1. Introduction
This Privacy Policy explains how Qresto LLC collects, processes, stores, and protects the personal data of its users.
This Policy is prepared in accordance with the Law of the Republic of Azerbaijan "On Personal Data" (May 11, 2010, No. 998-IIIQ).
2. Data Collected
Directly provided data:
- Name, surname
- Email address
- Phone number
- Business name and address
- Payment information (encrypted)
Automatically collected data:
- IP address
- Browser type and version
- Platform usage statistics
- Login date and time
- Device information
3. Purposes of Data Use
Collected data is used for the following purposes:
- Account creation and management
- Providing subscription services
- Processing payments
- Providing customer support
- Improving platform quality
- Fraud prevention
4. Data Retention Periods
- Account data: 2 years after account deletion
- Payment records: 5 years (per accounting legislation)
- Log data: 90 days
- Support correspondence: 1 year
5. Data Sharing
Qresto does not sell personal data. Data is shared only in the following cases:
- Technical service providers: Supabase (GDPR compliant)
- Payment processor: PAYRIFF/Epoint
- Government authorities: Based on court order
6. Data Security
- SSL/TLS encryption (HTTPS)
- Password hashing with bcrypt algorithm
- Data isolation via Row Level Security (RLS)
- Two-factor authentication support
- Encrypted backups
7. User Rights
In accordance with Article 8 of the "On Personal Data" Law:
- Right to information: learn what data is being processed
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of personal data
- Right to object: object to certain types of processing
- Right to portability: receive data in machine-readable format
Requests: privacy@qresto.az (responded within 30 business days).
8. Cookies
- Essential cookies: Maintaining login session
- Functional cookies: Remembering language preference
- Analytics cookies: Platform usage statistics (anonymized)
9. Policy Changes
This Policy may be amended. Users will be notified by email at least 14 days before significant changes take effect.
10. Contact
- Email: privacy@qresto.az
- Address: Baku, Republic of Azerbaijan
- Phone: +994 12 555 00 11