Privacy policy

What we collect

• When you order: your name, phone number, delivery address (city or province, district, khoroo, street address), any note you add, the products you ordered and how you pay.
• When you sign in: your email address. If you use Google sign-in we receive your email and name from Google. "Continue as guest" asks for no personal details.
• In chat: the messages you send us in the website chat or on Facebook Messenger.
• Technical data: server logs such as your IP address, used to keep the site secure and to stop abuse.
• In your browser: we keep your sign-in and your cart in the browser's storage. We do not use advertising trackers or third-party analytics.

Why we use it

To record and deliver your order, confirm your payment, send you order updates, answer your questions and complaints, and protect the shop from fraud and misuse.

We do not sell your information, and we do not give it to anyone for their own advertising.

Who it is shared with

Some services are needed to run the shop:

• QPay: to take your online payment (order amount and invoice number).
• Vercel (website hosting) and Neon (database, servers in the USA): your data is stored on their servers.
• Telegram and email: when an order arrives, the shop owner receives its details (name, phone, address, products). We email you about your order if you gave a real email address.
• Chat assistant: the messages you write in the chat are processed by an AI service (OpenAI) to prepare replies. Messages sent through Facebook Messenger also pass through Meta's platform. Please do not write card numbers, passwords or other secrets in the chat.
• Google: only if you choose Google sign-in.
• Authorities: only where the law requires it.

How long we keep it

Order records are kept for as long as we need them for accounting and support. Guest accounts with no orders are deleted automatically after 30 days. Chat conversations are deleted on request.

Your choices

You can see and edit your details under Account → Personal details. To have your data deleted, see the "Delete my data" page or email us and we will remove it, keeping only what we are required to keep for accounting.

Security

Passwords are stored hashed, never in plain text. The site is served over HTTPS. Only the shop owner can sign in to the admin area.

Contact

Questions about your data: phone 86185769, email ganturtuvshinsaihan@gmail.com.