Privacy Policy

Data is processed by “MAVAR DASTURIY YECHIMLAR” MCHJ, the legal owner and provider of MAVAR products including Nira and ShopOS. General enquiries and data requests can be sent to hello@mavar.uz or through the Contact form.

MAVAR's pages — the Russian, English and Uzbek versions of mavar.uz — run Yandex Metrica, Yandex's web analytics service (counter 112297116). It stores its own cookies in your browser and collects: which pages you opened and how long you stayed on them, where you came from (the previous page's address, UTM tags), your device and browser type, your approximate location based on your IP address, clicks and link clicks. We need this to understand which pages get read and where visitors leave.

On the site's pages, except the Privacy Policy, the Subscription terms and the Contact page with the request form, Webvisor is switched on — a Metrica feature that records actions on the page: scrolling, mouse movements, clicks. These recordings show us where a page is awkward to use. On the Policy, the Terms and the Contact page, Webvisor is switched off.

Metrica data is processed by Yandex on its own servers, which may be located outside Uzbekistan, and is kept under Yandex's own rules: https://yandex.ru/legal/confidential/. We see it in Metrica's reports.

How to opt out: block cookies and trackers in your browser settings, or install Yandex's Metrica opt-out add-on: https://yandex.ru/support/metrica/general/opt-out.html. The site keeps working in full. There is no separate cookie banner on the site.

There are no other counters or advertising pixels on the site — no Google Analytics, no Meta pixel or anything similar. The site's own code writes nothing to cookies or to browser storage.

The Contact form sends what you typed into it: your company, website or Instagram, city, a way to reach you and what you wrote about the task, plus the address of the page the request came from. Along with the request our server stores the IP address and browser details it was sent from — this helps filter out spam. The request is kept on our server and reaches us in Telegram so that it is not lost. After you submit it, your email client opens with a message to hello@mavar.uz — you do not have to send it.

The hosting keeps a standard technical request log (IP, time, page address) — it is needed to run the server and defend against attacks; we do not use it to profile visitors.

Your name, a way to reach you (email, Telegram, phone) and whatever you told us about the business. We use it to reply, to scope the work and — once we have started — to run the subscription. We send no mailings without your consent.

To run a business's presence we ask for access to what already belongs to the client: the Google Business Profile listing, Instagram and Telegram accounts, the domain and hosting, directory and catalogue back offices.

What we do with it: create and maintain listings and pages, publish what has been agreed, add machine-readable markup, and take visibility measurements.

What we never do: pass credentials to third parties, publish anything personal or unapproved, change passwords or recovery options without the owner's knowledge, or use a client's accounts for anyone else's work.

How it works technically: wherever the platform allows it we work through invitations and delegated rights (Google Business Profile, domains, ad accounts) rather than passwords. If a password is unavoidable, it is stored apart from correspondence. Access is revoked on the owner's first request, and when the work ends we ask the owner to revoke our rights ourselves.

We do not need, and do not ask for, the client's own customers' data. If such data reaches us in the course of the work — a lead from a bot, for instance — it stays with the business owner and is used only to answer that customer.

We do not sell data or hand it to third parties for their own purposes. Technically it passes through the platforms the infrastructure runs on — email, Telegram, hosting, Google services — only to the extent the work requires, and under those platforms' own rules.

Yandex is a separate case. Data on visits to the site is collected and processed by Yandex Metrica on Yandex's servers, possibly including servers outside Uzbekistan. What exactly it collects and how to opt out is set out in the section “What the site itself collects”.

We keep correspondence and working materials while the work is under way, and for a reasonable period afterwards, so the project history can be revisited. A deletion request can be sent to hello@mavar.uz or through the Contact form.

Ask what we hold; correct what is wrong; have it deleted; revoke the access you granted. For data requests, use hello@mavar.uz or the Contact form. We reply in the language you wrote in.

The update date is at the top of this page. Material changes are announced to active clients by email, rather than quietly edited into the text.