433.
Cookies are small text files in which the browser records data from websites visited by the Client. Cookies perform a number of functions, such as enabling the Client to navigate between pages efficiently, remembering their preferences, and thereby improving the experience of interacting with the Service.
IP address is a unique network address of a node in a computer network built on the IP protocol, allowing the Client's location to be determined. The Service does not track location more precisely than city and region.
This Privacy Policy establishes the Provider's obligations regarding non-disclosure and protection of the confidentiality of personal data that the Client provides at the Provider's request during registration on the Service website and/or when purchasing a subscription.
Personal data authorized for processing under this Privacy Policy are provided by the Client by completing the registration form on the Service website and include the following information:
Client's surname, first name, and patronymic (patronymic is optional);
Client's contact phone number;
Email address (e-mail);
As part of the integration with Google Calendar, the Service receives and processes the following data:
Calendar statuses (e.g., busy or free).
Calendar events (including creation, modification, and deletion).
Access and refresh tokens required for authentication.
The User may disconnect the Google Calendar integration at any time by removing the plugin through the Service interface. Upon disconnection, all associated Google user data (including tokens) will be deleted from the database, and access and refresh tokens will be invalidated.
Any other personal information not specified above (browsers used, operating systems, etc.) is also subject to secure storage and non-disclosure, except as provided in clauses 4.3.2. and 4.4. of this Privacy Policy.
The Provider collects, processes, and stores only the personal data necessary for providing the Services.
The Provider uses Client personal data for the following purposes:
Identification of the Client for purchasing a subscription and concluding a Service Agreement;
Processing and receiving payments from the Client;
Providing the Client with effective customer support;
Providing the Client with personalized Services;
Communicating with the Client, including sending notifications, requests, and information regarding the use of Services, provision of services, and processing the Client's requests and applications;
Improving the quality of Services, their usability, and developing new Services;
Informing the Client about events and promotions;
Conducting statistical and other research based on non-personal data, as well as optimizing advertising messages;
Enabling the Service's AI assistants to manage the Client's calendar (e.g., viewing available slots and scheduling appointments for clients).
The Provider is not responsible for information provided by the Client on the website in a publicly accessible form.
The Provider is not responsible for losses that the Client may incur as a result of their login and password becoming known to a third party.
Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) is also subject to secure storage and non-disclosure, except as provided in clauses 4.3.2. and 4.4. of this Privacy Policy.
The Client is obligated to:
Provide personal data information necessary for using the Service;
Modify and supplement the provided information upon discovering incorrect data while using the Service.
The Client has the right to:
Access and edit personal data information at any time through the web interface provided within the Services.
Right of access to data: The User has the right to obtain information about whether their personal data is being processed, and if so, access to such data, including:
Processing purposes.
Categories of data being processed.
Storage periods.
Information about third parties to whom data has been transferred.
The User may request the correction or supplementation of their personal data if it is incomplete or inaccurate. To do so, the User must submit a request through the web interface or by email to info@ooon.ai
The User may withdraw consent to the processing of their personal data at any time by sending a request to info@ooon.ai. After withdrawal of consent, data processing ceases, except in cases provided by the legislation of the Republic of Kazakhstan.
The User may request deletion of their personal data in the following cases:
If the data is no longer needed for the purposes for which it was collected.
If the User has withdrawn consent to processing.
If the data was processed in violation of the law. Deletion requests are processed within 60 (sixty) calendar days.
The Provider is obligated to:
Use the received information exclusively for the purposes specified in Section 3 of this Privacy Policy;
Ensure that confidential information is kept secret, not disclose personal data transferred by the Client without prior written permission, except for transfer of data for the purpose of fulfilling the Client's order (to authorized state bodies, etc.), as well as to authorized state bodies of the Republic of Kazakhstan in the manner established by the legislation of the Republic of Kazakhstan;
Take precautions to protect the confidentiality of the Client's personal data according to the procedure normally used to protect such information;
Use the received information, including Google user data related to Google Calendar, exclusively for the purposes specified in Section 3 of this Privacy Policy;
Ensure secure storage and protection of Google user data obtained through the Google API in accordance with established security standards, including token encryption.
The Provider has the right to provide access for collection and analysis of Clients' non-personal data to third parties for statistics and advertising optimization purposes. The use of non-personal data by third parties is governed by their own privacy policies, and the Service is not responsible for their use.
The Client's use of the Service constitutes their unconditional consent to this Privacy Policy and the terms of processing the Client's personal data by the Provider.
In the event of disagreement with the terms of the Privacy Policy, the Client must discontinue use of the Website and Service.
This Privacy Policy applies only to the Service website at https://ooon.ai and its subdomains. The Service is not responsible for third-party websites that the Client may access via links available on the Service website.
The Privacy Policy is posted on the same domain as the website's main page and is accessible to users via a direct link from the main page and the OAuth consent screen.
The Provider reserves the right to unilaterally amend this Privacy Policy to further improve the security system in accordance with the current legislation of the Republic of Kazakhstan.
All suggestions or questions regarding this Privacy Policy should be directed to: nurbolat@ooon.ai.
The Provider is not responsible for the actions of third parties who, through the use of the Internet, have gained access to information about the Client, or for the consequences of using information available to any Internet user.
The Provider also has the right to send the User notifications about new products and services, special offers, and various events.
The User may always opt out of receiving informational messages by sending a letter to the Provider at nurbolat@ooon.ai with the subject line "Opt out of notifications about new products, services, and special offers."