1. Kirish

Ushbu Maxfiylik siyosati AdSET.uz | TARGETING INTEGRATORI platformasi (keyingi o'rinlarda — "Platforma") tomonidan foydalanuvchilar shaxsiy ma'lumotlarining yig'ilishi, ishlatilishi, saqlanishi va himoyalanishi tartibini tavsiflaydi.

Platformadan foydalanib, Siz ushbu siyosatga rozilik bildirasiz.

2. Platforma haqida

AdSET.uz | TARGETING INTEGRATORI — bu Facebook va Instagram reklama hisoblarini boshqarish uchun SaaS (Software as a Service) platformasi. Platforma quyidagi imkoniyatlarni taqdim etadi:

• Facebook reklama hisobi ma'lumotlarini ko'rish (statistika, kampaniyalar, byudjet, lidlar)
• Kampaniyalarni boshqarish (ishga tushirish/to'xtatish)
• Sun'iy intellekt (AI) yordamida reklama tahlili
• Telegram bot orqali bildirishnomalar olish
• Haftalik va oylik hisobotlar
• Lidlar (potentsial mijozlar) bilan ishlash

3. Facebook/Meta API integratsiyasi

Platforma Meta Marketing API orqali quyidagi ruxsatlarni so'raydi:

Muhim: Biz Sizning Facebook ma'lumotlaringizni faqat Siz aniq ruxsat berganingizdan keyin olamiz va faqat Platforma xizmatlarini taqdim etish uchun ishlatamiz. Ma'lumotlaringiz uchinchi tomonlarga sotilmaydi.

4. Yig'iladigan ma'lumotlar

4.1. Ro'yxatdan o'tishda

• Email manzili
• Parol (shifrlangan bcrypt algoritmi bilan)
• To'liq ism
• Telefon raqami (ixtiyoriy)

4.2. Facebook orqali ulanishda

• Facebook foydalanuvchi ID va ismi
• Access Token (AES-256-CBC algoritmi bilan shifrlangan holda saqlanadi)
• Reklama hisobi (Ad Account) ID va nomi
• Facebook Page ID, nomi va Page Access Token (shifrlangan)
• Reklama kampaniyalari va statistika ma'lumotlari
• Lid formalari va lidlar ma'lumoti

4.3. Telegram bot ulashda

• Bot Token (shifrlangan holda saqlanadi)
• Bot username va nomi
• Telegram foydalanuvchi ID (botga /start yuborganda)

4.4. Avtomatik to'planadigan

• IP manzil
• Brauzer turi va versiyasi
• Kirish vaqti va sanasi
• Ko'rilgan sahifalar

5. Ma'lumotlardan foydalanish maqsadi

Yig'ilgan ma'lumotlar faqat quyidagi maqsadlarda ishlatiladi:

• Platformani ishlatish va xizmatni ta'minlash
• Foydalanuvchi hisobini boshqarish
• Facebook/Meta API orqali reklama ma'lumotlarini olish va ko'rsatish
• Reklama kampaniyalarini boshqarish (foydalanuvchi nomidan)
• Lidlar (potentsial mijozlar) bilan ishlash
• Telegram bot orqali bildirishnomalar yuborish
• AI tahlil uchun Groq API'ga anonim so'rovlar yuborish
• Foydalanuvchini muhim voqealar haqida xabardor qilish
• Platformani yaxshilash va xatolarni tuzatish
• Xavfsizlik va firibgarlikdan himoya

6. Ma'lumotlarni saqlash va himoyalash

• Parollar — bcrypt algoritmi bilan hash qilinadi (orqaga qaytarib bo'lmaydi)
• Facebook va Telegram tokenlari — AES-256-CBC algoritmi bilan shifrlangan holda saqlanadi
• Database — HTTPS/SSL himoyalangan MySQL serverda saqlanadi
• Aloqa — barcha ma'lumot uzatish HTTPS orqali shifrlangan
• Session — HTTPOnly, Secure, SameSite cookielar ishlatiladi
• SQL Injection — Prepared Statements (PDO) orqali himoyalangan
• XSS — barcha chiqish ma'lumotlari htmlspecialchars bilan filtrlanadi
• CSRF — har bir formada unikal token
• Rate limit — brute force hujumlarga qarshi himoya

