Skip to main content

Privacy Policy

What data we collect, why, with whom it is shared and how long it is retained.

Last updated: 12 October 2026

1. Data controller

The primary party responsible for Muxtar TECH's processing of personal data is Əliyev Yunis Vüqar oğlu, an individual entrepreneur (sole proprietor), VÖEN 8304583642; address: Republic of Azerbaijan, Jalilabad District, Mashadivalli village; legal requests: info@muxtar.pro.az; support and complaints: info@muxtar.pro.az; phone: +994 50 386 54 93.

2. Categories of data that may be collected

Depending on the service and features used, we may process first and last name, username, email, phone number, profile image, account status, recorded consents, order and payment status, support correspondence, details needed for domain registration, texts submitted to Muxtar Voice, generated audio files and their histories. For security and operation, we may also process IP/network addresses, device and browser details, session records, login times and error logs. If complete card details are stored by a separate secure payment processor, Muxtar TECH should receive only the associated transaction identifier and status.

A phone number may be required to register an account; under the described product rules, it is not verified by SMS or phone call and one number is linked to one account. A user who enters a wrong number may request correction through support.

3. Purposes of processing

Data is processed to create and secure accounts, verify identity, restore passwords, accept and fulfill orders, provide services, maintain credit balances, register and renew domains, investigate technical problems, provide customer support, maintain legally required records and meet legal obligations. Where separate voluntary consent exists, additional purposes may include marketing emails, sharing specified information with advertising partners, analytics and AI-model training. Processing necessary to provide the service is kept separate from optional marketing and AI consents.

5. Data recipients

Data is not sold or shared for unauthorized advertising purposes. Only data necessary to provide the service may be exchanged with hosting/infrastructure providers, email notification services, payment processors, domain registrars and competent authorities where required by law. Sharing information with advertising partners is allowed only after identifying the relevant partner, purpose, data category and legal basis and obtaining the necessary separate consent. There is no sharing based on blanket consent to unspecified “all partners” before the specific provider list and destination countries are established in the technical register.

6. Foreign servers and cross-border transfers

Servers and providers outside Azerbaijan may be used to deliver the service. Any such transfer must comply with Article 14 of the Azerbaijani Law on Personal Data, other applicable mandatory requirements and security measures. The destination country, recipient, data category and legal basis must be established before transfer. No transfer should occur unless the applicable legal conditions are met.

7. Retention periods

  • Muxtar Voice audio files, the text used for each voice generation and the corresponding history are intended for automatic deletion 90 days after creation. Notifications by email and in the account are planned 15 and 3 days before deletion. Users can download files during that period.
  • Ordinary technical and security logs are planned to be retained for 90 days, except when a longer period is legally required.
  • Support correspondence is retained for 12 months after the last request, or as long as necessary for a lawful dispute or retention obligation.
  • Active-account information is kept for the time necessary to provide the service and then deleted according to the account-deletion policy.
  • Financial, tax, contract and domain registrant records are subject to statutory and registrar/registry retention duties; this document does not promise an unsupported universal “90-day” period for them.
  • When an account is deleted, residual personal data in backups must be removed by rotating the backups out within 90 days at the latest; restoring a backup must not reintroduce previously deleted records into the active system.

8. Account deletion and data export

Users may request deletion through the Delete Account section or by writing to the official email address. Authority to make the request is verified. A 30-day waiting period begins after confirmation; signing back into the account within that period cancels the request. Subject to mandatory legal exceptions, profiles, texts, voice generations and personal files are deleted. If an active domain complicates account closure, the customer must be offered an alternative lawful route to independently manage or transfer it; statutory deletion rights must not be indefinitely blocked without valid grounds.

Users will be able to select their information by category and date range and download it directly as a ZIP archive. The account password must be re-entered before downloading. The archive includes only the user's authorized information that still exists; other users' data, passwords and system secrets are excluded. Completed ZIP archives should not be stored permanently on the server.

9. Cookies and analytics

Technically essential cookies and session data may be used to operate the service. Analytics (such as Google Analytics), advertising cookies and similar tracking technologies are enabled only after a valid legal basis and any legally required prior consent have been obtained. The Cookie Policy explains which categories are enabled and how consent is withdrawn. Users who decline optional tracking should retain access to core services insofar as technically necessary functionality permits.

10. User rights and requests

Users may learn what personal data is held about them, request correction or update, require destruction or suspension of processing where permitted by law, withdraw consent and file complaints. An internal target of seven business days is set for responding to requests; any shorter mandatory legal deadline prevails. Identity verification is performed only where necessary and proportionate. The right to apply to competent authorities and courts remains intact.

11. Data security and incidents

Personal data should be protected through access controls, encryption, protected backups and necessary technical and organizational measures. Suspicious logins trigger planned email alerts and session-security checks. If a security incident affects users, appropriate notices are sent by email and in the account, alongside any other mandatory statutory notification.

12. Changes and contact

Material changes are notified 14 days in advance where possible, subject to urgent legal requirements. The current effective date and version are displayed. Legal requests: info@muxtar.pro.az; support and data requests: info@muxtar.pro.az.

Current status: The account service is not connected to the site yet. The ZIP export of account data, the automatic deletion of Voice data, the 15- and 3-day notices and the account security notifications described in this policy will apply once the account service is connected. Cookie choices already work: your choice is recorded on the server. No analytics or advertising provider is connected.

Related pages: Cookie Policy · Account Deletion · Login Security · Terms of Use.

Back to home