EDVENTO PRIVACY AND PERSONAL DATA PROCESSING POLICY - Edvento
Edvento

EDVENTO PRIVACY AND PERSONAL DATA PROCESSING POLICY

Updated

EDVENTO PRIVACY AND PERSONAL DATA PROCESSING POLICY

Effective as of August 11, 2026

This Privacy and Personal Data Processing Policy (the “Policy”) sets out the rules and procedures for the collection, processing, use, storage, transfer, and protection of personal data of users of the Edvento platform available at https://edvento.uz/, including its related services, user accounts, testing pages, and other software components.

By using Edvento, registering an account, creating or taking a test, providing personal data, or otherwise expressing consent to this Policy through the means provided by the platform, the user confirms that they have read and understood this Policy.

1. General Provisions

1.1. Operator

Edvento is an online software platform designed for conducting assessments, determining knowledge levels, managing test results, and facilitating interaction between educational institutions, their employees, and individuals taking tests.

The owner and operator of the platform is:

Edvento, operating under the Edvento brand, hereinafter referred to as “Edvento”, the “Operator”, “we”, “us”, or “our”.

Platform: https://edvento.uz/
Place of business: Tashkent, Republic of Uzbekistan
E-mail: info@edvento.uz

1.2.

This Policy applies to:

  • visitors to the Edvento website;

  • registered individual users;

  • owners and representatives of educational centers, schools, and other organizations;

  • administrators, managers, teachers, and other employees of organizations using Edvento;

  • individuals taking tests through Edvento;

  • users independently purchasing and taking tests;

  • parents and legal representatives of minor users;

  • persons contacting Edvento customer or technical support.

1.3.

Personal data is processed in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” dated July 2, 2019, as subsequently amended and supplemented.

1.4.

Where certain Edvento functions are provided under an agreement, public offer, or other contractual arrangement, this Policy shall apply together with the relevant document.

2. Definitions

For the purposes of this Policy:

Personal Data means any information relating to an identified or identifiable individual.

User means any individual using Edvento.

Educational Center means a legal entity, individual entrepreneur, educational institution, or other organization or person using Edvento to assess its students, customers, applicants, or other individuals.

Test Taker means an individual taking a test through Edvento.

Account means a user’s personal account within the Edvento platform.

Processing of Personal Data means any operation or set of operations performed on personal data, including collection, recording, organization, storage, modification, use, provision, transfer, anonymization, restriction, blocking, and deletion.

3. Personal Data We Process

Depending on the Edvento functionality used, we may process the following categories of personal data.

3.1. Registered User Data

When an Account is created, we may process:

  • first name;

  • last name;

  • telephone number;

  • e-mail address;

  • selected interface language;

  • organization or Educational Center;

  • branch affiliation;

  • user position or role;

  • access permissions;

  • Account identifier;

  • registration date;

  • dates and times of login;

  • other information voluntarily provided by the User.

User passwords are stored and processed using appropriate technical security measures and are not intended to be stored in plain text.

3.2. Educational Organization Data

With respect to owners, representatives, and employees of Educational Centers, Edvento may process:

  • organization name;

  • information about the owner or authorized representative;

  • contact details;

  • information about branches;

  • information about employees;

  • roles and permissions assigned to employees;

  • platform usage history;

  • purchased test packages;

  • balance transactions;

  • payment and settlement information to the extent required for accounting and contractual purposes.

3.3. Test Taker Data

When a test is created or taken through Edvento, the following data may be processed:

  • first name;

  • last name, where provided;

  • telephone number, where required for a particular type of testing;

  • Educational Center and/or branch;

  • selected subject;

  • testing language;

  • answers provided to test questions;

  • correct and incorrect answers;

  • score obtained;

  • percentage of correct answers;

  • knowledge level determined by the system;

  • results for individual levels, sections, or categories;

  • recommended learning level or group;

  • duration of the test;

  • date and time the test was started and completed;

  • test status;

  • history of attempts;

  • technical information associated with taking the test.

