Privacy policy

What we collect

Contact details from requests (name, email, Telegram), store administrator accounts and technical API request logs. Store customers' data is processed on behalf of the store and is not used by the platform for its own purposes.

How data is stored

Each store's data is isolated at the application and database level (PostgreSQL Row Level Security). Payment and integration keys are encrypted at rest (AES-256-GCM). Access to production data is restricted.

Who we share with

Payment gateways and suppliers — only to the extent needed to fulfill an order. We do not sell data or share it with third parties for advertising.

Requests and deletion

Data questions and deletion requests go through the contact form; we reply within 24 hours on business days.