Olgo

Privacy Policy

Effective: 8 October 2026

In short

Olgo is software that shops use to sell through Telegram and the web. The shop you buy from is the seller; we process your order data on its behalf.
We collect what an order needs: your name, phone number, delivery address and, if you share it, your location, plus your Telegram account details when you use Telegram.
Your data goes to the shop, to Telegram, and to the services you or the shop choose: payment providers, SMS, the shop’s inventory system or its ad analytics.
You can ask for access to your data, a correction or deletion at any time.

Contents · 13

1.Who we are

This policy explains how personal data is processed on the Olgo platform at olgo.uz: the shops hosted on it, their Telegram Mini Apps and bots, the platform’s own Telegram bot and the merchant dashboard.

The platform is operated by [to be filled], taxpayer number (STIR) [to be filled], address: [to be filled] (“we”, “the operator”). You can reach us at [to be filled] or on Telegram at [to be filled].

2.Shops and the platform: who is responsible

Each shop on the platform is run by an independent merchant. The merchant is the seller: it decides what it sells, accepts your order, delivers it and is responsible to you as a seller.

For the data in your orders, the merchant decides why it is collected and how it is used. We provide the software and process that data on the merchant’s behalf and on its instructions. For merchants’ own accounts, for people who use the platform bot, and for keeping the platform secure and working, we decide how data is processed.

Each shop’s name and contacts are shown on its “About the shop” page. Questions about a particular order are usually fastest to solve with the shop directly.

3.What data we process

From customers:

Telegram account: When you open a shop inside Telegram: your Telegram user ID, first name, username and the language of your Telegram app. Telegram passes these with a signature that we check. We never see your Telegram password or your other chats.
Order details: Your name, phone number, delivery address, delivery zone or region, an optional comment, the delivery or pickup time you chose, the items, prices and totals, the payment method and the history of the order’s status.
Location: Only if you tap the location button or place a pin on the map: the coordinates of the delivery point. They are attached to the order so the courier can find you.
Payment receipt: If you pay by card transfer: the photo of the receipt you upload.
Payment information: For Payme and Click we receive the transaction identifier, amount and status from the provider. You enter card details on the provider’s own page; we do not receive or store them.
Phone verification: If the shop requires a confirmed phone number: your number, which is sent to the SMS provider with a one time code, or shared from your Telegram account through the bot.
Shop bot subscription: If you start a shop’s Telegram bot: your chat ID, user ID, username, first name, language and the dates you subscribed, unsubscribed or blocked the bot.
Technical data: Server logs with IP address, browser or app details, the pages requested and the time. If error reporting is turned on, technical details of errors (see “Who receives data”).

From merchants and platform bot users:

Account: Your Telegram user ID, first name and username, the dates you first and last used the platform bot, and the Telegram chats where your shop receives orders.
Shop: Shop name, logo, description, contacts, addresses and map locations of branches, opening hours, products and prices.
Payments and integrations: Payme and Click merchant identifiers and keys, the card number and holder name you show customers for card transfers, your shop bot’s token, and login details for MoySklad or Billz if you connect them.
Ad tags: The Meta Pixel and Google Analytics identifiers you add to your shop.
Plan: Your shop’s plan and how much of its limits it uses.

4.Why we process it

To take, show, deliver and track orders, and to let the merchant contact you about your order.
To send you updates on your order’s status through Telegram.
To deliver messages from a shop whose bot you started. Every such message carries an unsubscribe button.
To accept payment through the provider you choose, and to let the merchant check card transfer receipts.
To verify phone numbers where the shop requires it, and to prevent fake orders and abuse.
To remember your language and, on your own device, your cart and saved details.
To run, secure and repair the platform, and to keep records the law requires.

We process personal data with your consent, given when you place an order or start a bot; to carry out the purchase you asked for; and where the law requires or allows it. We do not sell personal data.

6.Shop analytics and cookies

A merchant can add its own Meta Pixel (Facebook, Instagram) and Google Analytics tags to its shop. Only then do these services load in your browser and receive page views, items added to the cart (product ID and price), checkout starts and purchases (amount; Google Analytics also receives the order number), together with the cookies and device identifiers they use. They act under their own privacy policies, and the merchant who added them is responsible for that choice.