3.4. Independent Testing Data

When a User independently purchases and takes a test, Edvento may process:

  • first name;

  • last name, where provided;

  • telephone number;

  • selected subject;

  • testing language;

  • payment information;

  • test results;

  • other information necessary to provide the service.

3.5. Payment Information

When Users pay for Edvento services, the following information may be processed:

  • payment amount;

  • date and time of payment;

  • payment status;

  • transaction or payment identifier;

  • selected payment method;

  • information required for accounting and financial reporting.

Payments may be processed by banks, payment organizations, payment service providers, or other payment partners.

Where payment card details are entered directly on a secure page operated by a payment provider, full payment card details are processed by that provider in accordance with its own terms and privacy policy.

3.6. Customer Support Data

When a User contacts Edvento support, we may process:

  • name;

  • telephone number;

  • e-mail address;

  • Telegram or other contact details;

  • content of the request;

  • attached files;

  • correspondence history;

  • information necessary to identify the User and resolve the issue.

3.7. Technical Data

When Edvento is used, certain technical data may be collected automatically, including:

  • IP address;

  • browser type and version;

  • operating system;

  • device type;

  • browser or device language;

  • date and time of access;

  • pages visited;

  • referral source;

  • session identifiers;

  • cookies;

  • technical event logs;

  • error information;

  • information about User actions within the platform;

  • other technical information necessary to ensure the proper and secure operation of Edvento.

4. Purposes of Personal Data Processing

Edvento processes personal data for the following purposes:

  1. registering and maintaining User Accounts;

  2. identifying and authenticating Users;

  3. providing access to platform functionality;

  4. creating, configuring, and conducting tests;

  5. checking and automatically evaluating test results;

  6. determining a User’s knowledge level;

  7. generating recommendations regarding an appropriate learning level;

  8. generating test result pages;

  9. providing results to the Test Taker, Educational Center, or authorized employee;

  10. maintaining statistics for Educational Centers and their branches;

  11. managing employees, branches, roles, and access permissions;

  12. keeping records of purchased and used tests;

  13. processing and recording payments;

  14. performing contracts and public offer terms;

  15. providing customer and technical support;

  16. sending service-related communications;

  17. ensuring the security of Accounts and the platform;

  18. detecting and preventing fraud, abuse, and unauthorized access;

  19. diagnosing technical errors and improving platform stability;

  20. analyzing the use of Edvento and improving the platform;

  21. generating anonymized statistics and analytics;

  22. complying with the requirements of the legislation of the Republic of Uzbekistan;

  23. protecting the legitimate rights and interests of Edvento, its Users, and third parties.

Personal data shall not be used for purposes incompatible with those for which it was originally collected unless an appropriate lawful basis exists.

5. Legal Grounds for Processing

Edvento may process personal data on the following legal grounds:

  • consent of the personal data subject;

  • necessity to perform a contract with the User;

  • necessity to take steps at the User’s request before entering into a contract;

  • compliance with legal obligations;

  • exercise of Edvento’s rights and legitimate interests, provided that the rights and interests of personal data subjects are respected;

  • other grounds provided by the legislation of the Republic of Uzbekistan.

Consent may be provided by:

  • checking the appropriate checkbox on the website;

  • registering an Account;

  • submitting an electronic form;

  • providing electronic consent;

  • performing another action that allows Edvento to verify that consent has been provided;

  • providing a written or electronic document where such form is required by applicable law.

6. Educational Centers and Their Students’ Data

6.1.

An Educational Center independently determines which persons it refers for testing through Edvento and which personal data it provides to the platform within the available functionality.

6.2.

Before transferring a Test Taker’s personal data to Edvento, the Educational Center must have a lawful basis for collecting, using, and transferring such data.

6.3.

The Educational Center must inform Test Takers that testing is being conducted using Edvento and must obtain any necessary consent where required by applicable law.

6.4.

The Educational Center must not upload excessive personal data that is not required to conduct testing or provide other Edvento functionality.

6.5.

Employees of the Educational Center may access personal data in accordance with their assigned roles and access permissions.

