Privacy Policy
Last updated: 2026-08-16
What we collect, why, and what we do not do.
What we collect from merchants
- Your Telegram name and user id, from signing in
- Your shop: name, products, shipping prices, policies
- Your Bakong account id, used to generate KHQR codes
- Your bot token — stored encrypted
What we collect from customers
- Name, phone number and delivery address, for the order
- Telegram id, if they tap a bot link
- Their order history with that shop
Customer data belongs to the shop. A buyer who orders from two shops is two separate records — one shop can never see the other’s customers.
Bank notifications
If you turn on automatic matching, your bot reads the notifications in your ABA group. It reads only messages from the ABA bot. It never posts there and it does not read your conversations. We store the amount, the payer name and the transaction id, so we can match the payment and not count it twice.
AI features
When you use an AI feature — Facebook import, image editing, voice transcription, support answers — that content is sent to Google Gemini to be processed. We do not use your data to train models. If you do not use AI features, nothing is sent.
What we do not do
- We do not sell your data
- We do not use one shop’s customers to help another shop
- We do not message your customers on our own behalf
How long we keep it, and your rights
We keep data while the shop is active. When a shop closes we delete it within 90 days, except where law requires us to keep records.
You can export everything as CSV at any time, and you can ask us to delete it. Customers should ask through the shop they bought from.
Who processes data for us
- Telegram — messages and sign-in
- Cloudflare — images and site delivery
- Google — AI features
- Our servers are in Singapore, the closest region to Cambodia
Contact
Privacy questions or deletion requests: [email protected]