Privacy Policy and Terms of Service
Privacy Policy
This document defines the rules for collecting, storing, using, and protecting the personal data of Oson Test platform (oson-test.uz) users, as well as the payment system regulations.
By using the platform, you agree to the terms of this policy.
Last updated: 22.04.2026
Table of Contents
- Data We Collect
- Purposes of Data Use
- Data Protection
- Sharing Data with Third Parties
- Payment System and Balance
- Telegram Integration
- Cookies
- User Rights
- Terms of Service and Rules
- Hujjatlar (yaratuvchi yuklagan fayllar)
- Exam Platforms and Restrictions
- Guruh quiz (Kahoot uslubi)
- CEFR exams
- IELTS exams
- Live Speaking video room (WebRTC)
- Minors
- Changes to the Policy
- Contact Information
1. Data We Collect
Information you provide directly:
- Account information: first name, last name, username, email, phone number, password (stored in encrypted form)
- Profile information: profile picture, bio/about, Telegram ID
- Educational data: exam answers, test results, course progress, certificates
- Survey responses: survey and questionnaire responses, uploaded files
- CEFR and IELTS data: answers for all 4 skills (Listening, Reading, Writing, Speaking); Writing — full text; Speaking (async mode) — uploaded audio recording; IELTS band (0–9) and CEFR level (A1–C2) results
- Proctoring data: in exams with proctoring enabled — webcam snapshots (every 5 minutes), fullscreen exit events, and detected face count
- Payment information: payment amount, payment method, transaction status (card numbers are not stored on the platform)
Automatically collected data:
- Technical data: IP address, browser type and version, operating system, device type
- Usage data: page visits, login time, session duration
- Cookies: session identifiers, language preferences, authentication tokens
Data obtained through third parties:
- Google OAuth2: name, email, and profile picture when signing in with a Google account
- Telegram: user ID, name, and username via the Telegram bot
2. Purposes of Data Use
- Service delivery: creating your account, providing exams and courses, calculating results
- Payment operations: managing balance, processing payments, maintaining transaction history
- Security: protecting accounts from unauthorized access, API rate limiting, detecting suspicious activity
- Communication: important notifications, password recovery, payment notifications (via SMS and email)
- Certification: generating certificates based on exam results (name, score, and date are displayed)
- Analytics: improving platform performance, fixing errors, usage statistics
3. Data Protection
- Encryption: all data is transmitted via SSL/TLS (HTTPS) protocol. Passwords are stored using a one-way hashing algorithm
- Authentication: token-based API authentication, automatic 30-day expiration, sessions expire after 12 hours
- API protection: rate limiting (anonymous 30/min, user 60/min, authentication 5/min), CSRF protection, CORS configuration
- Database: payment operations are protected with atomic transactions (preventing data loss)
- Access control: data access is restricted through a role-based system. Regular users can only view their own data
- Card information: payment card numbers are not stored on the platform. Payments are processed through the Atmos payment system
4. Sharing Data with Third Parties
Your data may be shared with third parties in the following cases:
- Payment providers: necessary data is sent to the Atmos payment system to process payments (amount, account identifier). Card details are sent directly to Atmos servers
- Google: Google OAuth2 service is used for authentication when signing in with a Google account
- Telegram: when using the bot, messages are sent via the Telegram API
- AI services: source text is sent to Google Gemini API for AI question generation (personal data is not sent)
- Legal requirement: to government authorities as required by law
5. Payment System and Balance
Balance Types
The platform has two types of balance:
| Type | Description | Features |
|---|---|---|
| 💰 Main Balance | Topped up via bank card (Atmos payment system). Used for all services. |
|
| 🎁 Bonus balance | Bonuses granted by the system: welcome bonus, referral bonus, admin bonus, transfers from exam earnings. |
|
Payment Operations
- Payments are processed through the Atmos payment gateway. Card numbers are not stored on the platform
- Each payment is verified via SMS OTP (one-time code)
- All transactions are saved in the payment history and displayed to the user
- New users receive a one-time welcome bonus upon registration (added to bonus balance)
Transfer Exam Earnings
Paid exam creators can transfer earnings from the exam balance to their account. Two types of transfers are available:
| Transfer type | Tax rate | Recipient | Misol |
|---|---|---|---|
| To bonus balance | 10% | Bonus balance | 100,000 → 90,000 bonus (10,000 tax) |
| To main balance | 20% | Main Balance | 100,000 → 80,000 balance (20,000 tax) |
Note: Funds transferred to bonus balance cannot be withdrawn to a card. Funds transferred to main balance can be withdrawn.
