Privacy

Privacy Policy

We collect the minimum, use it to run and improve the service, and never sell it. The details, honestly, below.

Last updated: August 7, 2026

1. 01

   About this policy

   This policy explains what data SmartLog collects, why, and who it is shared with. It is an integral part of the Terms of Service. By using the service you agree to this policy.

2. 02

   What data we collect

   • Account data: your name, email, company name, BIN, interface language
   • Uploaded documents: invoices, packing lists, declarations and their contents
   • Data of the declarations you build in the service
   • Technical data: activity logs, IP address, device and browser type
   • Payments: the amount and the fact of payment; we do not store card data — it is processed by the payment provider
3. 03

   Why we use data

   • To provide the service: data extraction, classification, declaration assembly
   • Billing and limit accounting
   • Support and communication with you
   • Security and abuse prevention
   • Improving the service — including the classification memory (below)
   • Analysing usage in anonymised form to develop the product
4. 04

   The classification memory

   When you confirm a TN VED code (by exporting XML), the “goods description → code” pair is stored in an anonymised classification memory together with the confirmation date and the nomenclature edition. It helps classify similar goods more accurately — for you and for other users.

   The record contains none of your counterparties, prices, amounts or document contents. Correspondences are never published and never sold.

5. 05

   What we never do

   • We do not sell personal data or document data
   • We do not share counterparties, prices or commercial terms with third parties
   • We do not use your data for other companies' advertising
6. 06

   Platform operator access

   Platform operators (SmartLog administrators) may access the content of your declarations and uploaded documents for support, security and quality-control purposes — for example, to understand why a declaration cannot be exported or to verify that data was extracted correctly.

   Every such access is recorded in a tamper-evident audit log: who accessed which declaration and when. The records are visible to you in the declaration's audit history.

7. 07

   Where data is stored and processed

   All SmartLog data is hosted on servers in the Republic of Kazakhstan: the database, uploaded documents, file storage and the authentication system. We do not use foreign cloud services to store your documents or account data.

8. 08

   AI processing

   We use Google's (Gemini) AI model to suggest HS/TN VED codes and to recognise scanned documents.

   Before it is sent, data is anonymised: counterparty names and BIN, full names, bank details, addresses, contract numbers and amounts are removed and never leave Kazakhstan. Only the product description needed for classification is sent.

   Documents with a text layer are recognised locally on our servers and are never sent to external services at all.

   Google processes the transmitted text under a paid enterprise agreement: the data is not retained and is not used to train models.

9. 09

   Cookies

   We use only the technical cookies needed for sessions and sign-in. There are no advertising trackers.

10. 10

    Retention and deletion

    Account and document data is kept while the account is active. On your request (WhatsApp or email) we will delete the account and documents within a reasonable time — except what we must keep by law.

    Anonymised “description → code” correspondences may be retained after deletion — they are not linked to you.

11. 11

    Transfers abroad

    SmartLog's infrastructure is located in Kazakhstan. Only an anonymised product description ever leaves the country — for scan recognition and HS code suggestions via Google (Gemini), as described above. Your personal data, documents and account details never leave Kazakhstan.

12. 12

    Security

    We use encryption in transit, access separation and logging. No system is absolutely secure; if you suspect a leak, tell us — we will investigate and notify you if the risk affects you.

13. 13

    Your rights

    You may request: a copy of your data, its correction, deletion of the account and data, and an answer about what data is processed. Requests — via WhatsApp or email.

14. 14

    Changes to this policy

    The current version is always on this page. We will notify you of material changes in the interface or by email. Continuing to use the service means accepting the new version.