How we process your data

The personal data operator is the legal entity SphereX, registered in the Republic of Kazakhstan. Full operator details will be published once the legal entity is registered.

Contact details you provide yourself: name, phone number, email, Telegram or WhatsApp handle.

Project data: messages in the chat with the AI consultant, task descriptions, attached files (mockups, screenshots, documents).

Technical data: IP address, browser user-agent, interface language, selected visual theme — used for analytics and troubleshooting.

Payment data: payer's IIN/BIN and details required by the payment system. We do NOT store card numbers — payments are processed through Kaspi Pay, Halyk epay, or Stripe.

Contract performance: to contact you, agree on the scope, issue invoices, and deliver the finished product.

Support: AI consultant and manager responses to your questions in the project cabinet.

Service quality: analysis of AI dialogues to improve scripts and identify funnel bottlenecks.

Legal compliance: accounting and tax reporting under the Tax Code of Kazakhstan.

Processing is carried out on the basis of the data subject's consent (by submitting an inquiry you agree to this policy), for the performance of the service agreement, and to comply with the legislation of Kazakhstan — the Law of Kazakhstan On Personal Data and Their Protection (No. 94-V dated May 21, 2013) and the Tax Code of Kazakhstan.

AI provider Anthropic — texts of dialogues with the AI consultant are sent to the Claude API to generate responses. Anthropic does not use this data to train models and does not share it with third parties (per the Anthropic Data Processing Addendum).

Hosting — infrastructure provider (Vercel or our own server in Kazakhstan) for hosting the website and database.

Payment systems — Kaspi Bank, Halyk Bank, Stripe for processing payments. Only the data required to complete the payment is transmitted.

Analytics — PostHog to understand how users interact with the site. Anonymized events (clicks, navigation) are transmitted, without personal identifiers.

We do NOT sell your data to third parties and do NOT share it with advertising networks for targeting.

Active project data — for the duration of the contract plus the warranty period.

Accounting data — 5 years after the end of the fiscal year, in accordance with the Tax Code of Kazakhstan.

Lead data for inquiries that did not convert — up to 12 months from the last point of contact, after which it is automatically deleted.

You may request earlier deletion of your data — see the "Your rights" section.

At any time you have the right to: request a copy of the data we hold about you, correct inaccurate data, withdraw your consent to processing, request deletion of your data (except data we are legally required to retain), and file a complaint with the competent authority of Kazakhstan.

To exercise any of these rights, write to legal@spherex.kz or to Telegram (contact below). We respond within 30 calendar days.

The site uses cookies for technical needs (selected theme, locale, session state) and for analytics (PostHog — anonymized events).

Third-party advertising cookies are not currently set. If we launch advertising pixels (TikTok, Meta, Google), we will update this policy and add a cookie banner with an opt-out option.

The connection to the site is secured with an HTTPS certificate. Access to the database is limited to SphereX employees on a least-privilege basis. API keys and secrets are stored securely, with access restricted to DevOps engineers.

We cannot guarantee 100% protection against breaches, but we apply reasonable measures aligned with industry best practices.

We may update this policy. Material changes will be published 14 days before they take effect, and active clients will be notified by email. The date of the last update is shown at the top of the page.

For questions about this policy: email legal@spherex.kz (will be activated after the legal entity is registered), Telegram @spherex_support.

If we do not respond within 30 days, you may contact the Committee on Information Security of the Ministry of Digital Development, Innovations and Aerospace Industry of Kazakhstan.