Contents
TB MARKET
TB Market

Privacy Policy

What personal data TB Market collects, why, who receives it, how long it is kept and how you can control it — as the service actually works.

Last updated: 30.10.2026 tozabog.uz, TB Fresh, the TB Market app and partner sections
Delete account

In short

1What this policy covers

This policy applies to: tozabog.uz (the TB Market marketplace), fresh.tozabog.uz (TB Fresh), the payment and TB Bank pages, the TB Market Android app (uz.tozabog.market), TB Market Telegram bots, and the seller, courier and pickup-point (PVZ) sections and their apps (TB Seller, TB Kuryer, TB PVZ). Partner data is described separately — see “Sellers, couriers and pickup-point staff”.

Data is processed under the Law of the Republic of Uzbekistan “On Personal Data” and other legislation.

2Operator and contact

The service operator is TB Market (tozabog.uz). Send privacy questions, requests about your data and complaints through Help and the support chat on the website or in the app.

3What data we process

Data appears only when you use the related feature:

Account

  • Name, phone number, e-mail, TB ID (7-digit account number), password — stored only as a hash.
  • Optional: username, profile photo, date of birth, gender, public name and city.
  • Your “Public profile” and 18+ settings — so they work the same on the website and in the app.
  • Documents you accepted (terms of use, offer, seller rules, this policy): the document and its version, date and time, IP address and browser — to confirm the agreement.

Sign-in and security

  • One-time codes by SMS or e-mail (stored as hashes, valid for 10 minutes).
  • Sign-in attempts: IP address and browser — to limit attempts and protect the account.
  • List of signed-in devices: device name, first and last IP address.
  • A remembered device for “Continue with this account?” (a cookie; the server keeps only its hash).
  • Face ID or fingerprint sign-in (if you turn it on): biometrics never leave your device — we keep only a public key or a token hash.

Address and location

  • Delivery address: recipient name, phone, region, district, address.
  • A map point — only when you tap “Current location” or pick a point on the map.
  • The selected city and pickup point (cookies). The city-detection button on the website does not send coordinates to the server — the nearest city is calculated in the browser itself.

Orders

  • Items, prices, discounts, promo codes and bonuses, delivery method and pickup point, status history, the pickup code, cancellation and return reasons.
  • A courier may upload a photo confirming delivery (stored privately).

Payments

  • Payment method and status, a copy of the payment request sent to the provider. Card payments go through the bank or payment provider connected by TB Market (e.g. Payme, CLICK, Uzum).
  • If you save a card: the number, expiry and CVV are sent only to the provider for tokenization and are not stored by us. We keep an encrypted token, the last 4 digits, the card type, expiry and the cardholder name.
  • TB Bank account: balance, transaction history, PIN (hash). Bonus point history.
  • Instalment applications: partner, term, amount, status, phone number and a copy of the request sent to the partner.
  • A card number typed in manually for a refund — encrypted; the employee who makes the transfer sees it; it is erased when the account is deleted.

Reviews and public profile

  • Rating, review text, photos and videos, product questions. A review is published with your name or as “Anonymous customer”.
  • The public profile in the app is visible to everyone (including people who are not signed in): name, username, photo, registration date, non-anonymous reviews, number of reviews and average rating, number of delivered purchases, number of “helpful” votes, achievements, public collections, followers and following (with names), profile view count. The “Top buyers” list in the app may show your name, photo, number of reviews and purchases.
  • The “Public profile” setting in the app is currently saved only on that device and does not hide the profile from others. You can post a review anonymously or delete the account.

Messages

  • Chats with sellers and support, attached photos and files, answers of the automatic assistant.

Activity

  • Cart, favourites, collections, comparison list.
  • Search history — the last 24 queries (you can delete it yourself).
  • Photo search: the image is analysed and not stored — only the file name, size and number of results are recorded.
  • Recently viewed products — only on your device.

Notifications

  • App push token, browser push subscription, notification settings (by category). In the app the “Social activity” category is on by default, the others you turn on yourself; security notices are always sent.
  • E-mails: order status, sign-in codes.
  • If you link the Telegram bot: Telegram ID, username, first and last name, your messages to the bot and its replies.

Technical data

  • IP address, browser and app version.
  • App error reports (the IP address is hashed).
  • An app device identifier (created at random on first launch) — for error reports and ad counting.
  • Banner ads inside TB Market (our own and those ordered by sellers): views and clicks are counted with a hashed identifier. If you are signed in, views and clicks are linked to your account, and buying that product or from that shop within 7 days counts towards the ad result. Reports show only totals.