7. Uchinchi tomon xizmatlari

Platforma quyidagi uchinchi tomon xizmatlaridan foydalanadi:

8. Ma'lumotlarni bo'lishish

Biz Sizning shaxsiy ma'lumotlaringizni hech kimga sotmaymiz va reklama maqsadida bo'lishmaymiz. Ma'lumotlar faqat quyidagi hollarda oshkor etilishi mumkin:

• Qonun talabi bilan (sud qarori, davlat organining rasmiy talabi)
• Foydalanuvchining yozma roziligi bilan
• Platforma xizmatini ta'minlash uchun zarur uchinchi tomonlarga (Facebook, Telegram, Groq — yuqorida ko'rsatilgan)

9. Foydalanuvchi huquqlari

Siz quyidagi huquqlarga egasiz:

• Kirish — o'zingizning ma'lumotlaringizni ko'rish
• Tuzatish — profil sahifasidan ma'lumotlaringizni yangilash
• O'chirish — hisobingizni o'chirib, barcha ma'lumotlaringizni yo'qotish (qarang: Ma'lumotlarni o'chirish)
• Facebook uzish — istalgan vaqtda Facebook ulanishni uzish
• Bot o'chirish — istalgan vaqtda Telegram botni o'chirish
• Ma'lumot olish — barcha ma'lumotlaringiz nusxasini so'rash (email orqali)
• Rozilikni bekor qilish — istalgan vaqtda

Huquqlaringizni amalga oshirish uchun: support@adset.uz

10. Ma'lumotlarni o'chirish

Siz istalgan vaqtda barcha ma'lumotlaringizni o'chirish huquqiga egasiz. Ma'lumotlarni o'chirish bo'yicha to'liq ko'rsatmalar uchun: Ma'lumotlarni o'chirish sahifasi.

Asosiy yo'llar:

• Profil sahifasidan "Hisobni o'chirish" tugmasi orqali
• Email orqali so'rov yuborish: support@adset.uz
• Facebook → Settings → Apps and Websites → AdSET'ni olib tashlash

Hisob o'chirilgandan keyin barcha ma'lumotlar 30 kun ichida butunlay o'chiriladi.

11. Ma'lumotlarni saqlash muddati

• Hisob ma'lumotlari — hisob faol bo'lgan vaqtda
• Facebook tokenlari — Facebook belgilagan muddatgacha (60 kun, avtomatik yangilanadi)
• Loglar — 90 kun davomida
• AI tahlil tarixi — 6 oy
• Hisob o'chirilgandan keyin barcha ma'lumotlar 30 kun ichida butunlay o'chiriladi

12. Cookie fayllar

Platforma faqat texnik jihatdan zarur cookie fayllardan foydalanadi:

• Session cookie — tizimga kirgan holatni saqlash uchun (HTTPOnly, Secure)
• CSRF token — xavfsizlik uchun

Reklama yoki kuzatish cookie'lari ishlatilmaydi.

13. Bolalar maxfiyligi

Platforma 18 yoshgacha bo'lgan shaxslarga mo'ljallanmagan. Biz 18 yoshdan kichik shaxslardan ongli ravishda ma'lumot yig'maymiz. Agar bolaning ma'lumotini yig'ganimizni aniqlasak — darhol o'chirib tashlaymiz.

14. Maxfiylik siyosatidagi o'zgarishlar

Biz ushbu siyosatni vaqti-vaqti bilan yangilashimiz mumkin. Muhim o'zgarishlar haqida email va platformada xabar yuboramiz. "Oxirgi yangilanish" sanasi yuqorida ko'rsatilgan.

15. Aloqa

Savollar, shikoyatlar yoki takliflar uchun:

1. Introduction

This Privacy Policy describes how AdSET.uz | TARGETING INTEGRATORI platform (hereinafter referred to as the "Platform") collects, uses, stores, and protects the personal data of its users.

By using the Platform, You agree to this Privacy Policy.

