Asta Privacy Policy
Privacy Policy
This Policy describes how the Asta mobile application (the “App”) processes users’ personal data. The App is a corporate messenger intended solely for communication between employees within organizations.
The developer and rights holder of the App is PARSEC MChJ, a legal entity registered in the Republic of Uzbekistan (TIN 312 002 425, registration number 2768304, address: 18 Kushbegi Street, Yakkasaray District, Tashkent 100022; the “Company”).
This Policy has been prepared in accordance with Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” of July 2, 2019, and Apple’s requirements for apps on the App Store.
The App is not a public service. It works only together with a server that is deployed and managed by the user’s organization. Users cannot register in the App on their own.
2. Who Is Responsible for Your Data
The organization that issued your account is responsible for your personal data. The Company supplies the software and does not manage its customers’ servers.
For questions about the processing of your data, please contact your Organization’s administrator first.
3. What Data Is Processed
The scope of data is determined by the Organization. The App processes only what is necessary for the messenger to function.
The App does not collect location data in the background, does not upload your phone’s contacts, does not use advertising identifiers, and does not track you across other apps and websites.
To fix bugs, the App uses Apple crash reports (Xcode Organizer) and the Sentry service. A crash report may contain:
• stack trace;
• exception type and termination reason;
• App and iOS version;
• device model;
• thread information;
• memory addresses and loaded libraries.
The content of messages and files is not included in the reports. Apple reports are sent only if you have enabled sharing analytics with app developers in iOS settings.
4. Purposes and Legal Grounds for Processing
Data is processed solely for the operation of the corporate messenger:
• user authentication and access to the Organization’s server;
• delivery of messages, files and calls;
• sending push notifications about new messages and calls;
• ensuring security and investigating incidents;
• compliance with legal requirements.
The legal ground for processing is the data subject’s consent obtained by the Organization, the user’s contractual or employment relationship with the Organization, or another ground provided for by Law No. ZRU-547. The Organization is responsible for obtaining the necessary consents.
Data is not used for advertising or profiling and is not sold.
5. Data Storage and Transfer
All data is stored on a server selected and deployed by your Organization. The Company does not store users’ messages or account data on its own systems.
Localization. Article 27-1 of Law No. ZRU-547 requires personal data of citizens of the Republic of Uzbekistan to be stored on technical facilities located within its territory and registered in the State Register of Personal Data Databases. If the Organization processes data of Uzbek citizens, the Organization, as the server owner, is responsible for meeting this requirement. Organizations in other countries comply with the laws of their own jurisdiction.
Push notifications. To deliver notifications, the Organization’s server transmits the device token and the notification to the Apple Push Notification service (APNs). The notification only indicates that a new message or call has arrived, without its content.
Technical support. The Company receives data only if the Organization itself provides it when contacting support (for example, error logs). Such data is used solely to resolve the request and is deleted within 14 days after the request is closed.
Third parties. The Company does not transfer data to third parties, except as expressly required by the laws of the Republic of Uzbekistan.
Retention period. Retention periods for messages and files are set by the Organization. The local cache on the device is deleted when the App is uninstalled.
6. Account Creation and Deletion
Accounts are created and deleted only by the Organization’s administrator. The App does not allow self-registration, guest accounts, or account creation at first sign-in.
How to delete your account. Contact your Organization’s administrator. The administrator deletes the account and associated data on the Organization’s server in accordance with the Organization’s internal rules and applicable law. Some data may be retained if required by law or the Organization’s internal rules, for example messages in group chats.
How to delete data from your device. Uninstall the App from your device. The cache of messages and files on the device will be deleted.
If the administrator is unavailable, contact the Company at the address in Section 8. We will help you get in touch with the responsible persons at your Organization, but we cannot delete the account ourselves, as we do not have access to Organizations’ servers.
7. Your Rights
In accordance with Law No. ZRU-547, you have the right to:
• know what data about you is processed, by whom and for what purpose;
• access your data;
• request correction of inaccurate or outdated data;
• request destruction of data processed without a legal basis;
• withdraw consent to processing where processing is based on consent;
• appeal the actions of the owner or operator to the authorized government body or in court.
Please send requests to your Organization’s administrator, as only the Organization has access to your data. Users from other countries may have additional rights under the laws of their country and also exercise them through their Organization.
8. Other Provisions and Contacts
Minors. The App is intended for employees of organizations and is not intended for children. Accounts are not issued to persons under 16 years of age unless otherwise determined by the Organization in accordance with the law.
Company contacts:
• PARSEC MChJ, 18 Kushbegi Street, Yakkasaray District, Tashkent 100022, Republic of Uzbekistan
for the Asta Mobile Application
Effective date: 19 October 2026
1. General ProvisionsThis Policy describes how the Asta mobile application (the “App”) processes users’ personal data. The App is a corporate messenger intended solely for communication between employees within organizations.
The developer and rights holder of the App is PARSEC MChJ, a legal entity registered in the Republic of Uzbekistan (TIN 312 002 425, registration number 2768304, address: 18 Kushbegi Street, Yakkasaray District, Tashkent 100022; the “Company”).
This Policy has been prepared in accordance with Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” of July 2, 2019, and Apple’s requirements for apps on the App Store.
