Data protection
How Xplorence stores data and what it sends to external processors.
Storage and access
The research database and files are stored on a server in Tashkent. This does not mean there is no external processing: AI data flows are described below.
The “Sonar” database is registered: certificate AA 0002212 · 29.07.2026. Certificate copy and procurement documents are available on request.
Connections use HTTPS/HSTS; access is role-based. Phone reveals for quality checks are logged. Callback phone numbers are encrypted separately; backups are encrypted and copied off-server. This does not claim encryption of the whole live database.
External AI and request contents
Individual open answers and dialogue turns may be sent for analysis to an external language-model provider (Anthropic Claude) outside Uzbekistan. Contact fields are not sent separately, but information within free text is not always de-identified. Do not put names, phone numbers, emails or other personal details about yourself or others in answers.
- Findings from figures
- Project title and description, aggregate measures, question wording and text materials for the report.
- Open answers and AI moderation
- Individual open answers and dialogue turns, including free text. Contact fields are not separately added, but a phone number, name or email entered in the text may be sent: there is no universal guaranteed de-identification.
- Study preparation
- Brief, questionnaire, selected materials and comments supplied to AI tools by the user. Do not include personal or confidential information without an agreed basis.
- Echo
- Virtual profiles, questions, options and task context; answers are model-generated. This is a separate model-based product, not responses from a human panel.
The browser setting only hides the AI findings button. There is currently no per-project server block on external processing. If transfers must be prohibited, agree a separate workflow before uploading data.
Consent and erasure
A survey starts with consent. Interview recording and geotags require separate consent. Phone numbers support deduplication and quality callbacks with recontact consent; participant payouts are currently disabled.
Panel profile erasure removes linked contacts, Telegram IDs, recordings and derivatives, transcripts and geotags from the live system. Free text is removed; closed answers may remain without a direct profile link. Mandatory records and backups follow the separate rules below.
contact@xplorence.comRetention periods
| Category | Period and action |
|---|---|
| Panel and enquiry contacts | Panel profile: until the member deletes it. Enquiry contacts: while needed to respond and deliver the order; then erasure on request, subject to mandatory document retention. No automatic enquiry expiry is configured. |
| Respondent phone | Encrypted callback number: 12 months from storage. Deduplication hash: until personal traces are erased on request. |
| Research answers | Retention and erasure are agreed in the contract. Contract completion does not trigger automatic deletion. Member erasure removes free text; closed answers remain without a direct profile link. |
| Audio, derivatives and transcripts | 12 months from creation: originals, merged audio, Safari copies and stored transcripts. Daily cleanup; earlier when personal traces are erased. |
| Geotags | 12 months from media creation; for drafts, from the last update. Member erasure removes linked geotags. |
| Contracts | During performance and applicable mandatory retention. Contracts supporting accounting records: at least 5 years after the reporting year; law or a dispute may require longer. A responsible person controls erasure. |
| Financial and accounting records | At least 5 years after the reporting year (Article 29 of the Accounting Law), longer where required by law. This is a separate archive; profile erasure does not erase mandatory accounting records. |
| Uploaded brief files | For the brief upload form: 30 days from upload, then source-file deletion. The agreed order specification follows contract retention. This rule applies when the upload form is available. |
| Backups | Erasure from the live database does not rewrite existing encrypted backups. On restore, the erasure log must be replayed before access is opened. The maximum backup rotation period is available on request. |
External analytics is not loaded in questionnaires or account areas. On marketing pages Yandex Metrika runs only after consent, without session recording; change your choice in the footer. The anonymous first-party catalog funnel operates without cookies.
Privacy policy