tehprof.kz Documents Subprocessors and External Services
Subprocessors and External Services
| Service | Purpose | Data |
|---|---|---|
| Hoster.KZ Company LLP (Republic of Kazakhstan) | the servers that run tehprof.kz and the TehProf products and store their data | all Platform data; stored in the Republic of Kazakhstan |
| Own mail server mail.tehprof.kz | sending email (notifications, codes, replies); runs on the Operator's servers | email address and message content; the message is delivered to the recipient's mail server |
| Bitrix24 | OAuth authentication and CRM integration (at the Client's initiative) | identifiers of CRM users and objects within the granted OAuth scopes |
| Kommo | OAuth authentication and CRM integration (at the Client's initiative) | ticket number, subject and text when a task or deal is created; the responsible user's identifier; employee, company and contact data — only during an import started by an administrator |
| Bitrix24 (TehProf CRM; 1C-Bitrix Kazakhstan LLP) | recording and handling requests from TehProf websites and ad forms, records of Clients and invoices | request data: name, phone, email address, company, request text and form answers, page and UTM tags; the provider may store data outside the Republic of Kazakhstan |
| Freedom Pay (Paybox Technologies LLP, Republic of Kazakhstan) | accepting bank card payments through the TehProf payment gateway | payment amount and number, payer contact; card details are entered on the Freedom Pay page, the Operator receives the payment status and the masked card number |
| WhatsApp: own Evolution API server; WhatsApp LLC (USA) | delivery of WhatsApp messages — codes and notifications, WhatsApp channels connected by the Client in Dialogs and Support | phone number, message text and attachments; transfer outside the Republic of Kazakhstan |
| WhatsApp Business Platform: Meta Platforms Ireland Ltd. (Ireland), Meta Platforms, Inc. (USA) | official WhatsApp channels connected by the Client in Dialogs (Cloud API) | phone number, profile, message text and attachments; transfer outside the Republic of Kazakhstan |
| Telegram Messenger Inc. | Telegram channels connected by the Client in Support; confirmation codes | Telegram user identifier and name, message text and attachments; transfer outside the Republic of Kazakhstan |
| MAX: MAX LLC (ООО «МАХ», Russian Federation) | the MAX channel — only if the Client connects it | user identifier, message text and attachments; transfer outside the Republic of Kazakhstan |
| Yandex SpeechKit, a Yandex Cloud service (Russian Federation) | speech recognition of calls in Support — if the Client has switched this feature on | the call recording for the time of recognition; transfer outside the Republic of Kazakhstan |
| Anthropic, PBC (USA); OpenAI OpCo, LLC (USA) | AI features in TehProf's own support desk: reply suggestions, classification, summaries; not used in Clients' workspaces | the text of requests to TehProf support and the correspondence on them, to the extent the feature needs; transfer outside the Republic of Kazakhstan |
| AI assistants connected by the user (Anthropic Claude, OpenAI ChatGPT, Cursor, etc.) | working with product data on the user's command via the MCP protocol | only what the assistant requests within the user's role; thereafter under the chosen provider's rules |
| Yandex Metrica (Yandex LLC, Russian Federation) | website traffic analysis, including Webvisor — only with the visitor's consent ("Analytics" category) | pseudonymous browser identifier, pages viewed, on-page actions without the content of request forms, referral source, device information, IP address; transfer outside the Republic of Kazakhstan |
| Google Analytics 4 (Google LLC, USA) | website traffic analysis — only with the visitor's consent ("Analytics" category); Google Signals and ad personalisation are off | pseudonymous browser identifier, pages viewed, referral source, device information, IP address; transfer outside the Republic of Kazakhstan |
| Meta Platforms Ireland Ltd. (Ireland), Meta Platforms, Inc. (USA) | measuring the results of advertising on Facebook and Instagram: Meta pixel and Conversions API — only with the visitor's consent ("Meta advertising" category); the stage of an ad-form request — only with a separate consent in the form; product registration and payment events — only with consent on the product website; a separate dataset for each product | _fbp, _fbc cookies, visit information; on a request, registration or payment — SHA-256 hash of phone, email, first and last name, IP address and browser information, event identifier, for payments — amount and currency; for an ad-form request — its identifier and handling stage in the CRM; transfer outside the Republic of Kazakhstan |
| HashiCorp Vault (self-hosted) | storage of secrets and encryption keys | platform secrets; Clients' data is not shared with third parties |
The Operator's servers where data is stored are located in the Republic of Kazakhstan. No other AI providers are connected. Analytics and advertising services receive data only with the visitor's consent given in the website banner (privacy policy, section 6; consent to personal data processing).
Changes to the list are published on this page in advance; previous editions are in the archive.