Құпиялылық саясаты

1. Introduction

This Privacy Policy explains how Khatico LLC (“ai.khatico,” “we,” “us,” or “our”), located at 1428 Nia Rd, Charlotte, NC 28215, collects, uses, stores, and protects your personal data when you use our website at https://ai.khatico.com and our business automation services.

We operate across the United States, Kazakhstan, Uzbekistan, and Kyrgyzstan. This policy is designed to comply with applicable data protection laws in all regions where we operate, including but not limited to:

• United States: Federal Trade Commission Act (FTC Act), California Consumer Privacy Act (CCPA/CPRA), CAN-SPAM Act, and applicable state privacy laws
• Republic of Kazakhstan: Law on Personal Data and Their Protection No. 94-V (May 21, 2013), as amended
• Republic of Uzbekistan: Law on Personal Data No. ZRU-547 (July 2, 2019)
• Kyrgyz Republic: Law on Personal Information (June 14, 2008), as amended

2. Data Controller

The data controller responsible for your personal data is:

Khatico LLC
1428 Nia Rd, Charlotte, NC 28215
Email: hello@ai.khatico.com

3. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, business name
• Communication data: messages sent through our contact forms, Telegram bot, WhatsApp, or other messaging channels
• Business information: industry, project goals, automation requirements, service preferences
• Technical data: IP address, browser type, device information, operating system, referring URLs, pages visited, and access timestamps (collected automatically)
• Usage data: interactions with our website, features used, and engagement metrics

We do not intentionally collect sensitive personal data (such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs).

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: You have given explicit consent for the collection and processing of your personal data for specific purposes. In accordance with the laws of Kazakhstan, Uzbekistan, and Kyrgyzstan, we obtain consent before processing your personal data unless an exception applies.
• Contractual necessity: Processing is necessary for the performance of a contract or to take pre-contractual steps at your request (e.g., delivering automation services you have ordered).
• Legitimate interest: Processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud), provided these interests do not override your rights.
• Legal obligation: Processing is necessary to comply with applicable laws and regulations in the jurisdictions where we operate.

5. How We Use Your Data

We use collected personal data for the following purposes:

• Responding to inquiries and service requests
• Evaluating project requirements and providing proposals
• Delivering, configuring, and maintaining automation services
• Communicating about projects, updates, and support
• Processing payments and managing client accounts
• Improving our website, services, and user experience
• Complying with legal, regulatory, and platform requirements (including Meta Business verification)
• Preventing fraud, abuse, and unauthorized access

We do not process personal data for purposes incompatible with those stated above. In accordance with Kazakhstan’s Law on Personal Data, processing is limited to the achievement of specific, predetermined, and legitimate goals.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only as necessary:

• Service providers: Hosting, analytics, CRM, email delivery, and cloud infrastructure providers that help us operate our services
• Messaging platforms: Telegram, WhatsApp (Meta), Instagram (Meta), and Facebook (Meta) as required for service delivery
• Payment processors: For processing payments securely
• Legal and regulatory authorities: When required by law, court order, or government request

All third-party service providers are required to process personal data only on our instructions and in compliance with applicable data protection laws.

7. Cross-Border Data Transfers

Due to the international nature of our operations, your personal data may be transferred to and processed in countries other than your country of residence, including the United States.

For users in Kazakhstan: Under the Law on Personal Data, personal data should be stored in databases located in Kazakhstan. Where cross-border transfer is necessary, we ensure adequate protection measures are in place as required by Kazakhstan law.

For users in Uzbekistan and Kyrgyzstan: Cross-border transfers are conducted in compliance with applicable local laws, and we take reasonable measures to ensure that transferred data receives adequate protection.

For users in the United States: Data may be processed across US states in accordance with applicable federal and state laws.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• Contact form submissions and inquiries: up to 3 years after last interaction
• Client project data: for the duration of the service agreement plus any legally required retention period
• Technical logs and analytics: up to 12 months
• Financial and transaction records: as required by applicable tax and accounting laws

When personal data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

All users:

• Right to access your personal data we hold
• Right to correction of inaccurate or incomplete data
• Right to deletion of your personal data (subject to legal retention requirements)
• Right to withdraw consent at any time

Kazakhstan residents (under Law No. 94-V):

• Right to revoke consent by notifying us in writing. We will cease processing within 15 business days or provide a reasoned refusal if continued processing is required by law.
• Right to know what personal data is collected and for what purposes
• Right to restrict processing in cases provided by law

Uzbekistan residents (under Law No. ZRU-547):

• Right to information about processing of your personal data
• Right to demand correction or deletion of your data
• Right to withdraw consent to processing
• Right to file complaints with the State Authority for Personal Data Protection

Kyrgyzstan residents:

• Right to know whether your personal information is being processed
• Right to request correction or destruction of personal information
• Right to file complaints with the State Service for the Protection of Personal Data

US residents (California and other states with privacy laws):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (with exceptions)
• Right to opt-out of sale or sharing of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at hello@ai.khatico.com. We will respond within the timeframe required by applicable law (typically 15–30 business days).

10. Data Security

We implement appropriate organizational and technical measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL)
• Access controls and authentication requirements
• Regular security assessments
• Secure hosting with reputable cloud providers

While we take reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Cookies and Tracking Technologies

Our website may use essential cookies required for the website to function properly. We may also use analytics tools to understand how visitors interact with our website.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the website.

12. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at hello@ai.khatico.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

For material changes, we will make reasonable efforts to notify you (e.g., via email or a notice on our website).

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Khatico LLC
1428 Nia Rd, Charlotte, NC 28215
Email: hello@ai.khatico.com
Telegram: @autoo_pilot_bot