Withdrawal
- Only main balance can be withdrawn (not bonus balance)
- A 5% tax is deducted on withdrawals
- Example: withdrawing 100,000 UZS — 5,000 UZS tax, 95,000 UZS goes to your card
- Withdrawal requests are reviewed by an administrator and transferred to the card after approval
- When a request is submitted, funds are held from the balance. If rejected, funds are returned to the balance
Tax rates
| Operation | Tax | Note |
|---|---|---|
| Exam → Bonus balance | 10% | Transfer exam earnings to bonus balance |
| Exam → Main balance | 20% | Transfer exam earnings to main balance |
| Balance → Card | 5% | Withdraw from main balance to card |
- Funds spent from balance (creating exams, generating questions, taking paid exams) are non-refundable
- Tax deducted on transfers and withdrawals is non-refundable
- Bonus balance cannot be withdrawn to a card
- Remaining balance (main and bonus) is not refunded when account is deleted
Pricing
- Service prices are published on the platform and may change without prior notice
- Price changes do not affect already completed transactions
- Paid exam prices are set by the exam creator
- Tax rates are subject to change. Current rates are displayed in the API and platform interface
Payment data security
- Card numbers, expiry dates, and CVV codes are not stored on the platform
- Payment details are sent directly to the Atmos payment provider servers
- The platform only stores transaction ID, amount, and status information
6. Telegram Integration
- When using the Telegram bot, your Telegram user ID, name, and username are stored
- Messages and responses sent via the bot are transmitted through the Telegram API and are also stored on Telegram servers
- Linking your Telegram account to the platform is optional. You can unlink it at any time
- When making payments via Telegram Mini App, the same security measures as on the website are applied
- Only platform administrators have access to Telegram bot data
7. Cookies
| Type | Purpose | Duration |
|---|---|---|
| Session | Login status, CSRF protection | 12 hours |
| Language | Selected language preference | 1 year |
| API token | Mobile app authentication | 30 days |
The platform does not use advertising or tracking cookies. You can manage cookies through your browser settings.
8. User Rights
- View: you can view your personal data on the profile page
- Edit: you can change your name, email, phone, and other data at any time
- Results: you can view your full exam results and payment history
- Disconnect: you can disconnect your Google and Telegram accounts at any time
- Delete account: you can request to permanently delete your account. After deletion, all personal data will be irreversibly removed
Reset password
If you forgot your password or signed in via Google/Telegram without setting a password, you can receive a new one:
- Telegram: If your Telegram account is linked, a new password will be sent via the Telegram bot
- Email: If your account has an email, a new password will be sent via email (from info@oson-test.uz)
A new random password is generated. We recommend changing it after logging in.
9. Terms of Service and Rules
Usage rules:
- Use the platform only for lawful purposes
- Do not share your account credentials with others
- Do not attempt to cheat or provide false answers during exams
- Respect the rights of other users
- Do not post content that violates intellectual property rights
Prohibited actions:
- Registering with false information
- Unauthorized use of others' accounts
- Uploading malware or conducting hacking attacks on the platform
- Distributing spam, malicious links, or prohibited content
- Attempting to disrupt the platform's technical systems
- Collecting data using automated tools (bots, scrapers)
Limitation of liability:
- The platform is provided on an 'as is' basis. Uninterrupted operation is not guaranteed
- The platform is not liable for damages caused by technical failures
- The content owner is responsible for user-generated content
9.1 Hujjatlar (yaratuvchi yuklagan fayllar)
Hujjatlar bo'limi yaratuvchilarga o'z fayllarini (PDF, doc, slayd, jadval va h.k.) ehtiyojmandlarga sotish imkonini beradi. Har bir hujjat uchun yaratuvchi muqova rasm, sarlavha, tavsif, bepul oldindan ko'rish (preview) fayli va to'liq fayl yuklaydi. Foydalanuvchilar to'lov amalga oshirgandan so'ng to'liq faylga ega bo'ladi.
