Privacy policy

Effective date: 10 September 2026
Last updated: 28 September 2026

1. General provisions

This Privacy Policy sets out how the data of users of ЕГСВ 2.0, the unified citywide video monitoring system, is collected, processed, used, transferred, stored and protected.

This Privacy Policy applies to the information website info.egsv2.kz and the web interface of the ЕГСВ 2.0 system, as well as to the ЕГСВ 2.0 mobile applications for iOS and Android (collectively, the “Service”).

The information website info.egsv2.kz presents the system and serves as a way to contact MegaCam; it has no registration and no personal accounts. The web interface and the mobile applications are intended for working with the system: viewing video cameras and managing barriers and access lists at the facilities the user has access to. Users sign in to them with an account issued by the facility operator or the system administrator.

The developer of the Service, the owner of the information website and the operator of the personal data received through the information website is:

Organisation

Megakam Limited Liability Partnership

BIN

140740004233

Address

Republic of Kazakhstan, Karaganda, Privokzalnaya Street, building 10

Director

Vladimir Viktorovich Zhukov, acting under the Charter

Telephone

8(7212)922–191

Email

info@megacam.kz

The roles of the parties in the processing of data in the web interface and the applications are described in section 2.

By sending a request through the form on the information website, the visitor confirms that they have read this Policy and agree to the processing of the data they have provided.

2. Roles of the parties and scope of the Policy

The data processed by the ЕГСВ 2.0 system itself during operation — video recordings, images of faces, registration plates captured by cameras, video analytics events — is not the subject of this Policy. The owner and operator of such data is the customer. In that case Megakam LLP acts as the developer and supplier of the software and processes the data on the customer’s instructions, to the extent defined by the contract. The procedure for processing such data is determined by the customer’s documents, the terms of the contract and the legislation of the Republic of Kazakhstan.

The ЕГСВ server to which the web interface and the mobile applications connect is operated by the customer (the facility operator). The data that the user transfers to it (section 4) is processed in the interests of the customer; Megakam LLP processes it on the customer’s instructions to the extent defined by the contract. This Policy describes what data the Service transmits, what it stores on the user’s device and why.

The Service contains links to external resources. Following such a link takes the user outside the scope of this Policy: the processing of data on a third-party resource is governed by that resource’s own terms.

3. Information website data

3.1. Request data

The feedback form on the website asks for two fields:

1. the name the visitor has provided;
2. the telephone number.

The form has no other fields. The data is sent to the server only after the “Send” button is pressed.

3.2. Data from enquiries through other channels

A visitor may contact Megakam LLP by telephone or email. In that case what the visitor has reported themselves is processed: name, telephone number, email address, organisation name and the content of the enquiry.

3.3. Technical data

When a browser requests the website, the server and network software may record in service logs:

1. the IP address;
2. the date and time of the request;
3. the address of the requested page;
4. information about the browser and the operating system that the browser reports itself;
5. the address of the referring page, if the browser passed it.

Such records are created automatically, are needed for the operation and security of the website and are not linked to a particular visitor.

3.4. Cookies and analytics

The information website does not set cookies and does not use visit counters, web analytics systems, advertising or tracking scripts.

Fonts, images and video are served from the same domain as the pages: while the website is being viewed, no requests are made to third-party content delivery networks.

3.5. Data the information website does not collect

The information website does not collect:

1. the individual identification number, passport details or information from other identity documents;
2. the residential address;
3. payment and banking details, information about income and property;
4. biometric data — images of the face, fingerprints, voice samples;
5. health information;
6. information about ethnicity, faith, political and religious beliefs or membership of public associations;
7. information about criminal records or prosecution;
8. device location data;
9. photographs, video recordings, audio recordings and files belonging to the visitor;
10. the content of correspondence, search history or the list of installed applications;
11. passwords and other credentials: the information website has no registration and no personal accounts;
12. behavioural records — cursor movements, clicks, session recordings, heat maps;
13. a browser fingerprint: information from service logs is not combined into a single visitor identifier;
14. information about visits to other websites and cross-site tracking data;
15. advertising identifiers and data for showing personalised advertising;
16. information about the visitor from third-party sources — social networks, open databases, data brokers.

