Privacy Policy

The TG Shop Constructor platform (the "Platform") operates internationally and serves users from many countries. This Policy describes what personal data the Platform collects, for what purposes and on what grounds it is processed, and the rights of data subjects.

The Policy has been prepared with regard to generally recognized data protection principles and applicable personal data legislation, including, among others: Regulation (EU) 2016/679 (GDPR) — for users from the EU/EEA; Federal Law No. 152-FZ "On Personal Data" — for users from Russia; the UK GDPR and the Data Protection Act 2018 — for users from the United Kingdom; the CCPA/CPRA — for residents of California (USA); the Lei Geral de Proteção de Dados (LGPD) — for users from Brazil; PIPEDA — for users from Canada; the KVKK — for users from Türkiye; as well as any other applicable national data protection law of the user's country of residence. If the applicable law of your country grants you more rights than described here, that law prevails.

1. Data we collect

Seller account data: email address, name, password hash, sign-in history.

Buyer data (provided when ordering or in chat): name, phone number, Telegram account, delivery address, order contents and amount.

Technical data: browser fingerprint, GeoIP country, cookies and localStorage, storefront visit events.

Communications: support messenger correspondence, leads and customer cards created during service.

2. Purposes and grounds of processing

• providing access to the dashboard, stores and paid services (contract performance);
• order fulfillment and status notifications (contract performance);
• security, fraud and abuse prevention (legitimate interest);
• service improvement and anonymous statistics (consent);
• fulfilling requests of authorized bodies to the extent permitted by applicable law (legal obligation).

We follow the principles of data minimization and purpose limitation: only the data needed for the Platform to operate is collected, and only for those tasks.

3. Storage and protection

Data is stored while the account or store exists, or until the terms established by applicable law expire. Organizational and technical safeguards are applied: password hashing, access restrictions, operation logging. After account deletion, data is deleted or anonymized unless applicable law requires otherwise.

4. Disclosure to third parties and international transfers

• Payment providers (Stripe, YooKassa, cryptocurrency processors) — only the data necessary to process payments; card details are never delivered to or stored by the Platform.
• Telegram Bot API — for sending notifications and bot messages.
• Other disclosures — only upon request of authorized bodies (to the extent permitted by applicable law) or with the data subject's separate consent.

Servers and partner services may be located in different countries. Cross-border data transfers rely on recognized legal mechanisms — adequacy decisions, Standard Contractual Clauses (SCCs), Binding Corporate Rules or other safeguards provided for by applicable law — together with the protective measures described above.

5. Data subject rights

Depending on the applicable law, you may: request access to your data and a copy of it; demand its rectification, erasure ("right to be forgotten") or restriction of processing; receive your data in a machine-readable format (portability); object to processing based on legitimate interest; withdraw your consent at any time; lodge a complaint with the data protection authority of your country.

Requests can be sent through the Platform support chat. Response time is up to 10 business days, unless applicable law sets a different term. Rights may be limited only in cases expressly allowed by applicable law (for example, to protect the rights of third parties or security).

6. Children's data

The Platform is not intended for persons under 16 years of age (or a higher age where established by applicable law). We do not knowingly collect children's data; if such data is discovered, it is deleted.

7. Cookies

The Platform uses cookies, localStorage and PWA cache for sessions, language, cart and analytics; where applicable law requires consent for non-essential cookies, it is requested before they are set. See the "Cookie Policy" document for details.

8. Changes to this Policy and contacts

The Platform may update this Policy by publishing a new version on the website; continued use of the Platform means acceptance of the current version. Personal data requests can be sent through the support chat on the Platform website.

---

Revision dated October 26, 2026