ISF ad measurement update — 18 September 2026
This update replaces earlier ISF ad measurement wording. When the service is enabled, ISF ad measurement is allowed automatically for verified students entering ISF who have not already chosen No thanks. Existing No thanks choices remain off. SAMI sends Meta one confirmation of ISF entry, a hashed version of the verified phone number and browser information to measure ISF advertising. Hashes are matching identifiers, not anonymous data. The automatic default is recorded separately from a student's explicit choice. Students can choose No thanks using Change ad measurement choice in ISF. This stops unsent reports but cannot recall a report Meta has already received. Portal access is the same either way. General visitor and page-view analytics remain disabled. No advertising cookies or Meta browser pixel are installed; names, documents and study details are not shared. SAMI removes queued matching data after delivery, final failure or expiry and retains the setting and delivery record.
Published version: 10 September 2026.
1. Why other services are involved
SAMI's services use technology suppliers and, for your chosen route, institutions and other service providers. Their involvement depends on the action you request. This notice explains the principal categories; it does not authorise every provider to receive your entire record.
Some suppliers operate a function on SAMI's instructions. Others, such as universities, authorities, Telegram and payment providers, may decide independently how to use information for their own service and legal duties. The actual role depends on the arrangement and activity, not simply the word “partner”. Read this notice with the Privacy Policy and your accepted order.
2. Institutions, authorities and service providers
For an authorised application, SAMI may provide necessary details and documents to the selected university, pathway or admissions organisation and the partners needed for that route. Visa or related support may involve an embassy, consulate, visa centre or government authority. They set their own admission, scholarship, visa and document requirements and make their own decisions.
An agreed additional service may involve a translator, notary, apostille authority, insurer, accommodation provider, courier or other named supplier. Before a commitment, check the supplier, scope, price, cancellation conditions and whether SAMI is providing the service or arranging it. An external provider's rules do not remove SAMI's responsibility for its own agreed work.
3. Technology providers in the reviewed service
- Amazon Web Services: infrastructure, media or private-file storage, and the Rekognition profile-photo suitability check. The photo check transmits the uploaded image for face detection. General file storage and photo analysis are different uses and must each have an appropriate legal basis and safeguards.
- MongoDB/Atlas: database technology used by the backend. The production location and provider arrangements remain pending the data-protection review described in the Privacy Policy.
- Resend: delivery and handling of configured email, including relevant managed application-mailbox functions and delivery status. Addresses, message contents and attachments may be involved depending on the email.
- Telegram: bot messages, sign-in, native phone confirmation and the mini-app environment. Telegram receives information as a platform as well as sending SAMI the information needed for the chosen interaction. The mini-app continues to use SAMI's role and account controls.
- Google: identity information when you choose Google sign-in. Choosing Google sign-in does not grant SAMI general access to your personal mailbox.
- Eskiz and configured phone-verification services: delivery and verification of phone messages or calls where enabled, including account or parental-approval steps. The recipient number and relevant verification or notification content are used for delivery.
- Payme/Paycom and relevant banks: checkout, payment status, refunds and settlement. Verify the payee and amount before payment. SAMI keeps relevant transaction records; it does not need your online-banking password or one-time payment code.
- Cloudflare Turnstile: form-abuse prevention and security checks, which involve connection and browser information. A security check is different from optional audience analytics.
- Meta: official Facebook or Instagram lead-form integration where you submit a SAMI campaign form. SAMI can receive the submitted answers and lead/source identifiers. This is separate from installing a Meta advertising pixel on SAMI pages.
- Configured maps, media, scheduling or linked external tools: the external service can receive connection information or details you enter when it loads or when you open it. Check its notice and avoid supplying unrelated sensitive information.
This list is a service notice, not a claim that every integration is active on every page or in every account. Additional providers should be identified before a new material use. Optional SAMI usage analytics are disabled; the former IP-geolocation lookup used for those analytics is not a reason to send new visitor data.
4. Agents, partners and exhibitors
An agent may assist with a student's case under an approved relationship. A university representative or exhibitor may receive information through an authorised application or the event's stated sharing process. A QR scan does not give every organisation access to passports, finances or private messages.
Review a sharing or linking request before approving it. Where an organisation uses received information independently, its own privacy notice and obligations apply. You can ask SAMI about the approved scope and ask the recipient to stop inappropriate contact. Revocation of future access does not automatically delete every lawfully retained external record or exported copy.
5. International handling and security
Overseas institutions and technology providers may handle information outside Uzbekistan. The detailed overseas-hosting and photo-processing notice remains pending a data-protection review. The production locations, provider arrangements and applicable local-storage and overseas-processing requirements have not yet been fully verified. Use of an international supplier or acceptance of these terms is not an assurance that those requirements have been satisfied. See Privacy Policy section 9 and contact us about the arrangements for a particular service.
Use official service links and payment instructions. Never give a provider or a person claiming to be SAMI access to another user's account. If a message, checkout, QR request or invoice looks wrong, stop and contact SAMI through info@sami.uz or +998 71 208 3222.
6. Problems with an external service
Contact SAMI for problems with our coordination, instructions, payments handled by us or agreed work. Contact the provider for a decision or function it controls, such as a bank transaction, university admission or Telegram account access. We will identify the responsible party and help within the scope of our service.
A provider outage or refusal does not automatically remove your rights against SAMI. Refunds are assessed under the Refund & Cancellation Policy, the accepted order and applicable law. The Complaints Procedure explains how to request a review.