1.1. This Privacy Policy explains how Hubconnect LLC, registered at: 10 000, Republic of Kazakhstan, Astana, Respublika Avenue 34 (hereinafter — "Hubconnect", "Operator (Controller)", "we", "our", or "us"), collects, processes, and protects your personal data when you use our website https://hubconnect.work and the Hubconnect Platform available at app.hubconnect.work.

1.2. This Policy applies to all actions involving personal data, including collection, recording, systematization, accumulation, storage, clarification (updating or modification), extraction, use, transfer (including dissemination, provision, and access), anonymization, blocking, deletion, and destruction — whether performed by automated means or otherwise.

1.3. If you do not agree with this Policy, please refrain from using our website or Platform.

1.4. This Policy does not apply to software, mobile applications, or services provided by third-party developers, vendors, advertisers, sponsors, or social networks that may be integrated with or linked through our Platform (hereinafter — "Third-Party Services"). For example, you may be redirected to a payment provider’s website when completing a transaction. The Operator (Controller) does not manage or control such Third-Party Services. These entities act as independent controllers and operate under their own privacy policies. We strongly encourage you to review their respective privacy policies. Hubconnect assumes no responsibility for their data processing practices, and your use of such services is at your own risk.

1.5. We are committed to protecting and respecting your privacy. When Hubconnect determines the purposes and means of processing the personal data you provide through the Website or Platform, we act as the Operator (Controller) under the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated 21 May 2013 No. 94-V (the "Personal Data Law") and other applicable legislation.

The Operator (Controller) processes personal data based on the following legal grounds:

2.1.1. Consent — explicit consent of the data subject for specific purposes of processing (including, where applicable, consent to cross-border transfer);

2.1.2. Contract performance — conclusion and/or execution of a contract to which the data subject is a party, or steps taken at the data subject’s request before entering into such a contract;

2.1.3. Legal obligations — compliance with the Operator (Controller)'s duties under the laws of the Republic of Kazakhstan, including accounting and tax law, currency regulation, AML/CFT, financial monitoring, and other applicable requirements, as well as responding to lawful requests from competent authorities.

3.1. Categories of data collected

3.1.1. Personal Data. Any information relating to an identified or identifiable individual, recorded on electronic, paper, or other tangible media, in the volume necessary and sufficient to achieve the purposes defined in this Policy.
3.1.2. Additional Data. Technical and analytical information that does not directly identify an individual (e.g., device characteristics, connection data, error logs, interaction data).
3.1.3. Anonymized Data. Data may be irreversibly anonymized and used for analytics, statistics, service improvement, and security purposes.

3.2. Purposes and scope of processing

3.2.1. Representatives of clients and partners

Purposes:

• To provide information about Hubconnect products and services, respond to requests and partnership proposals, and maintain feedback;
• To grant access to the Platform (create an account, provide access to functionality);
• To conclude and perform contractual relations.

Data processed:

• Full name (including patronymic, if applicable);
• Job title and company name;
• Business email address;
• Business phone number.

3.2.2. Contractors (Service Providers / Performers)

Purposes:

• To provide access to the Platform (account creation, functionality access);
• To comply with tax, currency, and other regulatory requirements of the Republic of Kazakhstan;
• To conclude and perform contracts between the Performer and the Operator (Controller).

Data processed:

• Full name (including patronymic, if applicable);
• Details of identification documents (type, series, number, issuing authority, date of issue, expiry date), including scanned copies of relevant pages;
• Permanent residential address (with scanned copies of relevant pages if applicable);
• Email address;
• Phone number;
• Bank details (for payments and settlements);
• Documents confirming tax residency status;
• Entry/exit stamp details from the passport (including scanned copies of relevant pages);
• Visa, work permit, residence permit, rental agreement, utility bill, or other documents confirming place of residence or tax status (including scanned copies, where applicable).

3.3. Verification and retention of copies
The data subject authorizes the Operator (Controller) to temporarily store electronic copies of documents provided for KYC and tax compliance for up to three (3) years to protect legal rights in potential disputes and for audits or inspections. Thereafter, the copies shall be irreversibly deleted with a formal deletion act. Extracted document details and verification results may be retained longer as permitted by law and this Policy.

