Privacy Policy

Version of 24 September 2026

This Policy explains what personal data Level Up Ltd. (the "Company") collects and how it processes that data when you use the Level Up platform: the web portal app.alataulevelup.kz and the Level Up mobile app for Android and iOS (the "Platform").

Data is processed in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection". By using the Platform, you confirm that you have read this Policy. The Russian version of this Policy prevails.

1. Data controller

  • Level Up Ltd., a private company registered under the laws of the Astana International Financial Centre, BIN 260240900918
  • Registered address: 55/23 Mangilik El Ave., Yesil District, Astana, Z05T3D8, Republic of Kazakhstan
  • Email for personal data requests: info@alataulevelup.kz

2. What data we collect

Data you provide:

  • Account data: email and password. The password is stored only in encrypted form.
  • Profile: first and last name, photo, phone number, country and city, company, position, LinkedIn or website link, account type, interests.
  • Content: applications for investment, pilot projects, partnerships and residency, files attached to them, forum posts and comments.
  • Messages you send to us and support correspondence.

Data collected automatically:

  • Technical data: IP address, device type and model, operating system and browser version, interface language.
  • Cookies and local storage — to keep you signed in and remember your language and settings.
  • Usage statistics: which pages were opened and for how long (via Google Analytics).

We do not collect device location, contacts or any data beyond what is listed in this section.

3. How we use data

  • Registration, sign-in and account protection.
  • Running the Platform: profile, feed, forum, opportunities and partner catalog.
  • Reviewing your applications and contacting you about them.
  • Notifications and newsletters about the Alatau City ecosystem. You can unsubscribe in your profile settings.
  • Improving the Platform based on usage statistics.
  • Security, fraud prevention and legal compliance.

Legal grounds: your consent, performance of the User Agreement, the legitimate interest of the Company and the requirements of the laws of the Republic of Kazakhstan.

We do not sell personal data or use it for advertising.

4. What other users can see

Every user has a public profile with a Digital ID that anyone with the link can open. It shows your name, photo, account type, registration date and interests, as well as your country, city, phone number, company, position and LinkedIn or website link if you have provided them. Your email is never published.

Forum posts and comments are visible to other users of the Platform.

To remove information from your public profile, clear the corresponding fields in the Profile section.

5. Who we share data with

We share data only to the extent needed to run the Platform:

  • Alatau City ecosystem partners — the details of an application you addressed to them, only to review it.
  • Infrastructure providers: cloud servers and hosting, including Vercel Inc. (USA), which delivers the web interface.
  • Google LLC (USA) — Google Analytics, for usage statistics.
  • Email services — to send verification codes and notifications.
  • Government authorities — only where required by the laws of the Republic of Kazakhstan.

Contractors process data on our behalf and may not use it for their own purposes.

6. Where data is stored

Databases containing personal data are located in the Republic of Kazakhstan.

Technical data and usage statistics may be processed outside Kazakhstan by Vercel and Google Analytics. This cross-border transfer is limited to what is needed to run the Platform and follows the procedure set by the laws of the Republic of Kazakhstan.

7. How long we keep data

  • Account and profile data — while the account is active.
  • After account deletion, data is deleted or anonymized within 30 days.
  • Backups — up to 90 days, after which they are overwritten.
  • Applications — up to 3 years from submission.
  • Records of consent to personal data processing — 5 years.
  • Data with a retention period set by law — for that period.

8. How we protect data

  • Data is transmitted only over a secure HTTPS connection.
  • Passwords are stored as hashes, never in plain text.
  • In the mobile app, sign-in data is kept in the device's secure storage.
  • Employee access to data is limited to what their work requires.
  • We monitor suspicious activity and protect the Platform from automated attacks.

9. Your rights

You can:

  • find out what data we process about you and get a copy of it;
  • correct or complete your data — in the Profile section or on request;
  • delete your account — in Profile → Settings or on request;
  • withdraw your consent to personal data processing;
  • unsubscribe from newsletters — in your profile settings.

To exercise a right, email info@alataulevelup.kz from the address you registered with. We will reply within the time limits set by the laws of the Republic of Kazakhstan.

10. Cookies

Cookies and local storage keep you signed in, remember your language and settings, and collect usage statistics. If you disable cookies in your browser, signing in to the Platform may not work.

11. Age restrictions

The Platform is intended for people aged 18 and over. We do not knowingly collect data from minors and delete such data if we become aware of it.

12. Changes to this Policy

New versions are published on this page. We notify users of material changes at least 7 days before they take effect. The date of the current version is shown at the top of this page.

How to delete your account