Effective date: 1 June 2026 · Last updated: 1 June 2026 · Version: 2.0

This is a translation. The Russian-language version is the master version and shall prevail in the event of any discrepancy between the language versions.

This Privacy Policy explains how SELLAI LLC (the "SafeLaw", "we", "us" or "our") collects, uses, transfers, stores and protects your personal data when you use the SafeLaw Service (safelaw.ai).

SELLAI LLC is a limited liability company registered in the Republic of Uzbekistan (TIN: 312530703), with its registered address at 91/7 A. S. Pushkin St., Nukus, Republic of Karakalpakstan, Uzbekistan. We are the controller of personal data within the meaning of applicable personal data protection law.

By using the Service, you confirm that you have read, understood and agree to the data processing practices described in this Privacy Policy. If you do not agree, you must not use the Service.

1. Summary

• What we collect: Account information, payment information (processed by payment providers), content you submit to the Service (including documents and AI queries) and technical data.
• Why we collect it: To provide and improve the Service, process payments, communicate with you, ensure security and comply with legal obligations.
• Who we share it with: Payment providers (for accepting Uzcard, Humo, Visa, Mastercard cards), AI inference providers, hosting provider.
• Where data is stored: On servers located in accordance with legal requirements.
• Your rights: Access, correction, deletion, withdrawal of consent — in accordance with applicable personal data protection law.
• Contact: info@safelaw.ai

2. Personal Data We Collect

2.1 Account Information

When you create a SafeLaw account, we collect:

• Your first and last name
• Your email address
• Your password (stored as an irreversible hash — we never see your password in plain text)
• Your phone number (where necessary)
• Your preferred language

SELLAI LLC safelaw.ai

2.2 Payment Information

When you subscribe to a paid plan, our payment provider collects:

• Your local (Uzcard, Humo) or international (Visa, Mastercard) payment system card data (card number, expiry date) — collected directly by the payment provider and not stored by SafeLaw
• Transaction history (amount, date, status)

SafeLaw itself does not store full payment card data. All payment processing is carried out by licensed payment aggregators compliant with the international PCI DSS security standard.

2.3 Content You Submit

When using the Service, you may submit content, including:

• Text queries and questions you ask the AI
• Documents you upload for analysis
• Information you enter into document templates
• Files attached to support requests

This content may contain personal data about you or third parties. You are responsible for ensuring that you have the right to submit any third-party personal data to the Service.

2.4 AI-Generated Content

We store the outputs the Service generates in response to your queries, linked to your account, so that you can access them later.

2.5 Technical Data

When you access the Service, we automatically collect:

• IP address
• Browser type, version and language
• Operating system and device type
• Pages viewed and actions taken
• Date and time of access
• Performance and error logs

2.6 Communications

When you contact us, we collect the contents of your message, your contact information and any attachments provided.

3. Purposes of Processing Personal Data

We process your personal data for the following purposes:

3.1 Providing the Service

• Creating and managing your account

SELLAI LLC safelaw.ai

• Authentication at sign-in
• Processing AI queries and generating documents
• Storing your documents and history
• Personalising your experience

3.2 Processing Payments

• Charging for subscriptions and usage via payment providers (Uzcard, Humo, Visa, Mastercard cards)
• Processing refunds
• Sending invoices and receipts
• Complying with tax obligations under applicable tax law

3.3 Communication

• Sending transactional notifications (confirmations, receipts, subscription notices)
• Responding to your support requests
• Sending Service-related notifications

3.4 Improving the Service

• Analysing usage to identify errors and improvements
• Conducting internal analytics
• Developing new features

We do not use your personal content (documents, queries, AI responses) to train publicly available generative AI models, except in aggregated and anonymised form that cannot be linked to you.

3.5 Security

• Detecting and preventing fraud and unauthorised access
• Monitoring security incidents
• Enforcing the Terms of Use

3.6 Legal Obligations

• Complying with tax, accounting and regulatory requirements
• Responding to lawful requests from government authorities
• Establishing, exercising or defending legal claims

4. Legal Bases for Processing

We process your personal data on the following bases provided for by applicable personal data protection law:

• Consent of the data subject: By creating an account and using the Service, you give your consent to the processing of personal data for the purposes described in this Policy.
• Performance of a contract: Processing necessary to provide you with the Service in accordance with the Terms of Use.