3.4. Marketing and communications
Subject to your separate consent (or as otherwise permitted by law), Hubconnect may send marketing communications to your email address regarding its products and services. You can withdraw consent at any time by clicking "Unsubscribe" in any such email.

3.5. If you provide Hubconnect with personal data of third parties, you confirm that you have obtained their consent to disclose and process such data.

4.1. Cookies are small text files stored in your browser to retain preferences and improve your experience. Hubconnect uses cookies and similar technologies (e.g., web beacons and tracking pixels) to manage the Platform, personalize content, improve usability, provide support, and perform analytics.

4.2. Types of cookies used:

• Essential cookies — necessary for the operation of the Platform;
• Functional cookies — remember your preferences (language, region, settings);
• Performance cookies — collect analytics on usage to improve navigation and fix technical issues;
• Targeting cookies — track browsing habits for relevant content and marketing measurement.

4.3. You can manage cookies through your browser settings. Blocking cookies may affect the functionality or accessibility of certain Platform features.

4.4. By using the Platform, you consent to Hubconnect storing cookies on your device under the terms described herein.

5.1. Personal data is stored only as long as necessary to achieve the purposes of processing or as required by Kazakhstani law. Afterward, data are deleted, anonymized, or blocked in accordance with internal procedures and the Personal Data Law.

5.2. Retention periods:
Contractual, accounting, and tax records — 5 years after the relevant reporting period;
KYC/verification data (extracted identifiers, verification results) — until the purpose is achieved and for up to 3 years for dispute protection, then deleted;
Account data — while active and for 3 years after closure;
Additional data — 12 months for security and audit;
Marketing identifiers/cookies — until consent is withdrawn or expiry under settings.

5.3. If you close your account, related personal data will be marked for deletion and deleted or anonymized after the retention period necessary for settlements, legal obligations, or dispute defense.

5.4. Where processing is based on consent, it will cease upon withdrawal unless otherwise required by law.

5.5. Despite deletion requests, the Operator (Controller) may retain data to the extent necessary for legal obligations (accounting, tax, AML), legal claims, dispute resolution, or fraud prevention, within lawful limits.

6.1. Hubconnect respects confidentiality and does not share client information with third parties except as described in this Policy or as required by law.

6.2. Disclosure may occur in the following cases:

• To other clients or partners on the Platform, where you initiate interaction or accept tasks;
• To service providers (e.g., payment processors, hosting providers, customer support, KYC/AML tools) solely for the purposes stated in this Policy;
• To affiliated entities of Hubconnect, where necessary for service provision;
• To public authorities upon lawful request;
• To prevent fraud or protect Hubconnect’s legal rights;
• In corporate transactions (e.g., reorganization, transfer of contracts);
• For anonymized statistical or analytical purposes;
• Upon explicit consent of the data subject.

6.3. Data are stored within the Republic of Kazakhstan. However, the Operator (Controller) may perform cross-border transfers to recipients abroad (e.g., cloud storage, KYC/AML, or payment providers) subject to adequate protection measures and consent of the data subject.

As a data subject, you have the rights provided under the laws of the Republic of Kazakhstan, including the right to:

• Obtain information about processing (purposes, legal grounds, categories, recipients, retention periods, and safeguards);
• Access your personal data and receive confirmation of processing;
• Request correction or update of inaccurate or outdated data;
• Request blocking or deletion of unlawfully processed or unnecessary data;
• Withdraw consent to processing (including cross-border transfer);
• Object to processing on specific grounds, unless otherwise required by law;
• Receive information about disclosures to third parties (unless restricted by law);
• Lodge a complaint with the authorized state body or court if you believe your rights are violated.

Requests may be sent to hello@hubconnect.work.
The Operator (Controller) may request additional verification to ensure the request originates from you or your authorized representative.

8.1. Hubconnect may amend this Policy at any time to reflect legislative or operational changes. The effective date is indicated at the top of this document.

8.2. Updates take effect immediately upon publication on https://hubconnect.work/privacy-policy or notification by other means.

8.3. Continued use of the Platform after updates constitutes acceptance of the revised Policy.
If you do not agree with the updated version, please delete your account and stop using the Platform.