4. ЕГСВ 2.0 applications and web interface

This section describes how data is processed in the ЕГСВ 2.0 mobile applications for iOS and Android and in the system’s web interface. They are used to view video cameras, operate barriers and manage access lists at the facilities the user has access to.

4.1. Data sent to ЕГСВ servers

This data is the same on every platform: the applications and the web interface all use the same ЕГСВ application programming interface.

1. Username and password at sign-in. The server returns an access token used to sign subsequent requests. The password is not stored.
2. Two-factor authentication code, where enabled by the administrator for the server or the account.
3. Commands and requests: opening and closing a barrier, moving a camera, requesting live video and archive fragments for a selected period. The server records these as actions of the account.
4. Vehicle licence plate numbers that the user adds to a facility’s access lists, together with the expiry date for temporary passes.
5. Parameters of a camera being added: name, stream address, description and coordinates, where the user provides them.

No other user information is sent to the servers.

4.2. Data that stays on the user’s device

1. The access token and the quick-unlock code are stored on the user’s device. In the iOS application they are kept in the system Keychain. The Android application stores only the access token, in the application’s own storage, which other applications cannot access; it has no quick-unlock code. In the web interface the session is kept by the browser.
2. Downloaded archive fragments and their index — in the application’s storage on the device.
3. Issued barrier access links. The iOS application keeps a local record of what has been issued. The server keeps no list of such links, and deleting the record does not revoke the access itself, which ends when the period set at issue expires.
4. Technical log. The iOS application records network requests and video streams. The log is kept on the device and is never sent automatically; the user may share it with support manually. The log contains a valid access token, so it should be shared only with ЕГСВ support.
5. Settings — selected language, appearance and account details shown in the profile.

This data is removed together with the application when it is deleted.

4.3. Access to device capabilities

The mobile applications request permissions only when needed and only for the purposes listed. The exact set of permissions depends on the operating system; the purposes they are requested for are given below.

4.4. Video

Camera video and archive recordings are delivered from ЕГСВ servers and played in the application or in the browser. Video is not stored on the device except for fragments the user downloads deliberately. The image from the user’s own device camera is not used and is not transmitted anywhere.

4.5. What we do not do

For the Service as a whole:

1. we do not share user data with third parties and do not sell it;
2. we do not use user data for advertising;
3. we do not collect contacts, messages, health information or payment data.

Specifically for the iOS mobile application:

1. it uses no web analytics, advertising networks or tracking tools;
2. it does not access the device’s advertising identifier;
3. it does not track the user across other applications or websites.

Information about cookies and similar technologies is given in section 3.4 for the information website and in section 4.2 for the web interface.

4.6. Accounts and data deletion

Accounts are created and deleted by the facility operator or the system administrator; self-registration is not available. To delete an account and the data associated with it, please contact the facility operator or ЕГСВ support using the details given in this Policy.

Downloaded files and the technical log can be deleted by the user inside the application or by removing the application.

5. Purposes of processing

Data is processed in order to:

1. answer a request left through the form on the information website;
2. contact the visitor on the telephone number provided;
3. select a solution and prepare a commercial offer;
4. answer an enquiry received by email or telephone;
5. authenticate the user of the web interface and the applications;
6. carry out the user’s commands — showing video and the archive, controlling cameras and barriers, maintaining access lists;
7. record the actions of accounts for access control and incident review;
8. provide technical support to users;
9. ensure the operation and security of the Service;
10. detect and investigate technical incidents;
11. comply with the requirements of the legislation of the Republic of Kazakhstan.

The data is not used to show personalised advertising, is not passed to advertising organisations and is not sold.

The Service runs no mailing lists: a request is grounds for answering it, not for adding the visitor to a list of recipients.

6. Legal grounds for processing

Processing is carried out on the basis of:

1. the consent of the visitor given when the request is sent through the information website;
2. the need to take steps at the visitor’s request before a contract is concluded;
3. the contract between Megakam LLP and the customer — for data transmitted through the web interface and the applications;
4. the legitimate interests of Megakam LLP — to answer the enquiry and to ensure the security of the Service;
5. the requirements of the legislation of the Republic of Kazakhstan.

7. Consent and its withdrawal

Consent to the processing of request data is given by pressing the “Send” button in the form on the information website; a link to this Policy is placed next to the button. There is no other way to submit your data through the information website.

