PRIVACY POLICY

Personal data operator: Individual Entrepreneur “SAYA”, IIN 030508601074. Address: Republic of Kazakhstan, Kyzylorda Region, Kyzylorda, Tasboget settlement, Karataban St. 8a. Personal-data contact: business@charts.kz Website and Platform: https://charts.kz

Depending on the Charts AI functions used, we may process: • email, display name, interface language and account settings; • phone number and other contact details you provide voluntarily; • AI conversation text, uploaded images, analysis results and trade journal; • technical information: IP address, user-agent, action date and time, error and security logs; • records of accepting legal documents and selected consent settings; • payment and refund metadata listed in section 3. Do not send information in the AI chat that is unnecessary for receiving the service.

Charts AI does not request on the charts.kz domain and does not store a payment card's full number (PAN), expiry date, CVV/CVC, one-time bank codes or confirmation passwords. These details are entered directly on a secure payment page. To fulfil the order and record the transaction, Charts AI may receive and retain: • selected access period, amount and currency; • transaction date, time, status and identifier; • masked card details, such as the last four digits, if available from the transaction result; • electronic receipt and refund, cancellation and disputed-transaction records; • fact, date and settings of separate consent to recurring payments; • a technical payment token or reference that cannot be used to recover card details. More about the payment procedure: https://charts.kz/legal/payment

Data is processed to: • register and authenticate users and provide Charts AI functions; • perform the Public Offer, process payment, activate access and issue refunds; • confirm transactions, prevent fraud and resolve disputes; • communicate about the service, security and required notices; • comply with the laws of the Republic of Kazakhstan; • protect the legitimate interests of the Operator and users. The legal bases are contract performance, user consent where required, legal obligations, and legitimate interests exercised with respect for user rights.

The Operator limits processing to what is required to operate selected functions, perform the contract, process payments, maintain security and comply with the law. Access to personal data is provided only on a need-to-know basis and where an appropriate legal ground exists. If a separate operation requires user consent, it is requested before such processing begins. Charts AI does not sell personal data, use payment history for advertising targeting or disclose private AI-conversation content for advertising. Disclosure to public authorities is allowed only in the cases and scope required by the laws of the Republic of Kazakhstan.

• Active-account data is retained while the account exists and the data is needed to provide the service. • Following a justified deletion request, data is deleted or anonymized within 30 working days, except records that must be retained by law or are needed for an active dispute. • Payment, refund, accounting and audit records, as well as evidence of acceptance and recurring-payment consent, are retained for the periods required by the laws of the Republic of Kazakhstan. • Backups are deleted according to the backup-retention cycle and are not used for ordinary processing.

You may: • learn which personal data about you is processed and obtain a copy; • request correction of inaccurate data; • withdraw consent where processing relies on consent; • request deletion or restriction where provided by law; • object to unlawful processing and contact the competent authority; • cancel consent to future recurring payments without deleting the history of completed transactions. To exercise a right, email business@charts.kz from the address linked to the account. A response is provided within the time limits applicable under the laws of the Republic of Kazakhstan.

Charts AI applies proportionate technical and organizational measures, including: • encryption in transit over HTTPS/TLS; • protection of stored data and access separation for user data; • restricted administrative access and stronger authentication; • backups, error logs and security-event monitoring. Card details are entered on a secure payment page and are not stored by Charts AI. Where required, the transaction is additionally confirmed using a method provided by the bank. No transmission method guarantees absolute security. Users and competent authorities are notified of material incidents in the manner and within the time required by applicable law.

• Enter card details only on a secure payment page and verify HTTPS. • Never send the full card number, CVV/CVC, a one-time code or banking password in the AI chat, by email, through a messenger or to Charts AI staff. • Do not approve an unknown transaction in a banking application or through another confirmation method. • Retain the receipt, transaction identifier, bank statement and legal documents effective on the payment date until the service ends. • If you suspect an unauthorized transaction, contact your bank immediately and notify business@charts.kz.

The current version is published at https://charts.kz/legal/privacy. Material changes apply from the date stated in the new version, with notice to the user where required by law or the nature of the change. Public Offer: https://charts.kz/legal/oferta Payment procedure and security: https://charts.kz/legal/payment Refund Policy: https://charts.kz/legal/refund