Privacy Policy

Operator: «LURA» LLC (hereinafter — "we"). TIN: 312 216 862. Address: 100000, Tashkent, Shaykhantakhur district, Sarxumdon MFY, Gulobod massive, building B, apt. 40. Contact: info@lura.uz.

Services: the Operator's software services, including adolat.ai, yozma.ai and other services to which this document applies.

Version: 1.0 of 22.05.2026. Binding language: Russian. The Uzbek version is provided under Article 6 of the Law "On Consumer Rights Protection"; English — for international users' convenience.

1. About this document

This Policy describes what personal data we process when you use the Services and what rights you have. It is drafted under Law No. ZRU-547 "On Personal Data" (as amended by Law ZRU-1125 of 26.03.2026) and other applicable laws of the Republic of Uzbekistan.

By using the Services you confirm that you have read this Policy. The document is unified for all of the Operator's Services; the "Privacy Policy" link in any Service takes you to this page.

2. What data we process

Account: name, email, phone, country, password (encrypted).
Payment: plan, transaction history. We do not store card details — they are processed by Click, Payme, Uzum, Humo, Uzcard and international payment gateways.
Technical: IP, device ID, browser, OS, cookies, logs.
adolat.ai content: queries, uploaded documents, conversation history, output ratings.
yozma.ai content: audio, transcripts, voice characteristics, Voice Models (for voice cloning), consent documents.
Communications: support requests.

3. Purposes and legal bases

Processing is based on Article 18 of Law ZRU-547:
- performance of contract — registration, providing Services, billing;
- separate consent — biometric/voice processing, voice cloning, AI model training (B2C, opt-in), marketing;
- legitimate interest — security, anti-fraud;
- legal requirement — tax reporting, responses to government requests.

4. Data localization

Pursuant to Article 27¹ of Law ZRU-547, the following must be stored within the Republic of Uzbekistan: biometric data, genetic data, and data of users of Uzbek telecom operators. The corresponding databases are registered in the State Register of Personal Data Databases maintained by SPC (dpm.uz).

Other categories may be processed abroad only on one of three bases: adequate jurisdiction, SCC/BCR approved by the competent authority, or an internationally recognized standard.

yozma.ai voice/biometric data is not transferred outside the Republic of Uzbekistan.

5. Retention periods

Data	Period
Account data	Active period + 3 years (accounting/tax)
adolat.ai content	Until deletion or 12 months of inactivity
yozma.ai audio (STT)	User choice: immediate / 30 / 90 days
Voice Models (TTS)	Consent term + 12 months
Payment documents	5 years
Security logs	12 months

6. AI model training

By default we do not use your data to train or fine-tune models.

B2C: voluntary opt-in in settings; withdrawal at any time.
B2B / API: never without a separate Data Processing Addendum (DPA).
Voice, biometrics, Voice Models — never used to train third-party models.

7. Whom we share with

Payment systems (Click, Payme, Uzum, Humo, Uzcard), hosting providers, email/SMS services, analytics (anonymized data), government authorities — pursuant to lawful requests.

The list of sub-processors: lura.uz/subprocessors. We do not sell your data.

8. Cookies

We use: necessary (cannot be disabled), functional (settings) and analytical (via the consent banner). Settings: lura.uz/cookies.

9. Your rights

Under Articles 22, 23, 25, 30, 31 of Law ZRU-547 you have the right to: access, rectification, blocking or deletion, withdrawal of consent, data portability, objection, complaint to SPC (dpm.uz) or court.

Requests — to info@lura.uz. Response within 10 business days. We may request identity verification.

10. Voice and voice cloning (yozma.ai)

Voice data is biometric and is processed only on the basis of a separate consent (in writing or electronic).

Voice cloning is permitted only if:
- (a) you clone your own voice — confirmed by a video recording and a copy of an ID document; OR
- (b) you clone another person's voice — with a notarized consent of the voice owner and a copy of their ID.

Automatic Speaker Verification is applied; mismatch blocks Voice Model creation. Cloning voices of public figures without license, of minors, or of deceased persons without heir consent is prohibited. Voice Models are stored encrypted on servers in the Republic of Uzbekistan; upon withdrawal of consent they are deleted within 30 days.

11. Security and incidents

Measures under Resolution No. 570 of 05.10.2022: encryption in transit (TLS) and at rest (AES-256), role-based access, logging, vulnerability testing, employee training. Security Level 1 for biometric data.

In case of an incident we notify SPC within 72 hours of detection and affected users without undue delay where the risk is high.

12. Minors

The Services are for persons 18+. Persons 13–18 only with legal representative's consent. Voice cloning features — 18+ only. Data of users under 13 is deleted on discovery.

13. Changes

The current version — lura.uz/privacy. We notify of material changes by email or in-app at least 14 days in advance.

14. Contacts

«LURA» LLC, 100000, Tashkent, Shaykhantakhur district, Sarxumdon MFY, Gulobod massive, building B, apt. 40. TIN: 312 216 862. Registration number: 2852579 of 18.06.2025.

All legal questions and subject requests: info@lura.uz. General questions: hello@lura.uz. Website: lura.uz.

Competent state authority — State Personalization Center under the Cabinet of Ministers, dpm.uz.