The Educational Center is responsible for:

  • correctly assigning roles and permissions to employees;

  • promptly terminating access for dismissed or unauthorized employees;

  • maintaining the confidentiality and security of its Accounts and passwords;

  • ensuring lawful use of test results obtained through Edvento.

7. Personal Data of Minors

Edvento may be used by Educational Centers, schools, and other educational organizations to conduct assessments involving minors.

Personal data of minors shall be processed in accordance with the requirements of the legislation of the Republic of Uzbekistan.

Where applicable law requires consent for processing a minor’s personal data, such consent must be provided by the minor’s parent, guardian, custodian, or other legal representative in the prescribed form.

Where a minor is referred for testing by an Educational Center, the relevant Educational Center must obtain the required consent of the legal representative before transferring the minor’s personal data to Edvento.

By transferring a minor’s personal data to Edvento, the representative of the Educational Center confirms that all necessary lawful grounds and consents have been obtained.

Where a minor uses Edvento’s independent testing functionality, Edvento may request confirmation of consent from the minor’s legal representative or restrict the provision of the service until such consent has been obtained.

Parents or other legal representatives may contact Edvento regarding the processing of a minor’s personal data at:

info@edvento.uz

8. Automated Assessment of Test Results

One of Edvento’s primary functions is automated processing and assessment of answers provided by Test Takers.

Based on the answers submitted, Edvento algorithms may automatically:

  • determine the number of correct answers;

  • calculate the final percentage score;

  • determine the level achieved;

  • analyze results across different levels and sections;

  • recommend an appropriate learning level or group.

Such recommendations are generated as part of an educational assessment and are provided for informational purposes.

Edvento does not make legally significant decisions on behalf of an Educational Center regarding admission, expulsion, employment, or other matters producing legal consequences for the Test Taker.

The final decision regarding how a test result is used is made by the User, Educational Center, or another person to whom the User has lawfully provided the result.

Where there are reasonable grounds to question the accuracy of a result, the User may contact the Educational Center or Edvento.

9. Test Result Pages and Links

9.1.

Edvento may generate a separate page displaying a Test Taker’s results.

Depending on the functionality available, such a page may display:

  • first name and/or last name of the Test Taker;

  • subject;

  • result;

  • percentage score;

  • determined level;

  • indicators for individual levels or sections;

  • recommendations.

9.2.

Certain test result links may be accessible without additional authentication.

This functionality enables the Test Taker or Educational Center to share a result with a teacher, administrator, parent, or other selected recipient.

9.3.

Any person who obtains a result link may potentially access the information displayed on the result page.

Users and Educational Centers should therefore treat such links as confidential information and share them only with persons whom they intend to grant access to the relevant test result.

9.4.

Users should not publish personal result links publicly if they do not want the information contained on the result page to become accessible to third parties.

9.5.

Where permitted by platform functionality, access to a result may remain available without a predefined expiration date until the result is deleted, access is revoked, the relevant Account is deleted, or another basis for terminating processing arises.

9.6.

At the request of a personal data subject or their legal representative, Edvento may restrict access to a result where there is no longer a lawful basis for continuing to make it available.

10. Cookies and Analytics Technologies

Edvento uses cookies and similar technologies.

Cookies may be used for:

  • authentication;

  • maintaining User sessions;

  • ensuring security;

  • storing User preferences;

  • language selection;

  • diagnosing technical errors;

  • collecting platform usage statistics;

  • analyzing traffic and improving Edvento.

For statistical and analytical purposes, Edvento may use third-party analytics services, including Yandex Metrica.

Such services may receive certain technical information, including:

  • IP addresses;

  • cookie identifiers;

  • device information;

  • browser information;

  • information about actions performed on pages.

Users may restrict or disable cookies through their browser settings.

If essential cookies are disabled, certain Edvento functions may not operate correctly.

Where applicable law requires prior consent for analytics or other non-essential cookies, Edvento will request such consent using an appropriate mechanism.

11. Disclosure of Personal Data to Third Parties

Edvento does not arbitrarily sell or disclose personal data to third parties.

