Personal data processing policy

1. Who processes your data

The operator is Farabi Tech Hub LLP, Republic of Kazakhstan, Almaty, 71/20 al-Farabi Ave. (the Hub). Any question about your data goes to farabitechhub@gmail.com — we answer by email.

This revision is in force from 22 August 2026 and covers all website forms, the personal account, executor profiles and the academy.

2. What data we collect

Website forms: your name, phone or email, company or project name, the text of your message.

Google sign-in: the name and email address from your account, so that your applications and course progress show up in your account. Your Google password is never passed to us.

Executor profile: display name, faculty and year, skills, how many hours a week you are ready to work, a portfolio link, a few lines about yourself. The phone and email in your profile are never shown publicly — only the hub team sees them.

Responses to crews and market listings: your message, the link to the listing, a contact for the reply.

Lab requests and lab cards: the unit, its services and equipment, the name and contact of the responsible person (internal, never shown publicly).

Organization: company name and BIN, contact person — when the request comes from a legal entity.

Learning: which lessons you completed, the results of assessments, the certificates issued to you.

Service records: the date and time a form was submitted, the consent version, the page language. They exist to prove which revision of the documents you agreed to.

3. Why we need it

To answer your message and review your application. To assemble a team for a specific order and offer you the work. To check that a laboratory and its services are real. To run the courses and issue certificates. To meet the Hub's legal obligations — contracts, acceptance acts, accounting.

We do not send marketing mailouts unless you subscribe to them separately. We do not sell your data and never hand it to ad networks — not for any money.

4. Who we share it with — and what we never do

The client of a project — only with your consent to that specific project, and only the working minimum: name, level, skills, experience. One consent does not open you up to every client at once; declining costs you nothing and does not affect other projects.

A laboratory or contractor delivering the order alongside you — the same data, in the same volume.

Infrastructure providers (hosting in Kazakhstan, email service, the language model provider behind the chat) — only as far as the service cannot run without it.

State authorities — only where the law requires it.

What is public is exactly what you can see yourself: the executor card (name, level, skills, your own description) and the certificate verification page. Contact details never become public.

5. Data of executors and program participants

This section is for anyone who fills in an executor profile, responds to a crew, or studies at the academy.

What we collect: your profile (name, faculty, year, skills, hours, portfolio, about you), your history of orders and delivered work, your rating and level, course progress and certificates.

Why: so a curator can match you to a task and a client can understand who they are paying. Your level and the number of delivered orders are calculated by the system, not set by hand.

Who we share it with: the client — only after you agree to take part in that specific project. Your public executor card (name, level, skills, your own description) is visible anyway — you write it yourself and can take it down at any time. Contacts are never passed to the client: the curator makes the introduction.

Certificates and public verification: every certificate has its own /verify address showing the holder's name, the course and the date, so an employer can confirm the document is genuine. The page is closed to search engines and a certificate cannot be found without its code. If you would rather not have public verification, write to us and we will revoke the certificate: the code will stop opening. A certificate confirms participation in a Hub program and is not a state-recognised education document.

How long we keep it: your profile — for as long as you need it; if you have not signed in for a year, the profile is hidden from the catalogue. Records of paid orders are kept together with the contracts (see section 6).

How to delete it: an email to farabitechhub@gmail.com from the address you signed in with. We delete the profile and your responses and withdraw the consent.

6. Where and how long we keep it

The website database and its backups are located in the Republic of Kazakhstan — this is required by Kazakhstan personal data legislation.

A request and the correspondence about it — three years from your last message, unless you ask us to delete it sooner.

Executor profile and learning records — for as long as you use them.

Contracts, acceptance acts and payment documents — for the period set by accounting and tax legislation (at least five years). These we cannot delete on request.

7. How to delete your data and withdraw consent

Write to farabitechhub@gmail.com from the address you used. You do not have to explain why.

We withdraw the consent immediately, delete your profile, applications and responses within three business days, and confirm it by email. What remains is the accounting paperwork for work already paid for, and anonymised statistics in which you cannot be identified.

Withdrawing consent stops us from matching you to new projects. It does not affect a contract already signed or a payment for work already done.

8. AI assistant on the website

The website features a chat with an AI assistant. The text of free-form chat messages is processed by a third-party language model provider, including outside the Republic of Kazakhstan, so we ask you not to include personal data (phone, email, ID number) in the chat — such fragments are automatically hidden and not stored. Contact details are collected only through website forms and stored in a database within Kazakhstan; chat conversations are not linked to your identity.

9. Your rights and changes to this policy

You have the right to learn what data of yours we hold and who it was shared with, to correct inaccuracies, to withdraw consent and to demand deletion. All of it by email to farabitechhub@gmail.com. If our answer does not satisfy you, you can complain to the authorised personal data protection body of the Republic of Kazakhstan.

We update this policy when what we do with data changes. Every revision has its own number, and each form submission records which revision was in force at that moment. If a change is material, we ask for consent again rather than applying the new text retroactively.