A visitor may withdraw consent at any time — by writing to info@megacam.kz or calling 8(7212)922–191.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, processing stops and the data is deleted, except where storage is required by law.

The user’s access to the web interface and the applications ends when the facility operator or the system administrator deletes or blocks the account (section 4.6).

8. Who has access to the data

Data received through the Service may be available to:

1. authorised employees of Megakam LLP who work with enquiries and provide technical support;
2. the customer (the facility operator) and the administrators it has appointed — with regard to accounts, actions and access lists at its facilities;
3. suppliers of the server, network and cloud infrastructure hosting the Service and corporate email — to the extent necessary for them to provide their services;
4. state authorities in the cases provided for by law.

Technical suppliers are not entitled to use this data for their own advertising or marketing purposes.

9. Place of storage and cross-border transfer

Data received through the information website is held on servers used by Megakam LLP within the territory of the Republic of Kazakhstan.

Data transmitted through the web interface and the applications is held on ЕГСВ servers operated by the customer within the territory of the Republic of Kazakhstan; the data listed in section 4.2 is held on the user’s device.

The Service does not carry out any deliberate transfer of data outside the Republic of Kazakhstan.

10. Retention periods

Request data is kept for as long as is needed to answer the enquiry and to carry out the subsequent work on it, and where a contract is concluded — for the period established by the contract and by law for keeping the relevant documents.

Account data, action logs and access lists are kept on ЕГСВ servers for the period determined by the customer and the contract.

Data on the user’s device is kept until the user deletes it or until the application is removed.

Server service logs are kept for a limited technical period and are then overwritten.

Data that is no longer needed is deleted or anonymised. Backup copies may be kept for a limited technical period after the data has been deleted from the main system.

11. User rights

A user has the right to:

1. find out what data about them is being processed;
2. require that inaccurate data be corrected;
3. require that the data be deleted or that its processing be restricted;
4. withdraw consent;
5. appeal against the operator’s actions to the authorised body for the protection of personal data.

Requests concerning data from the form and from enquiries should be sent to info@megacam.kz. It is worth stating in the request the name and telephone number given in the form: without them it is impossible either to find the data or to be sure that the request comes from its owner.

Requests concerning the data of a web interface or application account should be sent to the facility operator or to the ЕГСВ support service using the contact details in section 15, stating the username and the facility.

The request is considered within the period established by the legislation of the Republic of Kazakhstan.

Deletion may be restricted where the storage of data is necessary to comply with legal requirements, to keep mandatory records, to resolve disputes or to protect the legitimate interests of the parties.

12. Data protection

Organisational and technical measures are applied:

1. transmission of data over a secure HTTPS connection with TLS;
2. sign-in with an account, with the option of two-factor authentication;
3. signing of requests with an access token instead of re-sending the password;
4. keeping the access token in storage that other applications cannot access: in the iOS application, together with the quick sign-in code in the Keychain secure storage; in the Android application, in the application’s own storage;
5. separation of access rights to enquiries and facilities;
6. limitation of the group of employees who work with personal data;
7. protection of the server and network infrastructure;
8. backup;
9. software updates.

Despite the measures taken, no method of transmitting or storing information guarantees absolute security.

13. Data of minors

The Service is addressed to representatives of organisations and is not intended for children. No deliberate collection of data about minors is carried out. If it turns out that data about a minor has been received through the form without proper legal grounds, it will be deleted.

14. Changes to the Policy

The Policy may be changed in the event of:

1. a change in the composition of the data collected;
2. a change in the set of features of the Service, including the release of new versions of the applications;
3. the addition of new technical suppliers;
4. a change in legal requirements.

The current version is always published at info.egsv2.kz/privacy, and the date of the last update is given at the beginning of the document. Continued use of the Service after a new version has been published means that the changes made have been reviewed, unless a different procedure is established by law.

15. Contacts

For questions about the processing, amendment or deletion of data, as well as to reach the ЕГСВ support service, please contact:

Organisation

Megakam Limited Liability Partnership

BIN

140740004233

Address

Republic of Kazakhstan, Karaganda, Privokzalnaya Street, building 10

Director

Vladimir Viktorovich Zhukov

Telephone

8(7212)922–191

Email

info@megacam.kz

Company website

info.megacam.kz