Personal data may be transferred or access may be provided, to the extent necessary for operation of the platform, to the following categories of recipients:

  • Educational Centers that initiated testing;

  • authorized employees of the relevant Educational Center;

  • hosting and server infrastructure providers;

  • cloud and technical service providers;

  • banks and payment organizations;

  • payment service providers;

  • e-mail, SMS, and other communication service providers;

  • analytics service providers;

  • contractors involved in supporting and developing Edvento;

  • professional advisers where an appropriate lawful basis and confidentiality obligations exist;

  • government authorities where disclosure is required by applicable law.

Edvento seeks to provide third parties only with the amount of information reasonably necessary for them to perform the relevant function.

Any parties engaged in processing personal data must comply with applicable confidentiality and data protection requirements.

12. Cross-Border Processing of Personal Data

When Edvento uses certain technology, cloud, analytics, communication, or other service providers, some personal data may be transferred to or processed outside the Republic of Uzbekistan.

Such processing is carried out only where a lawful basis exists and subject to the requirements of the legislation of the Republic of Uzbekistan concerning personal data.

Edvento takes into account any specific statutory requirements applicable to categories of personal data for which storage within the territory of the Republic of Uzbekistan is mandatory.

When selecting service providers, Edvento may consider:

  • information security standards applied by the provider;

  • contractual data protection obligations;

  • location of the provider’s infrastructure;

  • applicable mechanisms for protecting personal data.

13. Retention of Personal Data

Personal data is retained only for as long as necessary to achieve the purposes for which it was processed, fulfill contractual obligations, comply with applicable law, or protect legitimate interests.

In particular:

  • Account data may be retained for as long as the Account remains active;

  • test data may be retained for as long as reasonably necessary for the User or Educational Center to access testing history and results;

  • payment and accounting information may be retained for the periods required by applicable law;

  • technical logs may be retained for security, diagnostics, and incident investigation purposes;

  • customer support communications may be retained for as long as necessary to resolve the relevant issue and protect the legitimate interests of the parties.

Once the relevant purposes have been achieved, personal data will be deleted, destroyed, or anonymized unless further retention is required by law or another lawful basis exists.

Backup copies may remain stored for a limited technical period until they are overwritten or deleted as part of regular backup procedures.

14. Anonymized and Aggregated Statistics

Edvento may generate anonymized or aggregated statistical information, including:

  • number of tests conducted;

  • average test results;

  • distribution of Users by knowledge level;

  • statistics by subject;

  • statistics by Educational Center or branch;

  • technical platform usage indicators.

Where such information has been properly anonymized so that a specific individual can no longer be identified, it may be used for:

  • analytics;

  • platform development;

  • research;

  • statistical reporting;

  • improvement of Edvento services.

15. Protection of Personal Data

Edvento implements reasonable organizational and technical measures designed to protect personal data against:

  • unauthorized access;

  • unlawful use;

  • alteration;

  • disclosure;

  • copying;

  • destruction;

  • loss;

  • unauthorized distribution;

  • other unlawful processing.

Depending on the nature of the data, such measures may include:

  • access controls;

  • role-based access permissions;

  • User authentication;

  • encrypted and secure network connections;

  • administrative access controls;

  • event and activity logging;

  • backups;

  • software and security updates;

  • technical monitoring;

  • limiting employee access to data according to their duties;

  • other appropriate information security measures.

However, no method of electronic transmission or data storage can guarantee absolute security against every possible threat.

Users are also responsible for keeping their Account credentials confidential and must promptly notify Edvento if they suspect unauthorized access to their Account.

16. Rights of Personal Data Subjects

Subject to applicable law, a personal data subject may have the right to:

  • obtain information about whether Edvento processes their personal data;

  • obtain information regarding the content of their personal data;

  • obtain information regarding how and why their data is processed;

  • obtain information concerning the conditions under which access to their data is provided;

  • request correction or clarification of inaccurate personal data;

  • withdraw consent where processing is based on consent;

  • request restriction or temporary suspension of processing where provided by law;

  • request deletion or destruction of data where there is no lawful basis for further processing;

  • contact Edvento regarding personal data protection;

  • submit a complaint to the competent government authority;

  • protect their rights before a court;

  • exercise other rights granted under the legislation of the Republic of Uzbekistan.

