This document describes what personal data CommerCentr collects, why, and what you can do about it. We tried to list actual fields rather than general phrasing — so you see the real picture instead of a legal imitation of transparency.
Who controls the data
The controller of personal data collected on commercentr.com is [TODO: legal entity name], registration number [TODO], address [TODO]. Data questions: support@commercentr.com.
What we store
- Account: email, a password hash (not the password — we do not know it and cannot recover it), first and last name, optionally a phone number and avatar, interface language and time zone.
- Security: last login IP and time, two-factor settings. This exists so you can spot someone else signing into your account.
- Purchases: orders, licences, airy balance movements. The operations ledger cannot be edited retroactively — that is a technical property of the system.
- Identity verification (KYC): only for sellers withdrawing funds. Documents are stored encrypted (AES-256-GCM) outside the site's public folder and are reachable only through an authorised administrative view.
- Support enquiries: the correspondence and any attachments you send.
We do not collect health data, political opinions, religion or other sensitive categories — the marketplace does not need them.
Payment data
Card numbers never reach our server. Payment happens on the provider's side — LiqPay and Monobank. From them we receive only the fact and amount of the payment.
Social sign-in
If you sign in with Google, GitHub or Facebook, we receive your email, name and account identifier from that provider. We never see your social network password. You can register the ordinary way and not use this at all.
Cookies
- Technical (cannot be switched off): your login session, the download token for a purchased file, and a record of your own cookie choice. The site does not work without them.
- Everything else: set only if you pressed "Accept all" in the banner. Declining does not restrict access to any feature.
As of this document's publication we do not use Google Analytics, Google Tag Manager, the Meta pixel or other external trackers. If that changes, this section and the banner change with it.
Who we share with
We do not sell personal data and do not pass it on for anyone else's marketing. Sharing happens only:
- with payment providers, to process a payment;
- with a seller — the fact that you bought their product, so they can support you (never your password, payment data or KYC documents);
- with state authorities, strictly on a lawful request.
How long we keep it
Account data — while the account exists. Records of purchases and financial operations — longer, because accounting and tax law require it. KYC documents — for the period such reporting requires [TODO: confirm the period with the accountant].
Your rights
You have the right to learn what data of yours we hold, correct inaccuracies, delete your account, withdraw consent for optional cookies, and object to processing. You edit your profile yourself in the dashboard; for anything else write to support@commercentr.com and we will answer within the period the law sets.
Deleting an account removes it from the marketplace but does not erase records of financial operations already carried out — the law requires us to keep those.
Protection
Connections are encrypted (HTTPS), passwords are stored as hashes, KYC documents are encrypted and outside public reach, and two-factor sign-in is available. Perfect security does not exist and we do not promise it; what we promise is to tell you if we learn your data has leaked.
Changes
The date of the last update is shown at the top of the page. We announce material changes in your dashboard.
Complaints
Processing of personal data is governed by Ukrainian personal data protection law. If you believe we have breached your rights, write to us first — most often it is a misunderstanding we can fix. You also have the right to approach the Ukrainian Parliament Commissioner for Human Rights.
Marketplace terms are in a separate document; refunds are here.