Privacy Policy
Werto platform (werto.cloud)
Version 1.0
Effective date: 2026-10-29
Updated: 2026-10-24
For users in Uzbekistan the Uzbek text, and for all other users the English text, is the legal basis; the other languages are translations for convenience.
This Privacy Policy (hereinafter, the “Policy”) sets out how personal data are processed through the Werto platform — the werto.cloud website and the related services (hereinafter collectively, the “Platform”). The operator is Neromoon (an individual entrepreneur; full details are in Section 15; contact: privacy@neromoon.uz; hereinafter, “Neromoon” or “we”), which is the owner and operator of the personal data database.
Personal data database in the State Register: registration in progress.
This Policy has been drawn up in accordance with the Law of the Republic of Uzbekistan 'On Personal Data' (2 July 2019, No. ZRU-547, as subsequently amended) and other applicable legislation. By registering on or using the Platform, you confirm that you have read this Policy.
1. Definitions
- User — a natural person who has opened an account on the Platform.
- Werto AI — the Platform's artificial-intelligence-based assistant; at the user's request it generates the code of a digital product (a website, web application, etc.) and conducts a conversation.
- Project — a digital product (code, files, versions, settings) created by the User with the help of Werto AI.
- Visitor — a third party who has accessed a product built by the User and submitted data through a form in it.
- Integration — an external platform voluntarily connected by the User (messengers, spreadsheet and document services, code repositories, payment systems).
2. What data we collect
We collect only the data necessary for the Platform to function. Biometric and genetic data, as well as data concerning health or religious or political beliefs, are not requested by the Platform and are not collected purposefully.
| Category | What it includes | Source | Purpose |
|---|---|---|---|
| Account data | First and last name, e-mail address, password (in hashed form only), username, avatar, occupation, short bio, interface language | Entered by you at registration | Creating and protecting the account, contacting you |
| External sign-in data | Identifier of your external account (sign-in service), its verified e-mail address, name, avatar link | External sign-in service (with your permission) | Password-less sign-in; only a verified e-mail address is accepted |
| Session and device | Device/browser name, user-agent, IP address, sign-in time, session identifier | Automatically at sign-in | Security: showing active devices and enabling an unfamiliar session to be terminated, protection against attacks |
| Chat and requests | Your correspondence with Werto AI, files and voice messages you upload | Created by you | The core function of the service — creating digital products and conversation; storing history |
| Project content | Code of the generated product, versions, your texts and images, settings | Werto AI + you | Displaying, editing, exporting and hosting the product |
| Usage records | Number of tokens, model, time and cost calculation for each AI request; credit balance, plan and payments | Automatically | Limits, billing, analysis of service quality |
| Payment data | The card number is not stored in Werto; for automatic renewal, the token issued by the payment system, the card type and its last 4 digits are stored — until you remove the card | Payment system | Automatic renewal of the plan, recording of payments |
| Integration data | Access tokens or identifiers of connected integration platforms and the connection status — only if you connect them | When you connect them | Exporting code, delivering submissions from product forms to the platform you choose. Tokens are stored in encrypted form |
| Visitor forms | Data submitted through a form in your product (name, phone, message, etc.) | Visitor | Not stored in Werto — only delivered to the integration platform you have connected; if no integration is connected, the data do not reach the server at all and are not stored; if they cannot be delivered, they remain in an encrypted buffer for no more than 24 hours (see the Data Processing Terms) |
| Support | Your messages and attachments in the support chat inside Werto | You | Resolving your request |
| Technical logs | Server logs (request path, status code, time, IP), error records, records of service changes relating to the account | Automatically | Detecting errors, security |
3. Purposes and legal bases of processing
We process personal data on the following bases:
- Performance of the contract concluded with you (the Terms of Use): maintaining the account, creating digital products through Werto AI, storing projects, operating integrations, accepting payments.
- Your consent: sign-in via an external account, connecting integration platforms, optional profile fields, “News and offers” e-mails. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
- Legal requirements: responding to lawful requests of state authorities, retaining accounting and tax records.
- Our legitimate interests — without prejudice to your rights: Platform security, prevention of fraud and abuse, improvement of service quality, defence against legal claims.
We do not sell or provide your data to third parties for advertising purposes. No external advertising or tracking systems are installed on the Platform.
4. Artificial intelligence and your data
Werto AI operates through the artificial intelligence service of Google LLC (USA). The request you write in the chat, the related project context (for example, the product's existing code) and the selected settings are sent to this service to generate a response. This transfer is carried out solely to fulfil your request.
4.1. Your chat text for Werto AI is transferred to Google LLC (USA) — you give your express consent to this at registration (the consent text on the registration page). This constitutes a cross-border transfer of personal data; the transfer is carried out solely to obtain a response to your request.
We use this service on paid (business) terms; under these terms, the data sent are not used by Google to train its own models.
Neromoon staff, including administrators, do not see the text of your correspondence with Werto AI. Administrators see only technical metadata (number of chats, token consumption, error status). Exceptions: messages that you yourself send to the support chat, and cases where this is mandatory under the law.
Werto AI's responses may contain errors. The user is responsible for checking the texts and images in an AI-generated product before publishing them (Terms of Use, Section 5).
