Privacy Policy — Silkroute AI CFO
Version: 2026-10-31-draft · Date:
DRAFT — must be reviewed by a lawyer before it binds anyone (Law of the Republic of Uzbekistan “On Personal Data”). Text in [square brackets] is a placeholder.
Operator and contact
[LEGAL ENTITY NAME], registration number [REGISTRATION NUMBER], TIN [TAX ID], [LEGAL ADDRESS], Republic of Uzbekistan (“we”). Contact: [CONTACT EMAIL]. Requests about your personal data: [DATA REQUESTS EMAIL]. This policy follows the Law of the Republic of Uzbekistan “On Personal Data”.
What we collect
Your account (name, email, password hash), your companies, the transactions read from your statements (date, amount, currency, counterparty, description — card and account numbers are masked to their last four digits), your chats, reports, skills, connectors, payments, and your consents with their date, IP address and browser. Uploaded files themselves are not stored.
Why, and on what basis
To provide the service you signed up for (the contract); with your separate consent for AI processing of statements, sending pseudonymised data to AI providers, each connector and optional cookies; to meet legal duties (payment and accounting records); and for our legitimate interest in keeping the service secure (security logs).
Where it is stored
In a PostgreSQL database hosted by Neon ([DB REGION]) and processed by our API on Railway ([API REGION]). Before personal data of Uzbek citizens is processed commercially it will be moved to servers in the Republic of Uzbekistan, as the law requires.
Who receives it
Only the sub-processors listed on the Sub-processor list, each for the stated purpose. AI providers receive only pseudonymised data (see below). We do not sell your data.
How it is protected
Encrypted connections; tokens, secrets and the anonymisation map encrypted at rest (AES-256-GCM); row-level separation between companies; two-factor sign-in; least-privilege database roles; an append-only audit log. See the Security summary.
AI and your data
AI processing is off until you switch it on. Before anything is sent to an AI provider, names, companies, counterparties, account and card numbers, phones, emails, tax IDs and addresses are replaced with placeholders such as Company_A; the map stays on our server and the answer is re-identified there. Data you upload (REAL mode) goes only to paid AI providers whose terms say they do not train on it; free AI tiers are used only for the sample demo company. We log provider, model, time and token count, never the content.
Connectors and cookies
Each connector (Google Sheets, Gmail, Telegram, webhooks, MCP servers) asks for its own consent, uses the narrowest access and can be disconnected in one click. Cookies are described in the Cookie Policy; only strictly necessary ones are used unless you agree to more.
Your rights
You can see, correct, export (JSON + CSV) and delete your data and withdraw any consent in “My data and consents”, or write to [DATA REQUESTS EMAIL]; we answer within [RESPONSE PERIOD]. Withdrawing AI consent switches answers to rule-based mode. You may also complain to the authorised state body for personal data.
Retention and deletion
Data is kept while your account exists. Deleting the account removes your companies, transactions, chats, the anonymisation map, tokens and caches at once; database backups expire within the hosting provider’s window (up to 7 days in Phase 1). Exception: payment records (orders, payment events, receipts) are kept for [RETENTION PERIOD] because accounting and tax law require it. The security audit log keeps ids and actions only.
Children
The service is for businesses and is not meant for anyone under 18.
Changes
When this policy changes we show the new version with its date and ask you to accept it.