> This translation is provided for convenience only. The legally binding version is the Russian text; in case of any discrepancy, the Russian version prevails.
Edition of 2 October 2026
Effective date: 2 October 2026
1. Purpose
This Register contains the list of external services that may actually receive data when ADVIN is used. The operator is Smart Advertising Systems LLP, BIN 260640021998.
Services that are planned but not connected are not included in the public Register. When a new recipient is connected, the Register and the related documents are updated before any data transfer begins, and new consent is requested where required by law.
2. Active external services
| Service | Legal entity and country | Function | Data transferred | Place of processing/storage | Cross-border transfer |
|---|---|---|---|---|---|
| PS.KZ | Internet Company PS LLP, Republic of Kazakhstan, BIN 080840007694 | Server infrastructure and hosting of the ADVIN production database | Personal and other user data contained in the production database | Republic of Kazakhstan | Not declared for the main database |
| Google OAuth | Google LLC, USA | Sign-in and registration via Google at the User's choice | Google identifier, email, name within the scope of the permission granted, OAuth token and technical information | Google infrastructure outside the Republic of Kazakhstan, including the USA | Yes |
| Resend | Plus Five Five, Inc., USA | Delivery of confirmation codes and service emails | Recipient's email, name where included in the message, code, notification content and technical delivery information | USA and the infrastructure of engaged sub-processors | Yes |
| PayLink.kz | PayLink.kz LLP, Republic of Kazakhstan, BIN 230740018193 | Subscription payment acceptance; tokenization and repeat charges where separate consent to auto-renewal has been given | Internal user identifier, order number, plan/description, amount, currency, payment status and identifier; the User enters card details on the PayLink.kz payment form | Infrastructure of PayLink.kz, banks and payment systems; processing and storage countries are determined by the contract and the respective participants’ policies | Possible where international payment systems and banks participate, in accordance with applicable law and payment data processing terms |
| Apple App Store / StoreKit | Apple Distribution International Ltd., Ireland, and other applicable Apple entities | In-app purchases, auto-renewal, verification of transactions and Subscription status | Identifiers of the application, product, transaction and original transaction, purchase/expiry/renewal dates, status and data signed by Apple; payment details are processed by Apple | Ireland, the USA and other locations of Apple infrastructure | Yes |
| Expo Push Service | 650 Industries, Inc. (Expo), USA | Delivery of push notifications via FCM and APNs | Expo Push Token, project identifier, notification text and technical payload, delivery status | USA; push content is processed for delivery and passed to FCM/APNs | Yes |
| Firebase Cloud Messaging (FCM) | Google LLC, USA, and applicable Google affiliates | Delivery of push notifications on Android | Registration/installation token, application and project identifiers, notification text and technical payload, delivery information | Global Google infrastructure, including the USA | Yes |
| Apple Push Notification service (APNs) | Apple Inc., USA, and applicable Apple affiliates | Delivery of push notifications on iOS | Device push token, application identifier, notification text and technical payload, delivery information | Apple infrastructure outside the Republic of Kazakhstan | Yes |
3. Transfer restrictions
By default, the following are not transferred to external services: images of identity documents, Profile Verification documents, IIN, identity document details, private chats in full, passwords, secret keys, full bank card details, and materials for AI training.
An exception is permitted only where there is a documented necessity, a lawful basis, a risk assessment, contractual safeguards, and a prior update of the applicable documents.
4. Managing the Register
ADVIN reviews the Register before connecting a new service and at least once a year. For active services, the purpose, data composition, place of processing, cross-border transfer and protective measures are taken into account.
Questions regarding the transfer and processing of personal data may be sent to privacy@advin.kz.
The Kazakh and Russian versions of this Register have equal force. The English version is provided for convenience; in the event of a discrepancy, the version in the language prescribed by mandatory legislation shall apply.