SOCNET STORE Privacy PolicyLast updated: August 9, 2026This Policy describes what personal data is processed by the SOCNET STORE digital goods marketplace (here...
SOCNET STORE Privacy PolicyLast updated: August 9, 2026This Policy describes what personal data is processed by the SOCNET STORE digital goods marketplace (hereinafter referred to as the "Platform", "Marketplace", "we", "service"), for what purpose, how long it is stored, and how its protection is ensured. The Policy applies to all information received from users of the site socnet.store and related services, including buyers, sellers, and partners.1. General provisions1.1. Legal basis. When processing personal data, we are guided by:— Federal Law of the Russian Federation No. 152-FZ "On Personal Data";— General Data Protection Regulation (GDPR) (EU);— applicable US data protection legislation.1.2. User consent. By using the site, creating an account, placing an order, or listing a product, you confirm that you have read this Privacy Policy and accepted it.1.3. Age restriction. The service is intended for individuals who are 18 years of age or older. We do not intentionally collect data from minors. If we become aware that an account is registered by a person under 18 years of age, such account may be blocked, and associated data may be deleted.1.4. Changes. We have the right to make changes to this Policy. The current version is published on the website with the date of the last update. We will notify you of significant changes affecting your rights via e-mail or through a notification in your personal account at least 7 days before they take effect. Continuing to use the service after the changes take effect means you agree to them.1.5. Incident Notification. In the event of a personal data breach that could result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authorities within the timeframes established by applicable law (for GDPR — within 72 hours of detection).2. Purposes of Data Processing2.1. Registration, authorization, and identification of the user.2.2. Fulfillment of orders, operation of the transaction protection system (escrow), accounting of transactions, accrual of bonus and referral balances.2.3. Ensuring interaction between the buyer and the seller within the order.2.4. Consideration of disputes, arbitration involving the administration, processing of support requests.2.5. Acceptance of payments, withdrawal of funds to sellers and partners, refunds.2.6. Formation of public reputation for sellers (ratings and reviews).2.7. Improving service quality, traffic analytics and behavior on the site.2.8. Marketing newsletters and informing about promotions (only with user consent).2.9. Prevention of fraud, multi-accounting, scamming and abuse; ensuring the security of the Platform.2.10. Compliance with legal requirements, including tax, accounting and AML requirements.3. What data we collect3.1. Account data: name (nickname), email address, IP address, authorization data (password hash, session tokens), two-factor authentication settings (Google Authenticator).3.2. Profile settings: selected interface language (Russian, English, Chinese), display currency (USD/EUR/RUB/CNY), theme, notification settings.3.3. Payment data: history of deposits, withdrawals and payouts, amounts and currencies of transactions, selected payment method, transaction IDs of payment systems, cryptocurrency wallet addresses (when depositing or withdrawing in cryptocurrency), details for payouts to sellers.We do not store full bank card numbers, CVV codes and access data to your payment accounts — this data is processed directly by payment providers.3.4. Order data: order composition, purchased categories and names of digital goods, volume, cost, date and status of the order, status of product delivery, applied promo codes.3.5. Seller data: seller account information, listed products and their descriptions, sales statistics, commissions, payout history, purchased paid privileges for promotion, as well as documents requested during verification (see section 9).3.6. Correspondence and disputes: messages in dialogues between the buyer and seller regarding the order, inquiries to customer support, materials and attachments related to the dispute, reviews and ratings.3.7. Cookies and technical logs: device type, operating system, browser, referrer, visit times, viewed pages and behavior metrics. We use Google Analytics and Yandex Metrica analytics systems.3.8. API usage data: reseller API keys, request logs, IP addresses of request sources, volume and nature of API calls.3.9. Referral data: inviter user ID, clicks on the referral link, accrued reward.3.10. Content of digital goods. To operate the transaction protection system, the Platform technically processes and stores the content of transmitted digital goods until the order is confirmed. The seller is solely responsible for the legality of the goods offered and for having the rights to sell them, as well as for the absence of personal data of third parties placed without legal grounds.4. Legal grounds for processing4.1. Performance of the public offer agreement — providing access to the Marketplace, conducting transactions, payments to sellers.4.2. Legitimate interests of the Platform — protection against fraud, ensuring security, service development and analytics, debt collection.4.3. Consent of the data subject — marketing newsletters, optional analytical and marketing cookies.4.4.Performance of duties provided by law — tax, accounting, AML and KYC requirements, responses to legitimate requests from authorized bodies.5. Data transfer and access to it5.1. Between the parties to the transaction. When placing an order, the seller gains access to the buyer's nickname, the composition and parameters of the order, as well as the correspondence regarding the order. The buyer has access to the seller's nickname, their rating, and public statistics. Your e-mail, IP address, and payment details are available to the other party of the transaction not transferred.5.2. In the context of the dispute. When a dispute is opened, the Platform administration gains access to the correspondence, order materials, and relevant information from both parties to the dispute to the extent necessary to make a decision.5.3. Platform Employees — strictly based on the need-to-know principle, with access logs maintained.5.4. Service provider partners — provided that they maintain confidentiality and apply adequate protective measures, including:— payment and crypto payment providers (Cryptomus, Heleket, Binance Pay, CryptoBot, acquiring of bank cards VISA / Mastercard / MIR / UnionPay, SBP, LolzTeam, Wise, Revolut, PayPal);— hosting providers and infrastructure suppliers;— analytics services (Google Analytics, Yandex Metrica);— email and notification sending services;— anti-fraud verification