AnyStats.kz Privacy Policy

This policy explains what personal data AnyStats.kz collects, why, where it is stored, who receives it, how long it is kept and how you can control it. We process data in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”. The terms of use of the service are in our public offer (in Russian); how to delete your data is explained on the Data Deletion page.

1. Who processes the data

The owner and operator of the personal data is Individual Entrepreneur «BATYR» (“we”), the owner of the AnyStats.kz service.

• BIN/IIN: [to be filled in by the owner]
• Registered address: [to be filled in by the owner]
• Email: sakenov4646@gmail.com
• Phone and WhatsApp: +7 771 395 99 96
• Telegram: @anystats_support_bot
• Instagram: @anystats.kz

2. What we collect on anystats.kz

• Account: first and last name, phone number, email address, login and password (the password is stored only as a hash), date and time you accepted the offer, and an invoice phone number if you provided one.
• Data of the Kaspi store you connect: the login (email) and password of your Kaspi seller cabinet, the API token and cabinet session, the store ID and name, warehouses and pickup points with their phone numbers, products, prices, stock levels and repricing settings.
• Orders of your store: to deduct stock and calculate sales and profit, the service receives your store’s orders from Kaspi, including the buyer’s name, phone number and delivery address. We process this data on behalf of the seller and only for that seller’s store.
• Payments: amount, date, service and payment method; for self-payment, the Kaspi receipt (PDF) you upload and the data on it: payer name, receipt number, amount. We do not receive or store bank card numbers.
• Telegram: if you connected notifications, we store your Telegram chat ID and the messages the bot sent to you or received from you.
• Support requests: your messages in WhatsApp, Telegram, email and Instagram if you contacted us.
• Technical data: IP address, browser and device type, pages and request times in server logs; advertising campaign tags (UTM) and the referring source.

3. Instagram data

Our own business account @anystats.kz is connected to the official Instagram API (Meta platform). Through it we process only what you address to our account yourself:

• public comments on our posts;
• direct messages (Direct) you send to @anystats.kz;
• your Instagram username and the user ID Instagram issues for our account (Instagram-scoped ID);
• whether you follow @anystats.kz (Instagram reports this only for people who have written to us themselves).

Why: to reply to a comment in which you ask for our report (the keyword «ХОЧУ», “I want”), to send you the requested link in Direct and to answer your questions. The report is given to followers of @anystats.kz, which is why we check whether you follow us.

What we never do: we never message anyone first and never send bulk messages in Direct; we reply only to comments and messages addressed to us and only within the time windows Instagram allows; we do not read your posts, your followings or your conversations with other people; we do not log in to your account and get no access to it; we do not sell this data or use it for advertising.

Where it is stored: the username, ID, comment or message text, time and what we sent in reply are written to the state file and the sending log of our auto-reply program, which runs on our administrator’s computer or on our server. If you then fill in the report form, your username and ID become part of the request (section 4).

4. Report form via your personal link

The link we send you in Direct is personal and signed: it carries your Instagram username and ID, which cannot be changed in the form. In the form you enter:

• a Kazakhstan mobile phone number;
• an email address;
• your consent to the processing of your data and to being contacted by phone and email (we store the fact of consent, its time and the version of the consent text).

We also store the page language, the number of report downloads and the time of the last download. Requests are visible only to the administrator. Every page of the PDF you receive carries a watermark with your Instagram username and a partially hidden phone number, so the report stays personal.

5. Purposes and legal grounds

• providing the AnyStats.kz service under the offer: account, work with the Kaspi cabinet, repricing, stock, profit calculation, analytics;
• accounting for payments and confirming self-payments;
• notifications about the service and subscription dates, support;
• delivering the report you requested and contacting you about it;
• security and troubleshooting;
• compliance with the laws of the Republic of Kazakhstan.

The legal ground is your consent (accepting the offer at registration, ticking the consent box in the report form, contacting us on Instagram) and the performance of our contract with you. You may withdraw your consent at any time (section 11).

6. Cookies and campaign tags

We do not use advertising pixels or third-party web analytics. On some older pages of the personal account the tawk.to support chat may run and set its own cookies. The campaign tags you registered with are saved in your account. You can delete cookies in your browser settings; without the session cookie you cannot sign in.

7. Who receives the data and where it is stored

We do not sell personal data and do not share it with third parties for their own purposes. Data is received only by processors without which the service cannot work, and only to the extent necessary:

• hosting: the main database and files (receipts, reports) are on servers in the Republic of Kazakhstan; database backups and technical logs are kept by hosting providers in Germany and the Netherlands; part of the background processing runs on servers in these countries;
• Cloudflare — protection and delivery of website traffic (requests to anystats.kz pass through the Cloudflare network);
• Kaspi.kz — on your instruction the service works with your seller cabinet;
• Telegram, WhatsApp, Meta (Instagram) — when you communicate with us through these services; they process data under their own rules;
• Anthropic — only if a seller turns on the beta feature of AI-assisted replies to buyers in Kaspi chat: then the conversation text is sent to prepare a reply;
• government authorities — only where the law expressly requires it.

Some processors are located outside Kazakhstan. This is a cross-border transfer, to which you consent by accepting the offer or submitting the report form.

8. How long we keep data

• Account, store data and orders — while you use the service; deleted at your request. Buyer data from orders is also deleted at the seller’s request.
• Payment records and receipts — as long as accounting and tax laws require.
• Instagram data and report requests (username, ID, comments and messages, phone, email) — up to 12 months after your last contact with us, or until you ask us to delete it, whichever comes first [period to be approved by the owner].
• Technical server logs — a few days.
• Website visit log (pages, referring source, device, country and city) — 30 days; the IP address in it — 7 days; after that, only anonymous daily totals.
• Backups are overwritten on rotation: deleted data disappears from them as the copies are refreshed.

9. How we protect data

Connections to the website are protected by HTTPS; our servers are connected through a private encrypted network; access to the database and internal screens is limited to the administrator and authorized staff; report requests and payment data are visible only to the administrator; phone numbers and tokens are masked in technical logs; receipt and report files are kept in private storage without public links.

10. Your rights

Under the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” you have the right to:

• know whether we process your data and receive information about it (access);
• have inaccurate data corrected or completed;
• have your data blocked or deleted;
• withdraw your consent to processing;
• appeal our actions to the authorized personal data protection body or to a court.

11. How to send a request

Write to sakenov4646@gmail.com, on WhatsApp +7 771 395 99 96, on Telegram @anystats_support_bot or in Direct to @anystats.kz. So that we can find your data, include your phone number, email or Instagram username. We reply and fulfil the request within 30 days. Deletion is explained in detail on the Data Deletion page.

12. Changes to this policy

We update this policy when the way we process data changes. The current version is always published on this page; the version date is shown at the top. The service is intended for sellers — adults with full legal capacity.