DIGITAL
TAX
TECHNOLOGIES
Download PDF

Privacy Policy

regarding the processing of personal data of users of the "Salyq Buro" mobile application

This Privacy Policy has been developed in accordance with the legislation of the Republic of Kazakhstan and the internal documents of "Digital Tax Technologies" LLP (hereinafter — DTT platform, DTT) and governs the procedure for processing and using personal and other information that the DTT platform receives about the User while the latter uses the Services of the DTT platform.

1. Definition of Terms

1.1. The following terms are used in this Privacy Policy:

1.1.1. Platform Services – the Electronic Document Management Service (hereinafter – the EDM Service);

1.1.2. "Salyq Buro" mobile application — a mobile application for working with the EDM Service, available in the AppStore or GooglePlay digital application stores;

1.1.3. Personal data — any information relating to a directly or indirectly identified or identifiable natural person or individual entrepreneur (subject of personal data);

1.1.4. Protection of personal data – a set of technical, organizational, and organizational-technical measures aimed at protecting information relating to a specific or identifiable subject of personal data on the basis of such information;

1.1.5. Processing of personal data – any action (operation) or set of actions (operations) performed on personal data, whether or not using automation tools;

1.1.6. Confidentiality of personal data – a requirement mandatory for the DTT platform or any other person who has gained access to personal data not to allow its dissemination without the consent of the subject of personal data or in the absence of other legal grounds;

1.1.7. Depersonalization of personal data – actions as a result of which it becomes impossible, without the use of additional information, to determine that personal data belongs to a specific subject of personal data;

1.1.8. User – a person who has access to the Services of the DTT platform via the Internet and who uses the Services of the DTT platform;

1.1.9. User Information – personal information that the User independently provides when using the Services of the DTT platform.

2. General Provisions

2.1. Gaining access to the use of the Services of the DTT platform means the User's unconditional consent to the provisions of this Privacy Policy.

2.2. This Privacy Policy has been developed to define the list of data that may be requested from Users of the Services of the DTT platform, as well as the methods by which the DTT platform and other persons process such data.

2.3. This Privacy Policy also specifies the purposes for which Users' personal information may be requested or disclosed.

3. Information Received and Used from Users, and the Purposes of its Use

3.1. Users' information is collected by the DTT platform for the purpose of increasing user security when using the Services of the DTT platform.

3.2. DTT may use the User's personal data for the following purposes:

4. Conditions for Processing Information

4.1. When using Users' Information, the DTT platform is guided by this Privacy Policy, as well as by the requirements of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection."

4.2. Processing of the User's personal data is carried out without time limitation, by any lawful means.

5. Disclosure of Users' Information to Third Parties

5.1. DTT has the right to exchange Users' Information with government authorities, partners, and other companies affiliated with DTT, with the exception of information constituting a trade secret.

5.2. DTT does not provide Users' Information to companies and individuals not affiliated with DTT, except when the User has given their consent to this.

6. Security Measures Used to Preserve Confidentiality of Information

6.1. DTT takes all possible measures to ensure the security and protection of Users' Information.

6.2. In particular, DTT continuously improves methods of collecting, storing, and processing data.

6.3. DTT also restricts employees' and contractors' access to Users' Information, imposing strict contractual confidentiality obligations.

7. Liability

7.1. DTT is liable for losses incurred by the User in connection with the unlawful use of personal data, except in cases where:

8. Dispute Resolution

8.1. Prior to going to court, it is mandatory to submit a claim (a written proposal for voluntary settlement of the dispute).

8.2. The recipient of the claim shall notify the claimant in writing of the results of its review within 30 calendar days.

8.3. If no agreement is reached, the dispute shall be referred to a court in accordance with the legislation of the Republic of Kazakhstan.

9. Data Sources

We use the official open APIs of eGov Mobile (Mobile ID) and the IS ESF exclusively to provide access to electronic government services on the User's behalf. The application does not store digital signatures, does not have access to private data without the User's involvement, and is not affiliated with government authorities. All API calls are made in encrypted form, in accordance with security requirements.

10. Changes to the Privacy Policy

10.1. DTT has the right to make changes to this Privacy Policy without the User's consent.

10.2. The new Privacy Policy comes into effect from the moment it is posted on DTT's corporate website.

10.3. In case of disagreement with the changes, the User must stop using the Services of the DTT platform.

10.4. The current Privacy Policy is posted at: KK, RU, EN

BY USING THE MOBILE APPLICATION, I CONFIRM THAT I HAVE READ, AGREE TO, AND ACCEPT THE TERMS OF THIS PRIVACY POLICY.

Document version: 1.1 | Last updated: 9/9/2026, 8:50:09 AM