Hujjat egasi (Document owner):
- Yuklangan har bir hujjatning yagona egasi va muallifi — uni yuklagan yaratuvchidir. Platforma hujjatga hech qanday mulkiy yoki mualliflik huquqlariga ega emas.
- Yaratuvchi platformaga hujjatni saqlash, ko'rsatish, sotish va yetkazib berish uchun nomutaqil (non-exclusive), royalti-siz, dunyo bo'yicha cheklangan ruxsat (litsenziya) beradi — bu litsenziya hujjat o'chirilganda yoki yaratuvchi hisobi yopilganda avtomatik bekor bo'ladi.
- Platforma hujjatni o'zining mahsulot yoki marketingi sifatida ishlatish, qayta sotish yoki uchinchi tomonga uzatish huquqiga ega emas — faqat sotuvni rasmiylashtirish va sotib oluvchiga yetkazib berishdan iborat texnik xizmat ko'rsatadi.
Yaratuvchining to'liq javobgarligi:
- Hujjat mazmuni, aniqligi, qonuniyligi, sifati va mualliflik huquqiga rioya qilinishi uchun faqat yaratuvchi javobgar.
- Yaratuvchi yuklagan hujjatga nisbatan zarur barcha huquq, ruxsat va litsenziyalarga ega ekanligini va uchinchi shaxsning huquqlarini buzmasligini kafolatlaydi.
- Boshqa shaxsning mualliflik huquqi, savdo belgisi, patenti, shaxsiy yoki maxfiy ma'lumoti, davlat siri yoki tijorat siri o'z ichiga olgan fayllarni yuklash qat'iyan taqiqlanadi.
- Noqonuniy, zo'ravonlikka chaqiruvchi, diskriminatsion, pornografik, ekstremistik, zararli dastur (malware) yoki firibgarlikka oid kontent yuklash taqiqlanadi.
- Hujjat hajmi 50 MB dan oshmasligi va ruxsat etilgan formatlardan birida (PDF, DOC(X), PPT(X), XLS(X), TXT, RTF, ODT/ODS/ODP, EPUB, ZIP/RAR/7Z) bo'lishi shart.
- Bepul versiya (preview) foydalanuvchiga hujjat haqida halol tasavvur berishi va to'liq versiya bilan mazmunan mos kelishi shart — chalg'ituvchi yoki firibgarlik preview taqiqlanadi.
- Sotib olingan hujjat tavsifda yozilgan natija va sifatga mos kelishi shart; aks holda yaratuvchi mijoz oldida shaxsan javobgar.
Platformaning roli va mas'uliyat chegarasi:
- Oson Test platformasi nashriyot, sotuvchi yoki muallif emas — yaratuvchi bilan sotib oluvchi o'rtasidagi sotuv shartnomasi nazaridan faqat texnik vositachi (saqlash, to'lov, yetkazib berish) hisoblanadi.
- Platforma hujjat mazmunini oldindan tekshirmaydi, tahrir qilmaydi yoki kafolatlamaydi. Sotib olishdan oldin bepul preview fayli va tavsifni diqqat bilan o'rganish foydalanuvchining mas'uliyatidir.
- Platforma hujjat ortida turgan ma'lumotning to'g'riligi, foydaliligi yoki maqsadga muvofiqligi uchun hech qanday kafolat bermaydi.
Shikoyatlar va kontentni o'chirish (takedown):
- Mualliflik huquqi yoki qonun buzilishi haqidagi shikoyatlarni aloqa bo'limi orqali yuborish mumkin. Asosli da'vo tushgan zahoti platforma hujjatni vaqtinchalik yoki butunlay o'chirish huquqiga ega.
- Qonun buzilishi yoki sud organlarining so'rovi bo'yicha platforma hujjat, yaratuvchi va sotib oluvchi haqidagi tegishli ma'lumotlarni vakolatli organlarga taqdim etishi mumkin.
- Takroriy yoki og'ir huquqbuzarlik holatida yaratuvchi hisobi ogohlantirmasdan bloklanishi va hujjat balansidagi mablag' tekshiruv tugaguniga qadar muzlatilishi mumkin.