services.5.5. Government authorities — solely based on a lawful request, to the extent provided by applicable law.5.6. We do not sell your personal data to third parties and do not transfer it for the purposes of third-party advertising.6. Cookies6.1. We use:— technical (mandatory) cookies — authorization, session saving, cart, language, currency, and theme selection. The site does not work without them;— analytical cookies — Google Analytics, Yandex Metrica, traffic statistics;— referral cookies — recording the transition via a partner link for correct reward calculation.6.2. You can delete or block cookies in your browser settings, as well as refuse optional cookies through the consent banner on the site. Disabling technical cookies will make some site functions (authorization, order processing) unavailable.7. Storage, retention and data protection7.1. Storage location. Data is stored on secure servers in data centers in Germany.7.2. Protection measures: HTTPS/SSL traffic encryption, storing passwords as irreversible hashes (bcrypt), two-factor authentication, access rights segregation, access logging, regular backups, anti-fraud monitoring, DDoS protection.7.3. Retention periods. We store data no longer than necessary for the stated purposes:Account data: for the duration of the account + 30 days after deletionFinancial and tax documents, transaction history: 5 years from the date of the transaction (legal requirement)Order data and correspondence regarding them: 12 months after order completionDispute materials: 12 months after the dispute is closedTechnical logs and API logs: 12 monthsCookies: according to the lifespan of the specific cookie, up to 12 monthsReviews and ratings: indefinitely in anonymized form7.4. After the retention period, data is deleted or anonymized.8. International data transfer8.1. Since the Platform works with users and partners in different countries, your data may be transferred and processed outside the country of your residence, including outside the EEA and the Russian Federation.8.2. In such transfers, we apply the legally required protection mechanisms, including Standard Contractual Clauses and an assessment of the adequacy of the level of data protection in the recipient country.9. KYC and AML9.1. In certain cases — for large payments or withdrawals, when participating in the affiliate program, when working through the seller's cabinet, when fraud is suspected, or at the request of the payment provider — we have the right to request documents confirming identity and the source of funds.9.2. Such documents are manually verified by an authorized department, stored in encrypted form, and deleted immediately after verification is completed, except in cases where legislation or payment partner requirements obligate us to retain them for a specified period.9.3. Refusal to provide the requested documents may result in restrictions or suspension of account operations.10. Reviews, ratings, and public information10.1. After completing the order, the buyer can leave a rating and review about the seller. Reviews, ratings, the author's nickname, as well as the seller's aggregated statistics (rating, number of sales) are public and visible to other users and search engines.10.2. Do not post personal data in reviews, product descriptions, and public profile fields that you do not want to disclose. By publishing such information, you do so voluntarily and at your own risk.10.3. A review may be hidden or deleted for violating the Platform's rules. Deleting an account does not automatically delete the reviews left, but they are anonymized.11. User rightsYou have the right to:11.1. Receive information about the data we hold about you (right of access).11.2. Request correction of inaccurate or outdated data.11.3. Request deletion of data (right to be forgotten), except in cases where their storage is required by law or necessary to protect our legitimate interests.11.4. Request restriction of processing.11.5. Obtain a copy of your data in a structured, machine-readable format (right to data portability) — applicable to data processed based on consent or contract.11.6. Object to processing based on legitimate interests, including profiling.11.7. Withdraw consent to marketing communications at any time — via the unsubscribe link in the email or in the settings of your personal account. Withdrawal of consent does not affect the legality of processing carried out before its withdrawal.11.8. File a complaint with the data protection supervisory authority in your place of residence (for EEA users) or with Roskomnadzor (for RF users).To exercise any of these rights, please send a request to the contacts in section 15. We respond within 30 calendar days from the date of receipt of the request. To protect your data, we may request confirmation of your identity as the account owner.12. Automated solutions and anti-fraud12.1. To protect against fraud, multi-accounting, and dishonest actions, we use automated checks (analysis of IP addresses, devices, payment behavior, speed and nature of transactions).12.2. Based on the results of such checks, the account or individual transactions may be automatically restricted. You have the right to contest such a decision by contacting support; the final decision is made with the involvement of an employee.13. Liability of the parties13.1. The platform provides reasonable technical and organizational measures for the protection of personal data.13.2. The user is responsible for maintaining the confidentiality of their account and password, for enabling two-factor authentication, and for restricting access to the device from which they log into their personal account.13.3. In the event of a data leak or unauthorized access to the account due to the user's fault (sharing the password with third parties, using malware, phishing), SOCNET STORE is not liable.13.4. The seller, when listing a product, is solely responsible for the legality of its sale and the information contained therein, and acts as an independent subject of responsibility regarding the data they process outside the Platform.14. Related services of the SOCNET ecosystem14.1. SOCNET STORE is part of the SOCNET ecosystem along with other services (SMM panel, Telegram Stars, number rental, etc.).14.2. Each service in the ecosystem has its own privacy policy. By transitioning to another service in the ecosystem or to a third-party website via a link, you are subject to its policy. We are not responsible for the data processing practices of third-party resources.15. Contact InformationFor questions regarding privacy, the exercise of data subject rights, and withdrawal of consent, please contact the details provided in the Footer of the website or in the support contacts in the bottom right corner of the screen.Email for submitting complaints: help@socnet.store