The platform itself sets no cookies in shops or in the dashboard. If the operator turns on analytics for the platform’s home page at olgo.uz (Google Analytics, Yandex Metrica with session recording, Meta Pixel), they apply to that page only.

7.Data kept on your device

So that you can shop without an account, the shop keeps some data in the local storage of your browser or Telegram app. It stays on your device and reaches us only as part of an order you place:

your cart and chosen language;
the name, phone numbers and addresses you saved (with map coordinates, if you set them), shared by all shops on the platform on this device;
the numbers of orders placed from this device, so you can find them again;
a token confirming your verified phone number, valid for 30 days;
whether you chose delivery or pickup.

You can delete saved addresses and phone numbers on the shop’s profile page, or remove all of it by clearing the site data in your browser or Telegram settings.

8.Where data is stored, and Uzbekistan’s law

Processing of personal data in Uzbekistan is governed by Law No. ZRU-547 “On Personal Data” of 2 July 2019. A 2021 amendment requires that personal data of citizens of Uzbekistan processed with information technologies, including over the internet, be collected, systematized and stored in databases physically located in Uzbekistan.

The platform’s database and uploaded files, including receipt photos, are stored at: [to be filled].

Some of the recipients listed in “Who receives data” (Telegram, the map and error reporting services, and analytics a merchant chooses) are outside Uzbekistan, so data sent to them leaves the country.

9.How long data is kept

Orders, with the customer details in them and receipt photos, are kept while the merchant’s shop exists on the platform, because merchants need their order history for accounting, returns and disputes. There is currently no automatic deletion schedule; you can ask for deletion as described in “Your rights”.
SMS codes are stored only in hashed form and expire after 5 minutes. A phone number shared through Telegram for verification is kept for 15 minutes.
Shop bot subscription records keep the date you unsubscribed or blocked the bot, so the shop does not message you again after you opt out.
The database and files are backed up nightly. Backups are kept for 14 days on the server and, if the operator uses off-site backup storage, for up to 30 days there. Deleted data disappears from backups as they expire.
Server logs are rotated automatically and overwritten once they reach a set size.
Data on your device stays there until you delete it.

10.How data is protected

Connections to the platform are encrypted. Every request from the Mini App and the dashboard is checked against Telegram’s signature, so no one can act in the name of your Telegram account. Payment keys, bot tokens and integration passwords are encrypted in the database, and verification codes are kept only as hashes. A shop’s orders are shown only to its merchant and, when needed to run or repair the platform, to the operator’s staff.

Receipt photos open through links that contain a long random identifier. Anyone who has such a link can open the photo, so merchants should not forward these links.

No system is completely secure. If a breach affects your data, we will act as the law requires, including notifying those affected where the law calls for it.

11.Your rights

Under the law of Uzbekistan you have the right to:

know whether your personal data is processed, by whom and for what purpose;
access your data;
have inaccurate data corrected;
have your data deleted or its processing stopped when there is no legal ground to continue;
withdraw your consent;
stop messages from a shop: press “Unsubscribe” under any of its messages, or block its bot;
complain to the authorized state body for personal data or to a court.

To make a request about data in an order, write to the shop, or to us at [to be filled] or on Telegram at [to be filled]. Name the shop, the order number or phone number used, and what you want done. We may ask you to confirm the request from the same Telegram account or phone number, so that no one else can obtain or delete your data. We answer within the time the law sets.

Data that the merchant or we must keep by law, for example for tax and accounting, may be kept for the required period and used for nothing else.

The platform is not meant for children. If you think a child has given us personal data without a parent’s consent, contact us and we will delete it.

12.Changes to this policy

We may update this policy as the platform changes. The current version is always at this address, with its effective date at the top. We announce significant changes on this page in advance and tell merchants through the platform bot.

13.Contact

Operator: [to be filled]
Taxpayer number (STIR): [to be filled]
Address: [to be filled]
Email: [to be filled]
Telegram: [to be filled]