Zararni qoplash (indemnification):
Yaratuvchi yuklagan hujjat tufayli platformaga, uning xodimlariga, hamkorlariga yoki uchinchi shaxslarga yetkazilgan barcha da'volar, sud xarajatlari, jarima va zararlarni qoplash majburiyati to'liq yaratuvchining zimmasiga yuklanadi. Platforma bunday da'volar bo'yicha yaratuvchiga regress (qaytarish) talabini qo'yish huquqini saqlaydi.
Moliyaviy shartlar:
- Foydalanuvchi to'lovi yaratuvchining hujjat balansiga to'planadi.
- Asosiy balansga o'tkazishda 20%, bonus balansga o'tkazishda 10% komissiya ushlanadi (imtihonlar bilan bir xil tarif).
- Pulni kartaga yechib olishda 5% soliq qo'shimcha ushlanadi.
- Bepul hujjatlar uchun to'lov amalga oshirilmaydi, lekin tarqatish, saqlash va javobgarlik shartlari saqlanadi.
10. Exam Platforms and Restrictions
The ability to take exams on different platforms depends on the exam's settings. The table below lists the platforms available in each case:
| Status | Web (solo) | Bot (solo) | Mobile (solo) | Group play |
|---|---|---|---|---|
| Regular Exam | ✓ | conditional | conditional | ✓ |
| Proctoring Enabled | ✓ | ✗ | conditional | ✗ |
| Paid Exam | ✓ | conditional | conditional | ✗ |
| Proctoring + Paid | ✓ | ✗ | conditional | ✗ |
Legend:
- ✓ — always available
- ✗ — always closed
- conditional — available if the exam creator has enabled the 'Show in Telegram bot' or 'Show in mobile' setting
Proctoring (Monitoring Mode)
- Fullscreen mode: the user must stay in fullscreen mode throughout the exam. Leaving fullscreen automatically ends the exam with a score of 0
- Camera monitoring: the user's face is captured via camera every 5 minutes
- When proctoring is enabled, the exam can only be taken through the website. Telegram bot and group quiz are automatically disabled
- Taking the exam individually in the mobile app depends on the creator's settings
Paid Exams
- Paid exams can be taken individually via the website, Telegram bot and mobile app (subject to the creator's settings)
- Group play (Kahoot-style) is not available for paid exams
- The exam fee is deducted from the user's balance before the exam starts
Group play (Kahoot-style)
- Group play is only available for free exams with proctoring disabled
- Only 'single correct answer' (select_one) questions are used in group play
- Participants join the game through a 6-digit PIN code
- Extra questions are not asked in group play
11. Guruh quiz (Kahoot uslubi)
Group quiz is a live game where all participants answer questions in real time at once. It runs on the website and in Telegram group chats.
Qanday ishlaydi
- The host creates a group quiz session from the exam
- Participants join through a 6-digit PIN code
- Host 'Boshlash' tugmasini bosadi
- Each question is shown with a timer (5–120 seconds)
- The faster the correct answer, the higher the score
- A leaderboard is shown after each question
- Final results are shown at the end
Kim yarata oladi
Any registered user can create a group quiz from any active exam. The following restrictions apply:
- ✗ Group quiz cannot be created for exams with proctoring (fullscreen or camera) enabled
- ✗ Group quiz cannot be created for paid exams
- Only 'single correct answer' (select_one) questions are used. Other question types are skipped automatically
Game types (quiz type)
The game can run in two modes in a Telegram group chat:
| Type | Description | Features |
|---|---|---|
| Polling | Uses Telegram's native quiz poll feature. Questions are sent as Telegram polls. |
|
| Inline | Answer options are shown as inline keyboard buttons. An emoji indicator appears each time a participant answers. |
|
Score calculation
Formula:
points = 1000 × (qolgan_vaqt / umumiy_vaqt)
For a correct answer — between 0 and 1000 points are awarded based on speed
For a wrong answer — 0 points
Example: a correct answer with 12 seconds remaining on a 20-second question = 1000 × 12/20 = 600 points
O'yin holatlari (State Machine)
| Status | Description |
|---|---|
| WAITING | Participants are joining. The host presses 'Start' |
| ACTIVE | A question is being shown, the timer is running. Participants submit answers |
| BETWEEN | The leaderboard is being shown |
| FINISHED | The game has ended. Final results are announced along with the winner |
Ketma-ketlik: WAITING → ACTIVE → BETWEEN → ACTIVE → ... → FINISHED
Ishtirok etish usullari
| Platforma | How to join | Note |
|---|---|---|
| Veb-sayt | PIN-kod va ism kiritish | As a registered user |
| Telegram bot | 'Join' tugmasini bosish | As a Telegram user (registration not required) |
| Mobil ilova | PIN-kod orqali | API orqali |
Ma'lumotlar va maxfiylik
- Group quiz results show only the participant's display name, total score and answer count
- Telegram orqali ishtirok etganda foydalanuvchining Telegram ismi ishlatiladi
- After the group quiz session ends, results are saved, but personal information (phone, email) is not shown to other participants
- The PIN code is valid for one session only and is not reused after the session ends
12. CEFR exams
CEFR exams determine your level on the Council of Europe's language proficiency scale (A1 — C2) and consist of 4 skills: Listening, Reading, Writing, Speaking.