Users may exercise their rights by contacting:

info@edvento.uz

To protect personal data from unauthorized disclosure, Edvento may request information necessary to verify the identity of the person making the request or their authority to act on behalf of another person.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Withdrawal of consent also does not require Edvento to delete information that must be retained under applicable law or another lawful basis.

17. Special Categories of Personal Data

Edvento is not intended to purposefully collect special categories of personal data that are not necessary for educational testing.

Users and Educational Centers should not unnecessarily upload information relating to:

  • physical or mental health;

  • political opinions;

  • religious or philosophical beliefs;

  • membership in political parties or trade unions;

  • criminal convictions;

  • private life;

  • other special categories of personal data.

If processing such data becomes necessary for a specific Edvento feature, it will be carried out only where an appropriate lawful basis exists and, where required, with separate consent from the personal data subject.

18. User Content and Educational Centers’ Own Test Questions

Educational Centers may have the ability to upload their own test questions, educational materials, and other content to Edvento.

The Educational Center is responsible for the content it uploads.

Educational Centers must not include personal data belonging to third parties in uploaded questions, materials, or files unless they have an appropriate lawful basis to do so.

Edvento may store, back up, and technically process such content solely for the purpose of providing the relevant platform functionality.

19. Service and Informational Communications

Edvento may send Users communications necessary for providing and operating the service, including:

  • registration messages;

  • verification and confirmation messages;

  • security notifications;

  • testing-related notifications;

  • information regarding test results;

  • payment notifications;

  • notices regarding changes to the service;

  • responses from customer support.

Such communications form part of the Edvento service.

Marketing and advertising communications may be sent where an appropriate lawful basis exists and, where required by law, with the User’s consent.

Users may unsubscribe from optional marketing communications using the method provided in the relevant communication or by contacting Edvento.

20. Third-Party Websites and Services

Edvento may contain links to third-party websites, payment systems, social networks, messaging applications, and other external services.

Edvento does not control how independent third-party services collect or process personal data.

When accessing an external service, Users should review that service provider’s own terms and privacy policy.

21. Changes to This Policy

Edvento may update this Policy due to:

  • changes in applicable law;

  • development or modification of platform functionality;

  • introduction of new services;

  • changes in personal data processing methods;

  • implementation of additional data protection measures.

The current version of this Policy will be made available through https://edvento.uz/.

The date of the latest revision will be stated at the beginning or end of this document.

If a change materially affects how personal data is processed, Edvento may additionally notify registered Users through available communication channels.

Continued use of Edvento following the effective date of an updated Policy means that the updated Policy will apply to subsequent use of the platform to the extent permitted by applicable law.

Where separate consent is required for a new purpose of personal data processing, Edvento will request such consent separately.

22. Contact Information for Personal Data Matters

For questions concerning this Policy, processing of personal data, correction, restriction, deletion, withdrawal of consent, or exercise of other personal data rights, Users may contact:

Edvento
Operator: Edvento
Website: https://edvento.uz/
E-mail: info@edvento.uz
Place of business: Tashkent, Republic of Uzbekistan

It is recommended that requests include:

  • first and last name;

  • contact telephone number or e-mail address;

  • description of the request;

  • where necessary, information enabling Edvento to identify the relevant Account or test.

Edvento may request identity verification where necessary to prevent personal data from being disclosed to an unauthorized person.

23. Final Provisions

This Policy is a publicly available document.

Use of Edvento is subject to this Policy, the applicable Public Offer, platform rules, and the requirements of the legislation of the Republic of Uzbekistan.

If any provision of this Policy is held to be invalid, unlawful, or unenforceable, this shall not affect the validity or enforceability of the remaining provisions.

Any matters not expressly governed by this Policy shall be governed by the applicable legislation of the Republic of Uzbekistan.

Revision date: August 11, 2026.