4Why we use it

  • Providing the service (contract): account, sign-in, orders, delivery, pickup, payment, returns, bonuses, support.
  • Security: protecting accounts, limiting sign-in attempts, preventing fraud, logging staff actions.
  • Legal obligations: accounting, tax and fiscal receipts, lawful requests of authorities.
  • Social features: the public profile, reviews, follows and the “Top buyers” list — part of the service (see “Reviews and public profile” above).
  • Your consent: optional profile data, location, push notifications and promotional messages, the Telegram bot. You can withdraw consent at any time (settings or device permissions).
  • Improving the service: error reports; ad results — reports show only totals.
  • We do not make automated decisions with legal effects about customers. Approval or refusal of an instalment plan is decided by the partner under its own rules. For sellers the FBS rules apply automatically — see “Sellers, couriers and pickup-point staff”.

5Who receives data

Only the part needed to provide the service, and only in the relevant case:

WhoWhatWhen
SellerName, phone, delivery address or pickup point, order items, your messagesWhen you order their product or write to them
CourierName, phone, address and map point, order number, amount to pay on deliveryCourier delivery
Pickup-point (PVZ) staffName, phone, order and parcelsWhen you collect an order at a pickup point
Banks and payment providersAmount, order number; depending on the connection type — your name, phone and e-mail; card details (on the provider page, or via API when you save a card, with the cardholder name)Card payment, saving a card, refunds
Instalment partner (e.g. ZoodPay)Name, phone, e-mail, address; order items (name, SKU, category, quantity, price), amount, delivery fee and discountOnly if you choose instalments
Fiscal operator (tax system)Receipt data and buyer contact (name, phone, e-mail)When fiscal receipts are enabled
SMS provider (Eskiz)Phone number and code textWhen an SMS code is sent
Mail server (hosting)E-mail, name, message textWhen an e-mail is sent
Google FirebasePush token and notification textApp notifications
Browser push services (Apple, Google, Mozilla)Push subscription and notification textIf you enable browser notifications
TelegramIf you link the bot yourself — notifications about your orders and messages. If a seller or TB Market staff use Telegram notifications — a new order (your name and the items) and your message to them (with your name) are sent to their Telegram chatWhen you link the bot; when a seller or support work through Telegram
Yandex MapsWhen a map opens, your browser or the app contacts Yandex directly (IP, device data); in the app the address text or point shown on the map is also passed to YandexWhen a map or the pickup-point map opens
Google Maps or Yandex (courier)The courier may open your address or point in Google or Yandex maps to find the routeCourier delivery
Hosting and maintenanceData on the server and in backupsAlways
Authorised state bodiesData required by lawOnly in the cases and manner set by law

TB Market staff see data only in the sections their job needs (roles and permissions); their actions are logged.

6Where data is stored

The main database is stored on the TB Market server.

Google (Firebase, maps), Telegram, Yandex, browser push services and some payment partners may process data outside Uzbekistan — only when you use the related feature listed above.

7How long we keep it

  • Account data — while the account is active.
  • Records of accepted documents — while the account exists; deleted together with the account.
  • One-time codes (SMS and e-mail) — deleted after 2 days.
  • Sign-in attempt log — 2 days.
  • App error reports — 45 days.
  • Copies of e-mails — 120 days.
  • Search history — the last 24 queries.
  • OneID sign-in state — valid for 10 minutes; expired records are removed after a day.
  • Log of the conversation with the Telegram bot — no fixed period; deleted when the account is deleted.
  • Courier location — only the latest point during a shift; deleted when the shift closes.
  • Ad view markers — valid for 2 hours, old ones are removed by a server clean-up job. View and click statistics are kept for ad reports; when the account is deleted, their link to you is cut.
  • Orders, payments, fiscal receipts, returns and messages — for the period needed for accounting, tax and disputes, also after account deletion (see “Deleting your account”).
  • Clean-up runs automatically while the website works, so a record may be removed a little later than the stated period.

8Security

  • All connections use HTTPS.
  • Passwords, sign-in codes and the TB Bank PIN — hashes only; payment tokens, card numbers, the keys of the payment, SMS and OneID integrations and Telegram bot tokens — encrypted with AES-256-GCM. The pickup code is stored unencrypted so that pickup-point staff can check it.
  • Session cookies are readable only by the server (HttpOnly) and Secure over HTTPS; a customer session lasts 30 days; on the payment and TB Bank pages and in staff sections — 7 days (closed after 24 hours of inactivity).
  • Sign-in attempts and code requests are rate-limited.
  • Staff have roles and permissions and an action log.
  • No system offers absolute protection. In a security incident we will take the measures required by law.

9Sellers, couriers and pickup-point staff

Sellers

  • Store owner: name, phone, e-mail; store name, logo and description (public).
  • Requisites: legal form, name, INN or PINFL, OKED, VAT code, director, legal address, bank, MFO, account number, a payout card (the card number is encrypted).
  • Registration document — stored privately, seen only by reviewing staff.
  • Store staff, products, financial operations and payouts; registration reminder e-mails (unsubscribe through the link at the bottom of the e-mail).
  • If the FBS rules are on, they work automatically: when a deadline is missed, the store’s items in the order are cancelled automatically and a penalty may be written (with an appeal period); with a low fulfilment score the store’s products are hidden for a few days.

