Privacy policy

Account data: name, phone number, email address and a password hash. The phone number is confirmed by an SMS code.

For sellers, additionally: shop name, description, links, image files, and the last four digits of the card used for payouts.

Activity data: orders, licences, reviews, questions and disputes. For security: sign-in times, IP address and browser type.

To run your account, fulfil an order, issue a licence and open a download. To decide refunds and disputes.

To catch fraud and rule-breaking: sign-ins, IP addresses and download counts are watched for that purpose.

To send you notices: order status, moderation outcome, news on a dispute. Marketing email is sent only with your consent and can be switched off at any time.

Payment providers (Click, Payme) — what they need to take the payment. The Platform does not store a full card number.

Technical providers: hosting, file storage, email and Telegram delivery — only as far as providing the service requires.

Authorities, where the law requires it. We do not sell your data and do not pass it to third parties for advertising.

A seller sees the sale but not the Buyer's full name: the name is shown shortened. Phone numbers and email addresses are not passed to sellers.

If you leave a review, your name is shortened the same way and shown publicly. The text of the review appears as you wrote it — please keep personal details out of it.

A session cookie remembers that you are signed in; without it signing in cannot work. Your language and theme are stored in the browser too.

Counting views sets a technical cookie on a product page for a day, so one reader is not counted several times. We use no third-party advertising cookies.

Account data is kept while the account exists. Records of orders, payments and licences are kept after an account is deleted, for as long as the law requires.

Sessions and security logs are kept for a limited time and then deleted.

You may see your data, correct it and ask for it to be deleted. Name, email and phone are yours to change in settings.

To delete an account or get a copy of your data, write to support@kmarket.uz. We answer within a reasonable time.

Which notices you receive is yours to switch on and off in settings.

Passwords are stored as hashes, and the list of sessions lets you end a sign-in from a device that is not yours.

Administrative actions are written to a log, and access to files is granted through temporary links. Even so, no system is perfectly safe: do not reuse your password on other sites.

The data controller is MYSTAR MCHJ (tax ID: 311854086), at Republic of Uzbekistan, Samarkand region, Ishtikhon district. Privacy questions: support@kmarket.uz. If this policy changes, the new version is published on this page.