Privacy policy
What we collect in the Cebix app and on cebix.app, and what we do with it.
1. What the app collects
Your name, email, university, student card photo and selfie (which then becomes your profile photo); your discount history (where, when, which offer), coin activity and applications to companies. Your saved products stay on your phone. Passwords are stored only as a hash.
2. What the website collects
The “Notify me” form: your email and the site language. The “For business” form: business name, your name, phone, optional email, category and note. For every request the server keeps a technical log (IP address, browser, time and page) to stop abuse and find errors; these logs are kept briefly. The questions you send the chatbot and its answers are kept (with the site language and time); your IP address and name are not attached to them. The website has no advertising trackers; we count visits with Cloudflare’s cookie-free statistics.
3. Why
To check your student status, confirm discounts at the till, count coins, pass applications to companies, tell you once when the app is out, answer business enquiries and improve the service. We do not sell your data for advertising.
4. Student card and selfie
Your student card photo is kept in private storage: only the Cebix staff who review it can see it, never shops or partner companies. The selfie becomes your profile photo, which the cashier uses to check that the QR is really yours. You can change your profile photo at any time.
5. What partners see
A shop that scans your QR sees your first name, last-name initial, university, tier and profile photo (e.g. “Aysel M., ADA”) so they can recognise you. Your email and student card are never passed to partners. Nothing you send through the website’s forms is given to any partner.
6. Location
If you allow it, your location is used only on your phone: to show distances and to alert you near a place that sells a product you saved. We do not send your location to our servers. You can revoke the permission in your phone settings at any time.
7. Who processes it
Data is stored on Cebix’s own servers. Traffic to the website and the app goes through Cloudflare, which encrypts the connection and protects against attacks, and processes your IP address and the request to do so. What you write to the chatbot is sent to OpenAI to prepare the answer; OpenAI does not use it to train models. We share data with no other third party, except where the law requires it.
8. Keeping and deleting
We keep app data while your account is open. A waitlist email is kept until the app is out or you opt out; a business enquiry until it is closed; chatbot conversations for 90 days. To delete your account, leave the list or get a copy of your data, write to [email protected] — we reply within 30 days. Records the law requires us to keep are the exception.
9. Security and your rights
Connections are encrypted and sign-ins are protected by per-device tokens. Under the Law of the Republic of Azerbaijan “On Personal Data” you may see, correct and ask us to delete your data. About cookies: see the Cookie policy.