Couriers

  • Name, phone, shifts, deliveries, cash operations.
  • Location — only while the shift is online and “Share location” is on; only the latest point is kept, seen by the courier and logistics administrators, never shown to customers.
  • Delivery confirmation photos — stored privately.

Pickup-point staff

  • Name, phone, assigned points and role, shifts, cash-register operations, action log.

Sign-in with OneID

  • With OneID (egov.uz) we receive the name and user type; the PINFL is stored only as a hash and a mask.

10Cookies and on-device storage

We use only our own cookies; there are no advertising or analytics cookies.

NamePurposeLifetime
TOZABOGCUSTOMER (in sections TOZABOGSELLER, TOZABOGCOURIER, TOZABOGPICKUP, TOZABOGPAY, TOZABOGBANK, TOZABOGADMIN, etc.)Signed-in sessionCustomer — 30 days; payment, TB Bank and staff sections — 7 days (renewed on each visit)
TBID_DEVICE“Continue with this account?” — remembered device180 days
tb_customer_deviceBrowser identifier for the list of signed-in devices1 year
TB_ONEID_BINDSign-in with OneID in progress10 minutes
tozabog_langLanguage1 year
tb_location, tb_pickup_point_id, tbf_placeSelected city, pickup point, TB Fresh delivery place (address and point)1 year
tb_compareComparison list30 days
tb_uiApp or website view in staff sections1 year
tb_push, tb_push_devLinking a push subscription to this device1 year

On the device (localStorage / app storage) we keep: theme (light / dark), language, cached currencies and rates, cached catalogue pages, recently viewed products and a copy of the search history, the selected city, pickup point and phone-code country, the TB Fresh delivery place (address and point), the app device identifier, the app sign-in token, whether Face ID is on, the “Public profile” and 18+ settings, notification settings, offline data about an order ready at a pickup point (Android), a queue of unsent error reports.

When a Yandex map opens, Yandex may set its own cookies — this is governed by its policy.

11Mobile app permissions

PermissionWhen it is used
LocationOnly when you tap “Current location” (courier address, TB Fresh delivery place). The app does not collect location in the background.
Camera and galleryWhen you choose: profile photo, review photo or video, a file in a chat, photo search, barcode scanning.
NotificationsFor the categories turned on in the settings (order status, messages, promotions, etc.); “Social activity” is on by default, security notices always. In the background the app checks for new notifications about every 15 minutes.
Face ID / fingerprintIf you turn on biometric sign-in — the check happens on the device itself.

You can turn permissions off in the phone settings at any time; the main shopping features work without them.

12Your rights and controls

  • View and change your profile data — Profile and TB ID on the website and in the app.
  • Delete your search history, your reviews and favourites.
  • Turn off notification categories (app settings); unsubscribe from reminder e-mails (link at the bottom of the e-mail).
  • Withdraw location, camera and notification permissions in the device settings.
  • See the devices signed in to your account and sign them out in the app.
  • Ask which of your data is processed, request a correction or a stop of processing — through Help or the operator contacts.
  • Request account deletion — a separate page or Profile in the app.
  • Complain to the authorised state body for personal data.

13Deleting your account

  • Send the request on the account deletion page or in the app (Profile › Delete account, with your password). A request from the app signs the app out on all devices and stops app push notifications; browser push and Telegram notices stop when the account is deleted. After the account is deleted, an open website session is closed within 5 minutes at most.
  • For a request sent without signing in, an employee checks the owner by contacting them by phone or e-mail.
  • An employee completes the request within 30 days. An active order, an open return, money not yet refunded to you or money on the TB Bank balance is settled first.
  • Deleted or anonymised: name, phone, e-mail, username, profile photo and details, addresses (except the region name), map points and address copies in deliveries, cart, favourites, collections, follows, search history, saved cards and the refund card number, push devices and subscriptions, sign-in tokens and devices, Face ID keys, the Telegram link and the bot conversation, notifications, the TB Bank PIN, codes and copies of e-mails, the link to ad statistics. Your reviews stay under the name “Anonymous customer”.
  • Kept: orders, payments, returns and messages — for accounting, tax and disputes; they are no longer linked to your name, phone and e-mail. Copies of fiscal receipts, payment requests and instalment applications, and the text of messages are not changed — they may still contain the name and contacts of that time. Bonus points can no longer be used.
  • Seller, courier or pickup-point sections are handled separately — write to Help.
Delete accountHelp

14Children

TB Market is not a service for children; age is not checked at registration. If you know that a child’s data was given to us, write to Help.

15Changes to this policy

When the service or the law changes, the policy is updated. The current version is always published on this page with its “Last updated” date.