What data we store
- Answers submitted for each skill and the resulting percentage
- Your Writing essay is stored in full text form
- The audio recording you upload in the Speaking section is stored as a file
- The final CEFR level (A1, A2, B1, B2, C1 or C2) and the attempt timestamp
Who can see it
- You: your own result, per-skill score, list of your answers
- The exam creator: all participant answers submitted to their exam (including Writing text and Speaking audio) — needed for manual grading
- Administrators: for troubleshooting and investigating policy violations
13. IELTS exams
IELTS exams consist of Listening, Reading, Writing and Speaking skills; results are reported on the band scale (0–9, in 0.5 increments). Both Academic and General Training types are supported.
What data we store
- Listening and Reading: selected options and text answers submitted per question
- Writing (Task 1 and Task 2): your text is stored in full and graded by a human (grader)
- Speaking (async mode): the audio recording you upload is stored as a file on the server (in the ielts/audio/ folder)
- Speaking (scheduled mode): the booked time and a live video call with the grader (the exam creator) — described in detail in the next section
- Band results: a 0–9 band per skill and an overall band (the average of the 4 skills, rounded to 0.5)
Proctoring (for IELTS)
- If the exam creator has enabled camera monitoring, a webcam snapshot is captured every minute and the system automatically checks for faces
- Snapshots and violation events (no face detected, or multiple faces detected) are stored and visible to the exam creator and administrators
- IELTS proctor snapshots are stored on the server in a separate folder (ielts/proctor_snapshots/) organized by date
- If fullscreen is required, the attempt is terminated automatically when you exit fullscreen
Human grading
- Writing and Speaking skills are graded by a human (usually the exam creator or a grader they have assigned)
- The final overall band is released only after Writing and Speaking have been graded
- The grader reads your full essay and listens to your audio recording. Their comments may appear on the result page
14. Live Speaking video room (WebRTC)
The scheduled IELTS Speaking mode connects you with the exam creator (grader) at the agreed time through a live video call. The call runs in your browser using WebRTC technology.
How it works — technical notes
- The video and audio stream is sent directly between your browser and the grader's browser (peer-to-peer). The server does not record or store these streams
- To establish the peer-to-peer connection, technical signaling messages (SDP, ICE candidates) are exchanged through a server-side cache — these messages are automatically deleted within 1 hour
- The call room opens 5 minutes before the scheduled start and closes 10 minutes after the scheduled end
- The platform does not yet run its own TURN server. Calls may fail for users behind restrictive NATs
What you share
- The video and audio stream from your camera and microphone — the grader sees and hears you. Access to the camera is only possible with explicit browser permission
- Text messages you send in the video room's chat panel — messages are kept in the server cache for 1 hour and then automatically deleted
- The call duration (the booked slot) and the call status (whether it took place or not)
Recording
- The platform does not automatically record the call or store it on the server
- The grader may record the call at their discretion — but must notify you in advance
15. Minors
The platform may not be used by persons under 14 years of age. Users aged 14-18 may use the platform with parental or legal guardian consent.
If we discover that we have collected data from a person under 14, such data will be immediately deleted.
16. Changes to the Policy
We reserve the right to modify this privacy policy at any time. Significant changes will be announced on the platform.
Continued use of the platform after changes constitutes acceptance of the updated terms.
17. Contact Information
General inquiries:
Address:
- Tashkent city, Uzbekistan
- Monday — Friday, 9:00 — 18:00