5. To whom we disclose data
Your data are processed by the following service providers only to the extent necessary for the Platform to function:
| Who | Location | For what purpose and which data |
|---|---|---|
| Contabo GmbH | Germany | Hosting of the server and database. All stored data. |
| Google LLC — artificial intelligence service | USA | Generating Werto AI responses. Chat text, project context (Section 4). |
| Google LLC — sign-in service | USA | Sign-in via Google. Verified e-mail address, name, avatar. |
| Google LLC — mail service (SMTP) | USA | Confirming registration, password recovery and sending service messages. E-mail address and message content. |
| Payment systems (0) | Uzbekistan / international | Purchasing a plan and automatic renewal. The card number is not stored in Werto; the token issued by the payment system, the card type and its last 4 digits are stored. |
| Integration platforms connected by the User (messengers, spreadsheet and document services, code repositories, external sign-in services, image services) | Depending on the platform | Only if you connect them and only for the action you specify (for example, exporting code, delivering form data); they process data under their own policies. Sample images in products are loaded from image services — in this case, the browser that opens the product sends its IP address to them. |
In addition, data may be disclosed to competent state authorities in cases provided for by law, and to a legal successor in the event of Neromoon's reorganisation or sale (you will be notified of this in advance).
6. Where data are stored
The servers are located in Germany (Contabo GmbH); when data are stored abroad and transferred abroad, the requirements of the Law 'On Personal Data' (ZRU-547, as amended by Law No. ZRU-1125 of 26 March 2026) are complied with; personal data database in the State Register: registration in progress.
7. How long we retain data
| Data | Retention period |
|---|---|
| Account and profile | While the account is active; after the account is deleted, they are retained for 14 days (to meet legal requirements and to check for abuse) and then deleted; from backups — within a further 7 days |
| Chats and projects | Until you delete them or until the account is deleted |
| Sign-in sessions (device, IP, time) | Until the session ends / 30 days |
| Visitor forms | Not stored in Werto; an undelivered submission remains in an encrypted buffer for no more than 24 hours and is then deleted |
| Usage and payment records | The period established by legislation for accounting records (5 years) |
| Payment data (token, card type, last 4 digits) | Until you remove the card |
| Security and technical logs (requests, service changes relating to the account) | Up to 30 days |
| Backups | 7 days; deleted data disappear from backups within this period |
8. Security
We apply organisational and technical measures to protect data against unauthorised access, alteration and loss: all connections are encrypted via HTTPS; passwords are stored only in the form of an irreversible hash; access tokens of external services are stored in encrypted form; the database and cache operate in an internal network closed off from the internet; sign-in sessions are managed per device, and you may terminate any session; service actions are logged; access to the service is restricted by role.
If unauthorised access to personal data is detected, we will notify the competent authority in the manner established by legislation and, where the risk is high, you as well, within 72 hours.
9. Your rights
In accordance with the Law 'On Personal Data', you have the following rights:
- to receive information on whether data about you are being processed, and on the purpose and methods of such processing;
- to access your data and obtain a copy of them (the Platform provides the ability to export the code of your projects);
- to demand the rectification of inaccurate or incomplete data (independently, in the profile settings);
- to demand the deletion of your data — account deletion is available in the settings section;
- to withdraw consent (for example, by disconnecting an integration, unlinking an external account, or turning off “News and offers”);
- to object to processing and to apply to the competent state authority and to a court.
To exercise your rights, send a request via the support chat inside Werto or from your registered e-mail address to privacy@neromoon.uz. We will respond to the request within the period established by legislation, but no later than within 10 business days. We may ask you to verify your identity.
10. Visitors of User products
If you have visited a product built by a Werto user (a website, web application, etc.) and submitted data through a form in it, the holder of those data (their owner and operator) is the owner of that product. Neromoon, as a technical intermediary, only delivers them to the integration platform connected by the product owner; if no integration is connected, the data do not reach the server at all and are not stored; the data are not stored in Werto and, if they cannot be delivered, they remain in an encrypted buffer for no more than 24 hours and are then deleted. To view, rectify or delete your data, contact the product owner; if the product owner cannot be identified or does not respond, write to us at privacy@neromoon.uz. Details: “Data Processing Terms for User Products”.
11. Children
The Platform is intended for persons who have reached 18 years of age. Persons aged 14 to 18 may use the Platform only with the consent of their legal representatives (a parent or guardian). If we discover that we have unknowingly collected data of a person under 14 years of age, we will delete them. Please report such a case via the support chat or to privacy@neromoon.uz.
12. Cookies and local storage
The Platform does not use advertising or tracking cookies. Technical data (the sign-in token) are stored in your browser's local storage. Details — “Cookie and Local Storage Policy”.
13. Messages
We send you two types of e-mails:
- service messages — e-mails with a confirmation code, on password recovery, and on payments, product builds and security. They are necessary and mandatory for using the Platform and cannot be turned off;
- “News and offers” — e-mails about new features and offers. They are sent on the basis of the consent you gave at registration; you can turn them off at any time in Settings → Personal, and every such e-mail contains an “unsubscribe” link.
14. Changes to the Policy
We may amend the Policy. We will notify you of material changes at least 10 days before they take effect, by a notice on the Platform or by e-mail. The current version is always available at https://werto.cloud/privacy; the header indicates the effective date.
15. Operator Details
| Legal name | Individual entrepreneur Qahramonov Muhammadzohid Akbar o'g'li |
|---|---|
| Brand | Neromoon |
| Address | Tashkent, Uzbekistan |
| privacy@neromoon.uz |
Requests concerning personal data: the support chat inside Werto or privacy@neromoon.uz.
Competent state authority in the field of personal data and the State Register of personal data databases: pd.gov.uz.