SELLAI LLC safelaw.ai

• Compliance with legal obligations: Processing necessary to comply with applicable tax, accounting and other legal requirements.
• Legitimate interests: Processing necessary to ensure security, prevent fraud and improve the Service, subject to respect for your rights and interests.

5. With Whom We Share Personal Data

We do not sell your personal data. We share data with third parties only in the following cases:

5.1 Service Providers

We share data with the following categories of service providers who process data on our behalf:

• Payment providers — to process payments by Uzcard, Humo, Visa and Mastercard cards. They receive card data directly from you and process transactions in accordance with the requirements of the competent financial regulators and the international PCI DSS security standard. When paying with international payment system cards (Visa, Mastercard), payment transaction data may be processed by the relevant international payment systems, including outside the Republic of Uzbekistan, to the extent necessary to carry out and authorise the payment.
• AI inference providers — to process your queries and generate responses. Your inputs and outputs are not used to train the AI providers' models.
• Hosting provider — to host the application and store data.
• Email provider — to send emails (confirmations, notifications).

5.2 Government Authorities

We may disclose personal data upon a lawful request from authorised government authorities in accordance with applicable law.

5.3 With Your Consent

We may share your personal data with third parties where you have given us your explicit consent to do so.

5.4 Aggregated Data

We may share aggregated or anonymised data that does not allow you to be identified, for analytical purposes.

6. Retention of Personal Data

We retain your personal data only for as long as necessary for the purposes described in this Policy or as required by law.

Data category Retention period

Account information For the lifetime of the account plus 90 days after deletion

Documents and AI interactions For the lifetime of the account or until you delete them, plus 30 days in backups

Payment and transaction records 5 years after the transaction (requirement of applicable tax law)

SELLAI LLC safelaw.ai

Data category Retention period

Support communications 3 years after the last interaction

Server logs 90 days

Anonymised analytical data Indefinitely

After these periods, we will delete or irreversibly anonymise your personal data.

7. Your Rights

In accordance with applicable personal data protection law, you have the following rights:

• Right of access: You may obtain information about the processing of your personal data and obtain a copy of such data.
• Right to rectification: You may request correction of incomplete or inaccurate personal data.
• Right to erasure: You may request the destruction of personal data that is processed in breach of the law or is no longer necessary.
• Right to withdraw consent: You may withdraw your consent to the processing of personal data at any time by written request.
• Right to object and restrict: You may object to certain types of processing or request its restriction to the extent provided for by applicable law.
• Right to complain: You may appeal the actions (inaction) of the personal data controller to the competent supervisory authority for personal data protection or to a court.

To exercise your rights, contact us at info@safelaw.ai. We will respond to your request within the time limits set by applicable law.

8. Security of Personal Data

We take organisational and technical measures to protect your personal data from unauthorised access, alteration, disclosure or destruction in accordance with applicable law. These measures include:

• Encryption of data in transit (TLS)
• Storage of passwords as irreversible hashes
• Access controls for systems and data
• Regular data backups
• Monitoring of and response to security incidents

However, no method of transmitting data over the Internet is 100% secure. We strive to protect your data but cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential.

9. Children's Privacy

The Service is not intended for persons under 18 years of age, and we do not knowingly collect personal data from persons under 18. If we become aware of such collection, we will take steps to delete the data.

SELLAI LLC safelaw.ai

10. Changes to This Privacy Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email and/or in- app notification at least 15 days before the changes take effect. Continued use of the Service constitutes your acceptance of the revised Policy.

11. Contact Us

If you have any questions about this Privacy Policy, contact us:

SELLAI LLC 91/7 A. S. Pushkin St., Nukus, Republic of Karakalpakstan, Uzbekistan TIN: 312530703

Privacy and legal enquiries: info@safelaw.ai Phone: +998 90 590 59 00

You also have the right to lodge a complaint with the competent supervisory authority for personal data protection.

Document language. This document is provided in Russian, English and Uzbek. In the event of any discrepancy between the versions, the Russian-language version shall prevail.

By using SafeLaw, you confirm that you have read, understood and agree to this Privacy Policy.