2. About the Platform

AdSET.uz | TARGETING INTEGRATORI is a Software as a Service (SaaS) platform for managing Facebook and Instagram advertising accounts. The Platform provides the following features:

• Viewing Facebook ad account data (statistics, campaigns, budget, leads)
• Campaign management (start/pause)
• AI-powered advertising analysis
• Notifications via Telegram bot
• Weekly and monthly reports
• Lead (potential customer) management

3. Facebook/Meta API Integration

The Platform requests the following Meta Marketing API permissions:

Important: We only access your Facebook data after you have explicitly granted permission and use it solely to provide Platform services. Your data is never sold to third parties.

4. Information We Collect

4.1. During Registration

• Email address
• Password (hashed using bcrypt algorithm)
• Full name
• Phone number (optional)

4.2. When Connecting Facebook

• Facebook User ID and name
• Access Token (stored encrypted with AES-256-CBC algorithm)
• Ad Account ID and name
• Facebook Page ID, name, and Page Access Token (encrypted)
• Advertising campaigns and statistics data
• Lead forms and lead data

4.3. When Connecting Telegram Bot

• Bot Token (stored encrypted)
• Bot username and name
• Telegram User ID (when user sends /start to the bot)

4.4. Automatically Collected

• IP address
• Browser type and version
• Login time and date
• Pages visited

5. How We Use Your Data

Collected data is used solely for the following purposes:

• Operating the Platform and providing services
• Managing user accounts
• Retrieving and displaying advertising data via Facebook/Meta API
• Managing advertising campaigns (on behalf of the user)
• Working with leads (potential customers)
• Sending notifications via Telegram bot
• Sending anonymized requests to Groq API for AI analysis
• Informing users about important events
• Improving the Platform and fixing bugs
• Security and fraud prevention

6. Data Storage and Protection

• Passwords — hashed with bcrypt (irreversible)
• Facebook and Telegram tokens — stored encrypted with AES-256-CBC
• Database — MySQL server secured with HTTPS/SSL
• Transmission — all data transmitted over HTTPS
• Session — HTTPOnly, Secure, SameSite cookies
• SQL Injection — protected via Prepared Statements (PDO)
• XSS — all output filtered through htmlspecialchars
• CSRF — unique token in every form
• Rate limit — protection against brute force attacks

7. Third-Party Services

The Platform uses the following third-party services:

8. Data Sharing

We do not sell Your personal data and do not share for advertising purposes. Data may only be disclosed in the following cases:

• By legal requirement (court order, official government request)
• With the user's written consent
• To third parties necessary for Platform operation (Facebook, Telegram, Groq — listed above)

9. Your Rights

You have the following rights:

• Access — view your own data
• Correction — update your information on the profile page
• Deletion — delete your account and all associated data (see: Data Deletion)
• Disconnect Facebook — disconnect Facebook at any time
• Remove Bot — remove Telegram bot at any time
• Data Export — request a copy of all your data (via email)
• Withdraw Consent — at any time

To exercise your rights: support@adset.uz

10. Data Deletion

You have the right to delete all your data at any time. For detailed instructions, please visit our Data Deletion page.

Main methods:

• Through the "Delete Account" button on the profile page
• By email request: support@adset.uz
• Facebook → Settings → Apps and Websites → Remove AdSET

After account deletion, all data is permanently removed within 30 days.

11. Data Retention

• Account data — while the account is active
• Facebook tokens — until Facebook's expiration (60 days, auto-renewed)
• Logs — for 90 days
• AI analysis history — 6 months
• After account deletion, all data is permanently removed within 30 days

12. Cookies

The Platform uses only technically necessary cookies:

• Session cookie — to maintain login state (HTTPOnly, Secure)
• CSRF token — for security

No advertising or tracking cookies are used.

13. Children's Privacy

The Platform is not intended for persons under 18 years old. We do not knowingly collect data from persons under 18. If we discover that we have collected a child's data, we will immediately delete it.

14. Changes to this Privacy Policy

We may update this policy from time to time. We will notify users of significant changes via email and on the Platform. The "Last updated" date is shown above.

15. Contact Us

For questions, complaints, or suggestions: