Privacy policy

Who processes the data

The personal data operator is the owner of 2bix. For questions about your data, write to to be announced.

This policy follows the Law of the Republic of Uzbekistan “On Personal Data” (ZRU-547). By signing up you consent to processing on the terms described here.

What we collect

• Account: login, email, password (stored only as a strong hash), first, last and middle name, phone, Telegram, profile photo — what you entered yourself.
• Your work: tasks, tables, messages, files, articles and everything you and your colleagues add to the business.
• Technical data: IP address, browser and device details, sign-in times, the business activity log. Needed for signing in, protection against break-ins and fixing errors.
• “Working” marks and presence on the site — for the timesheet, if the business uses it.
• Services you connect (such as Google Calendar): only what they need to work, and only after your permission.

Why

• So you can sign in and work: show your tasks, tables and chats, send notifications.
• To protect the account and business data: verify sign-ins, limit password guessing, find the causes of failures.
• To apply the plan: count file storage, employees and requests.

We do not sell data, do not share it with advertisers and do not use the contents of your tables and chats for anything but running the service.

Business data

Everything employees add to a business (clients, deals, chats) belongs to that business. Its owner decides who sees what and is responsible for lawfully collecting their customers’ data. The service stores and processes this data on the business’s behalf.

Visit counting

On the home page visits are counted only if you allowed it in the banner at the bottom. We record the page address and navigation — no names, contacts or anything you type. You can withdraw permission in the page footer.

Browser storage

Your browser keeps sign-in keys and your preferences: theme, language, collapsed menu, table sorting, form drafts. We set no advertising or third-party tracking cookies.

If you received a link to a workbook and open it without an account, your browser gets a guest key, and our servers keep its hash and a device fingerprint (browser characteristics). They let the workbook remember your name and keep blocked devices out; the key itself is never stored on our side.

Who receives the data

• The hosting provider of our servers.
• Services you connected yourself: Google Calendar, Telegram form bots, email on the business domain.
• Government authorities — only where the law directly requires it.

How long we keep it

Account data — as long as the account exists. Things deleted in a business stay in the trash for a day, then are erased for good. Backups are kept for up to seven days. Technical logs — no longer than needed to investigate failures.

Guest keys and device fingerprints for workbooks shared by link are kept for 90 days after your last visit and then deleted — except for devices blocked by the workbook owner: those stay as long as the link exists and are erased with it.

Your rights

You can learn what data about you is stored, correct it in your profile, withdraw consent and request deletion of your account. Write to to be announced — we answer within 10 working days. Deleting an account does not delete business data you added: it belongs to the business.

Changes

If the policy changes, the new version appears on this page with a new date. We announce significant changes in the service in advance.