Privacy policy
How Sonar collects, uses, stores and protects personal data — under the Uzbek Law on Personal Data (ZRU-547 as amended by ZRU-1125).
1. Who processes the data
The personal-data operator is Xplorence, private enterprise, TIN 306865858, address: 70 Nosirov St., Yunusabad district, Tashkent 100000, Republic of Uzbekistan. The “Sonar” personal-data collection is entered in the state register of Uzbekistan (pd.gov.uz): certificate AA 0002212 of 29.07.2026. Data-processing enquiries: contact@xplorence.com.
2. What data we collect and why
Clients: name, organization, phone, e-mail, the contents of requests and projects — to render the service, issue documents and answer enquiries.
Survey participants: questionnaire answers, phone number, and — with separate consent — interview audio and a geotag. The phone number prevents duplicates and pays rewards; it never appears in client reports.
Interviewers: identity document details, PINFL, address, phone and payout details — for the contract, payouts and tax reporting. This data is never linked to respondents’ answers.
Payment data: amount, date, payment status, the card mask and last four digits, and the payment identifier at the payment organization. Technical data: IP address, device and browser type, service logs — for security and incident investigation.
Survey participants: questionnaire answers, phone number, and — with separate consent — interview audio and a geotag. The phone number prevents duplicates and pays rewards; it never appears in client reports.
Interviewers: identity document details, PINFL, address, phone and payout details — for the contract, payouts and tax reporting. This data is never linked to respondents’ answers.
Payment data: amount, date, payment status, the card mask and last four digits, and the payment identifier at the payment organization. Technical data: IP address, device and browser type, service logs — for security and incident investigation.
3. We do not store card numbers
Payments on the site are processed by a licensed payment organization. The full card number is entered on their side, is not passed to the Provider and is not stored in our database: only the mask, the last four digits and the payment identifier remain. For the same reason we cannot charge you again without your action.
To receive a reward, a participant or interviewer provides the recipient card. These details are used only to transfer the reward and are passed to the payment organization that executes the payout.
To receive a reward, a participant or interviewer provides the recipient card. These details are used only to transfer the reward and are passed to the payment organization that executes the payout.
4. Who the data is shared with
• the payment organization and the acquiring bank — to process a payment or a payout;
• the fiscal data operator and the tax authorities — for the fiscal receipt and reporting, to the extent required by law;
• the research client — de-identified results only, with no phone numbers, audio or geotags;
• government bodies — in the cases and manner expressly provided by law.
We do not sell personal data and do not share it for third-party advertising.
• the fiscal data operator and the tax authorities — for the fiscal receipt and reporting, to the extent required by law;
• the research client — de-identified results only, with no phone numbers, audio or geotags;
• government bodies — in the cases and manner expressly provided by law.
We do not sell personal data and do not share it for third-party advertising.
5. Where and how long the data is kept
Research data, contacts and audio recordings are stored on a server in Uzbekistan (Tashkent). Interview audio is deleted automatically after 12 months. Project data is kept while the client contract is in force and is deleted or de-identified once it ends. Financial and tax documents are kept for the periods set by accounting and tax law.
More on localization, consents and the use of external AI — on the “Data protection” page.
More on localization, consents and the use of external AI — on the “Data protection” page.
6. How we protect the data
Only staff who need it for their work have access; sign-in is password-protected and role-based, actions on personal data are logged, the connection is secured by a certificate and backups are made regularly. A person responsible for organizing personal-data processing has been appointed.
7. Your rights
You have the right to: learn what data of yours we process; correct it; withdraw consent; request erasure. A panel member deletes their own data from the account area — the profile, contacts and payout details are erased permanently, while answers already given stay in studies de-identified. Send any other requests to contact@xplorence.com — we reply within 5 working days.
8. Cookies and analytics
Analytics does not run on survey pages or in account areas. Marketing pages use anonymized visit statistics with no session recording. Technical cookies are needed for sign-in and to remember the language.
9. Changes to this policy
The version in force is published on this page with its date. We announce material changes in advance — by e-mail or a notice in the account area.
Version in force as of 2026-08-28. Questions: contact@xplorence.com · +998 88 900 88 99