The App is not a public service. It works only together with a server that is deployed and managed by the user’s organization. Users cannot register in the App on their own.
2. Who Is Responsible for Your Data
The organization that issued your account is responsible for your personal data. The Company supplies the software and does not manage its customers’ servers.
Party | Role | What it does with the data |
Organization (your employer or other server owner) | Owner and operator of the personal data database within the meaning of Law No. ZRU-547 | Creates and deletes accounts, stores messages and files on its server, sets retention periods and access rules |
Organization Administrator | Authorized representative of the Organization | Manages accounts, access rights and server settings |
Company | Developer of the App | Has no access to messages or data on Organizations’ servers. Receives data only if the Organization itself provides it as part of technical support (see Section 5) |
User | Personal data subject | Uses the App with an account issued by the Organization |
For questions about the processing of your data, please contact your Organization’s administrator first.
3. What Data Is Processed
The scope of data is determined by the Organization. The App processes only what is necessary for the messenger to function.
Category | Examples | Where it is stored |
Account data | Full name, login, corporate email, job title, department, profile photo, phone number (if provided by the Organization) | Organization’s server |
Communication content | Messages, attachments, voice messages, call recordings and call logs (if the feature is enabled) | Organization’s server; cache on the device |
Technical data | Server address, in-app device identifier, push notification token, OS and App version, login logs | Organization’s server; device |
Data you grant access to | Camera, microphone, photos, files — only upon your action and with iOS permission | Not collected in the background; transmitted only when you send them |
The App does not collect location data in the background, does not upload your phone’s contacts, does not use advertising identifiers, and does not track you across other apps and websites.
To fix bugs, the App uses Apple crash reports (Xcode Organizer) and the Sentry service. A crash report may contain:
• stack trace;
• exception type and termination reason;
• App and iOS version;
• device model;
• thread information;
• memory addresses and loaded libraries.
The content of messages and files is not included in the reports. Apple reports are sent only if you have enabled sharing analytics with app developers in iOS settings.
4. Purposes and Legal Grounds for Processing
Data is processed solely for the operation of the corporate messenger:
• user authentication and access to the Organization’s server;
• delivery of messages, files and calls;
• sending push notifications about new messages and calls;
• ensuring security and investigating incidents;
• compliance with legal requirements.
The legal ground for processing is the data subject’s consent obtained by the Organization, the user’s contractual or employment relationship with the Organization, or another ground provided for by Law No. ZRU-547. The Organization is responsible for obtaining the necessary consents.
Data is not used for advertising or profiling and is not sold.
5. Data Storage and Transfer
All data is stored on a server selected and deployed by your Organization. The Company does not store users’ messages or account data on its own systems.
Localization. Article 27-1 of Law No. ZRU-547 requires personal data of citizens of the Republic of Uzbekistan to be stored on technical facilities located within its territory and registered in the State Register of Personal Data Databases. If the Organization processes data of Uzbek citizens, the Organization, as the server owner, is responsible for meeting this requirement. Organizations in other countries comply with the laws of their own jurisdiction.
Push notifications. To deliver notifications, the Organization’s server transmits the device token and the notification to the Apple Push Notification service (APNs). The notification only indicates that a new message or call has arrived, without its content.
Technical support. The Company receives data only if the Organization itself provides it when contacting support (for example, error logs). Such data is used solely to resolve the request and is deleted within 14 days after the request is closed.
Third parties. The Company does not transfer data to third parties, except as expressly required by the laws of the Republic of Uzbekistan.
Retention period. Retention periods for messages and files are set by the Organization. The local cache on the device is deleted when the App is uninstalled.
6. Account Creation and Deletion
Accounts are created and deleted only by the Organization’s administrator. The App does not allow self-registration, guest accounts, or account creation at first sign-in.
How to delete your account. Contact your Organization’s administrator. The administrator deletes the account and associated data on the Organization’s server in accordance with the Organization’s internal rules and applicable law. Some data may be retained if required by law or the Organization’s internal rules, for example messages in group chats.
How to delete data from your device. Uninstall the App from your device. The cache of messages and files on the device will be deleted.
If the administrator is unavailable, contact the Company at the address in Section 8. We will help you get in touch with the responsible persons at your Organization, but we cannot delete the account ourselves, as we do not have access to Organizations’ servers.
7. Your Rights
In accordance with Law No. ZRU-547, you have the right to:
• know what data about you is processed, by whom and for what purpose;
• access your data;
• request correction of inaccurate or outdated data;
• request destruction of data processed without a legal basis;
• withdraw consent to processing where processing is based on consent;
• appeal the actions of the owner or operator to the authorized government body or in court.
Please send requests to your Organization’s administrator, as only the Organization has access to your data. Users from other countries may have additional rights under the laws of their country and also exercise them through their Organization.
8. Other Provisions and Contacts
Minors. The App is intended for employees of organizations and is not intended for children. Accounts are not issued to persons under 16 years of age unless otherwise determined by the Organization in accordance with the law.
Company contacts:
• PARSEC MChJ, 18 Kushbegi Street, Yakkasaray District, Tashkent 100022, Republic of Uzbekistan