Privacy Policy

1. Information we process

• telephone number and other information provided during registration or when contacting us;
• account and store data, including name, identifier, email address, and credentials for the Kaspi Seller Cabinet;
• information about products, prices, orders, pickup points, competitors, and automation settings;
• Telegram chat identifiers and notification settings;
• technical information, including IP address, cookies, browser and device details, dates and times of actions, error logs, and bot operation logs;
• other information voluntarily provided through the Service or support.

We do not ask users to provide special categories of personal data. Users must not provide information that is not required for the operation of the Service.

2. Purposes and methods of processing

We process data to:

• create and maintain an account and respond to submitted requests;
• connect stores, synchronize products, and apply the configured price change rules;
• receive order information and send notifications to selected Telegram chats;
• maintain security, prevent abuse, diagnose errors, and restore operation;
• comply with legal requirements and protect the lawful rights of users and the Operator.

Processing may include the collection, recording, organization, storage, updating, use, transfer, anonymization, blocking, and deletion of data, including by automated means.

3. Data sources and integrations

We receive data from the user, their browser, the connected Kaspi Seller Cabinet, and Telegram. To operate the Service, information may be transferred to hosting, database, and technical infrastructure providers, as well as to Kaspi and Telegram, only to the extent necessary.

Third-party services operate under their own rules. Users are responsible for confirming that they are authorized to provide access to a store, orders, customer data, and Telegram chats. We do not sell personal data or transfer it to third parties for their independent advertising purposes.

4. Cross-border transfers and storage location

Certain infrastructure or integration providers may process data outside the Republic of Kazakhstan. Such transfers are made where the consent required by law or another lawful basis exists. Personal data databases are located and processed in accordance with the mandatory localization and protection requirements of the laws of the Republic of Kazakhstan.

5. Retention period

Data is retained while the account exists and for as long as it is needed for the purposes listed above. After use of the Service ends, data is deleted or anonymized within a reasonable period, except for information that must be retained by law, to resolve disputes, maintain security, or verify operations. Backup copies may remain until their scheduled replacement.

6. Data security and user responsibilities

We apply reasonable organizational and technical safeguards. However, no method of transmitting or storing data can guarantee absolute security. Users must use a strong password, restrict access to their account, and immediately report any suspected compromise.

7. User rights

Subject to the laws of the Republic of Kazakhstan, a user may:

• obtain information about the existence and contents of their personal data;
• request correction, blocking, or deletion where the data is inaccurate, unlawfully obtained, or no longer needed;
• withdraw consent where this does not conflict with the law or prevent the performance of an obligation;
• apply to the competent authority or a court to protect their rights.

A request may be submitted through the contact form on the website. To protect data, we may ask for confirmation of identity and connection to the relevant account. Withdrawal of consent may make further provision of the Service impossible.

8. Cookies

The Service may use technically necessary cookies for authentication, language and theme preferences, security, and stable operation. Restricting cookies in the browser may make certain functions unavailable.

9. Third-party data

If a user provides data about customers, employees, or other individuals, the user guarantees that a lawful basis exists and must provide those individuals with the necessary information about the processing. A user must not connect another person's store or Telegram chat without the owner's permission.

10. Changes to this Policy

We may update this Policy when the Service or applicable law changes. A new version takes effect on the date it is published on this page. We may additionally notify users through the Service of material changes.