Privacy Policy

Effective Date: August 15, 2025

This Privacy Policy (hereinafter referred to as the "Privacy Policy") is a public agreement concluded between the owner TOO "arqa AI" (hereinafter referred to as the "Service Provider") and the User in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan, based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection", and applies to information containing personal data of Users that the arqa Platform (hereinafter referred to as the "Platform") may receive from Users while they use the Platform.

1. Definition of Terms

1.1. Personal Data - any information relating directly or indirectly to the User and/or third parties, information about whom is provided by the User using the Platform.

1.2. Non-Personal Data - information that is automatically transmitted during the User's viewing of advertising blocks and when visiting pages where a statistical script of the system is installed: the address of the requested page, IP address, browser information, referrer (address of the previous page), access time.

1.3. Collection of Personal Data - actions aimed at obtaining personal data.

1.4. Processing of Personal Data - actions aimed at accumulation, storage, modification, supplementation, use, distribution, anonymization, blocking, and destruction of personal data.

1.5. Protection of Personal Data - a set of measures, including legal, organizational, and technical, carried out for the purposes established by the Law of the Republic of Kazakhstan "On Personal Data and Their Protection".

1.6. Platform - a software complex for automating the "arqa" service, as well as the entire set of related products, including applications for drivers, passengers, and a set of auxiliary services.

1.7. Platform Services - all services available for use on the Platform.

1.8. User - a user of the Platform.

1.9. Service Provider - TOO "arqa AI", BIN: 250640026643, which is the owner of the Platform, located at: Almaty, Bostandyk district, Satpayev Street 82, email address: info@arqa.cc

1.10. IP Address - a unique network address of a node in a computer network built on the IP protocol, allowing determination of the Customer's location.

2. Subject of the Privacy Policy

2.1. This Privacy Policy establishes the Service Provider's obligations for non-disclosure and ensuring the confidentiality protection regime of personal data that the User provides at the request of the Service Provider during registration on the Platform.

2.2. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out a registration form on the Platform and includes the following information:

2.2.1. Full name of the User;

2.2.2. User's contact phone number;

2.3. Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) is also subject to secure storage and non-disclosure, except for cases provided for in clauses 4.3.2 and 4.4 of this Privacy Policy.

3. Purposes of Collection and Use of User Data

3.1. The Service Provider collects, processes, and stores only the personal data that is necessary for providing Services and/or creating an order by the User on the Platform.

3.2. The Service Provider uses the User's personal data for the following purposes:

3.2.1. Identification of the User for order processing for those receiving transportation services;

3.2.2. Processing and receiving payments from the User;

3.2.3. Providing the User with effective customer support;

3.2.4. Providing the User with personalized Services;

3.2.5. Communication with the User, including sending notifications, requests, and information regarding the use of Services, service provision, as well as processing requests and applications from the User;

3.2.6. Improving the quality of Services, convenience of their use, development of new Services and services;

3.2.7. Informing the User about updates and promotions;

3.2.8. Conducting statistical and other research based on non-personal data, as well as optimization of advertising messages.

3.3. The Service Provider is not responsible for information provided by the User on the Platform in publicly accessible form.

3.4. The User is not responsible for losses that the User may incur as a result of their number and code becoming known to a third party.

4. Rights and Obligations of the Parties

4.1. The User is Obligated to:

4.1.1. Provide information about personal data necessary for using the Platform;

4.1.2. Change and supplement the provided information if incorrect data is discovered when using the Platform.

4.2. The Service Provider Has the Right to:

4.2.1. Access and edit information about personal data at any time through the web interface provided within the services.

4.3. The Service Provider is Obligated to:

4.3.1. Use the obtained information exclusively for the purposes specified in Section 3 of this Privacy Policy;

4.3.2. Ensure storage of confidential information in secrecy, not to disclose without prior written permission of the User the transmitted personal data, except for transferring data for the purpose of fulfilling the User's order (vehicle services, courier services, postal organizations, banks, etc.), as well as to authorized state bodies of the Republic of Kazakhstan in the manner established by the legislation of the Republic of Kazakhstan;

4.3.3. Take precautionary measures to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect such information.

4.4. Third-Party Access to Non-Personal Data

The Service Provider has the right to provide access for collection and analysis of Users' non-personal data to third parties for statistical purposes and optimization of advertising messages. The use of non-personal data by third parties is governed by their own privacy policies, and the Platform is not responsible for their use.

5. Other Conditions

5.1. The User's use of the Platform means their unconditional consent to this Privacy Policy and the conditions of the Service Provider's processing of User data.

5.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the Platform.

5.3. This Privacy Policy applies only to the Mobile Application. The Platform is not responsible for third-party websites to which the User may navigate through links available on the Platform.

5.4. The Service Provider, due to the specifics of the method of obtaining information, does not verify the accuracy of the data provided by the User and does not control their relevance. However, the Service Provider assumes that the User provides accurate data and maintains this data in an up-to-date state. All responsibility, as well as possible consequences for providing inaccurate or outdated data, is borne by the User.

5.5. The Platform collects statistics about the IP addresses of its Users. This information is used to identify and solve technical problems, to control the legality of financial payments.

5.6. The current legislation of the Republic of Kazakhstan applies to this Privacy Policy and the relationship between the User and the Service Provider.

5.7. The Service Provider reserves the right to unilaterally change this Privacy Policy for further improvement of the security system in accordance with the current legislation of the Republic of Kazakhstan.

5.8. All suggestions or questions regarding this Privacy Policy should be communicated to: info@arqa.cc

5.9. The Service Provider is not responsible for the actions of third parties who have gained access to information about the User as a result of using the Internet, or for the consequences of using information that is accessible to any Internet user.

5.9.1. The User's consent to the processing of their data is indefinite and can be withdrawn by sending a written request to the email address info@arqa.cc, or to the address: Almaty, Bostandyk district, Satpayev Street 82.

Contact Information

TOO "arqa AI"

• BIN: 250640026643

• Address: Almaty, Bostandyk district, Satpayev Street 82

• Email: info@arqa.cc

By using the ARQA Platform, you acknowledge that you have read and agree to this Privacy Policy.

Last Updated: August 15, 2025