Privacy policy

Effective date: November 14, 2026

This is a translation. In case of any discrepancy, the Uzbek text prevails.

This policy explains what data the Tapshop website collects, why it is used and how it is protected. We comply with the Law of the Republic of Uzbekistan «On Personal Data».

1. What we collect

• From your Google account: name, email and profile photo. We never see or store your password.
• If you open a shop: shop name, category, description, logo, phone, Telegram, Instagram and website, branch addresses, map location, opening hours, product photos and prices.
• Technical data: sign-in date, the date and version of your consent to the terms; when you send a report, your IP address for spam protection.
• Payments: we never see or store your card number; we only keep the payment ID, amount and date.

Biometric data (face, fingerprints) and passport data are not collected.

2. Why we use it

• to sign you in and protect your account;
• to show your shop to buyers;
• to fight fraud and violations and review reports;
• to record plan payments and review refund requests;
• to tell you about important changes.

We don't sell your data or give it to advertising companies.

3. Who sees it

• Everyone sees: the information on a shop page (name, logo, address, phone, Telegram, opening hours, products). It is public so buyers can find you — if you don't want to show your personal number, enter a work number.
• Shown to no one: your email and Google profile. Only the site administration sees them, for service purposes.
• State authorities: only on an official request made in the manner set by law.

4. Where the data is stored

To run the site we use: Google (sign-in), Vercel (the site), Neon (database), Cloudflare R2 (photos and backups).

These services' servers are outside Uzbekistan, including in the USA and the European Union. They follow international security standards. By using the site and accepting the terms you consent to your data being stored and processed on these servers. Data is sent over an encrypted connection (HTTPS); backups are stored separately and encrypted.

5. Cookies and browser storage

• Sign-in session — to keep you signed in (7 days).
• Guest flag — to remember that you chose to continue without signing up.
• Theme, language and script — light/dark mode, your language, Latin/Cyrillic.

We don't use advertising or tracking cookies.

6. How long we keep data

Data is kept while your account is active. If you delete your account on the Profile page, your shop, products and photos are deleted immediately; they disappear from the encrypted backups automatically within 14 days. Technical logs are kept for 30 days. Payment and violation records may be kept for the period required by law.

7. Your rights

• to know what data we hold about you;
• to correct wrong data (you edit your shop details yourself in Settings);
• to delete your account and data (on the Profile page);
• to withdraw consent (which deletes the account).

For requests: Telegram @neindev. We usually reply within 3 working days.

8. Children

The site doesn't knowingly collect data from people under 16. If we learn such data was collected by accident, we delete it.

9. Changes

When the policy is updated, the new date is shown on this page. After significant changes, shop owners are asked for consent again.