Privacy Policy
SD Bridge Privacy Policy
Effective date: September 8, 2026 · Last updated: September 8, 2026 · Version 1.0
Personal data operator: «SALES DOCTOR SOLUTIONS» LLC (the "Operator", "we")
Operator TIN: 304418535
Registered address: 20a, 12 mavze, Yangi Hayot MFY, Yunusabad district, Tashkent, Republic of Uzbekistan
Data protection contacts: info@salesdoc.io · +998 55 500 03 05
The current version of this Policy is published at https://sd-bridge.salesdoc.io/privacy and is available in the App.
1. General Provisions
1.1. This Privacy Policy (the "Policy") sets out how personal data of users of the SD Bridge mobile application (the "App") is collected, processed, stored, used and protected.
1.2. The Policy is an integral part of the App's Terms & Conditions (the "Terms"). By using the App, the user confirms acceptance of this Policy.
1.3. Personal data is processed in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan "On Personal Data".
1.4. The App is intended for use by retail outlets, wholesale buyers and HoReCa businesses (legal entities and sole proprietors), as well as distributors and their operators. Personal data is processed in respect of individuals acting as representatives, contact persons, managers or employees of such organizations.
1.5. The App is not intended for persons under 18 years of age. The Operator does not knowingly collect personal data of minors; if such processing is identified, the data is deleted.
1.6. The Operator appoints a person responsible for organizing the processing and protection of personal data and ensures registration of personal data databases in the manner prescribed by law. The responsible person can be reached via the contacts specified in Section 11.
2. Data We Collect
2.1. Data provided by the user during registration and use:
a) mobile phone number;
b) organization identification data: TIN of the legal entity or PINFL of the sole proprietor/manager, name, registered and/or actual address, delivery address;
c) details of the contact person/manager (surname, first name, patronymic, position) to the extent necessary for identification and communication;
d) order data and interaction with distributors (order contents, amounts and statuses, order history, clarifications and messages relating to orders).
2.2. Data collected automatically:
a) technical device and session data (device type and model, OS and App version, language settings, session and App installation identifiers);
b) push notification token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM);
c) IP address (processed in masked form in security logs);
d) in-App activity and diagnostic data (actions necessary for the operation of the service and security; App crash and error reports; anonymized feature usage statistics).
2.3. Data obtained from external sources:
a) organization details by TIN/PINFL obtained from authorized information services and state information resources for verification of taxpayer data (for identification and auto-completion during registration).
2.4. The Operator does not collect special categories of personal data (health, religious or political views, etc.) or biometric data.
2.5. SMS access. The App uses SMS solely to receive a one-time code (OTP) for sign-in and registration. The App does not read, send or process any other SMS messages on the user's device.
3. Purposes and Legal Bases of Processing
3.1. Personal data is processed for the following purposes:
a) user registration and identification, verification of organization data by TIN/PINFL — basis: consent of the data subject and performance of the contract (the Terms);
b) providing App functionality: creating, transmitting and tracking orders, displaying statuses, information exchange with distributors — basis: performance of the contract;
c) sending service SMS messages (OTP codes for sign-in and registration, notifications related to the operation of the service) — basis: consent of the data subject and performance of the contract;
d) sending push notifications about order statuses and events in the App — basis: consent of the data subject (the user may disable push notifications in the device settings);
e) ensuring security, preventing fraud and abuse, protecting against unauthorized access — basis: legitimate interests of the Operator and legal requirements;
f) crash diagnostics, stability analysis and improvement of the App — basis: legitimate interests of the Operator; predominantly anonymized and aggregated data is used for these purposes;
g) compliance with legal requirements, including tax and accounting legislation, and responding to lawful requests of authorized bodies — basis: legal requirements;
h) user support and handling of requests — basis: legitimate interests of the Operator and performance of the contract.
3.2. Processing is limited to the data necessary to achieve the stated purposes.
3.3. The Operator does not sell personal data, does not use it for marketing profiling and does not share it with third parties for advertising purposes. The App does not contain advertising networks.
4. Sharing Data with Third Parties
4.1. The Operator does not sell personal data and does not disclose it to third parties except in the cases specified in this Policy or provided for by law.
4.2. Data may be shared with the following categories of recipients to the extent necessary to provide the services:
a) distributors with whom the user places an order, and their operators — to the extent necessary to process and fulfil the order (organization data, contact details, delivery address, order contents). The distributor processes the data received as an independent operator for the purpose of performing the supply contract;
b) service providers (processors) engaged by the Operator under contract and acting on its instructions:
— SMS delivery service (for delivering OTP codes and service notifications);
— push notification delivery services (Apple Push Notification service, Firebase Cloud Messaging);
— App analytics and stability (crash) monitoring services;
— TIN/PINFL data verification service;
— infrastructure and hosting providers;
c) authorized state bodies — on lawful grounds and in the manner prescribed by law;
d) a legal successor of the Operator in the event of reorganization — subject to the terms of this Policy.
4.3. The Operator takes measures to ensure that engaged processors provide an appropriate level of personal data protection and shares with them only the data necessary to provide the respective service.
5. Data Storage, Localization and Cross-Border Transfer
5.1. The primary personal data databases of users are hosted on technical facilities physically located in the Republic of Uzbekistan. Personal data of citizens of the Republic of Uzbekistan is stored and processed using technical facilities located in the Republic of Uzbekistan, in the manner prescribed by personal data legislation.
5.2. Certain data may be transferred outside the Republic of Uzbekistan in connection with the use of the services listed in clause 4.2 (b), in particular: the push notification token and related technical data — to push notification service operators; anonymized diagnostic data and crash reports — to analytics and monitoring services. Such transfer is carried out in compliance with the cross-border transfer requirements of the Law of the Republic of Uzbekistan "On Personal Data", to the minimum extent necessary and provided that the recipient ensures adequate data protection. By using the App, the user consents to such transfer.
5.3. Retention periods:
a) account data (phone number, organization data, contact details) — for the period of use of the App and until account deletion;
b) order data and related primary documents — for the periods established by the tax and accounting legislation of the Republic of Uzbekistan, including after account deletion, in archived form;
c) security and technical logs — for the period necessary to ensure security and investigate incidents, unless a longer period is required by law;
d) diagnostic and analytics data — in anonymized form.
5.4. Upon expiry of the retention periods, data is deleted or anonymized.
6. Data Protection
6.1. The Operator applies legal, organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying and dissemination.
6.2. Such measures include, in particular: data transmission over secure channels (TLS); encryption of sensitive data (including protected tokens and identification details); access rights segregation and employee access control; IP address masking in logs; exclusion of personal data from service logs and internal system messages; backups.
6.3. Despite the measures taken, no method of data transmission or storage can guarantee absolute security; the Operator makes reasonable efforts to minimize risks and notifies users and the authorized body of incidents in the cases and manner prescribed by law.
7. Rights of the Data Subject
7.1. The data subject has the right to:
a) obtain information about the processing of their personal data;
b) request clarification or correction of inaccurate or incomplete data;
c) request deletion or blocking of data processed in violation of the law;
d) withdraw previously given consent to processing;
e) appeal actions or omissions of the Operator to the authorized personal data protection body or in court.
7.2. Withdrawal of consent or a request to delete data necessary for the operation of the App may result in the inability to continue using the service.
7.3. To exercise their rights, the data subject contacts the Operator via the contacts specified in Section 11. The Operator handles the request within the periods established by law.
8. Account and Data Deletion
8.1. The user may delete their account at any time:
a) directly in the App — in the account settings section;
b) by submitting a request via the web page https://sd-bridge.salesdoc.io/account-deletion or by e-mail to info@salesdoc.io, indicating the phone number used at registration.
8.2. The Operator processes a deletion request within a reasonable period, but no later than 30 (thirty) days.
8.3. Upon account deletion, contact and registration data is deleted or anonymized. Order data and related primary documents are retained in archived form for the periods established by the tax and accounting legislation of the Republic of Uzbekistan and are not used for any other purpose. Outstanding order obligations remain to be performed.
8.4. After account deletion, the phone number is released and may be used for a new registration.
9. Consent to SMS and Push Notifications
9.1. By requesting an OTP code and using the App, the user consents to receiving service SMS messages related to access to the App and the operation of the service.
9.2. Such messages are of a service (transactional) nature and are necessary for the operation of the App. The Operator does not send marketing SMS messages without the user's separate consent.
9.3. Push notifications are sent subject to the permission granted by the user at the operating system level of the device. The user may disable push notifications in the device settings at any time; this does not affect the ability to use the App.
10. Changes to the Policy
10.1. The Operator may amend this Policy. The current version is published in the App and at https://sd-bridge.salesdoc.io/privacy, indicating the effective date and version number.
10.2. The Operator notifies users through the App of material changes (expansion of the categories of data collected, new processing purposes, new categories of recipients) before such changes take effect.
10.3. Continued use of the App after the changes take effect constitutes the user's acceptance of the updated Policy.
11. Contacts
11.1. For matters relating to personal data processing and the exercise of data subject rights:
«SALES DOCTOR SOLUTIONS» LLC
TIN: 304418535
Address: 20a, 12 mavze, Yangi Hayot MFY, Yunusabad district, Tashkent, Republic of Uzbekistan
E-mail: info@salesdoc.io
Phone: +998 55 500 03 05