Privacy Policy
Last updated: January 18, 2026
1. Introduction
Welcome to TokKae. We are a Cambodia-based e-commerce marketplace committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services.
By using TokKae, you consent to the data practices described in this policy. Our services are intended for users who are at least 18 years of age. If you are under 18, you may not use our services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Phone number (+855 Cambodia format)
- Password (encrypted)
- First and last name
- Profile picture
2.2 Identity Verification (Sellers)
If you register as a seller, we may collect:
- ID card or Passport
- Business license
- Bank statements
- Tax certificates
2.3 Address Data
For shipping and delivery purposes, we collect:
- Recipient name and phone number
- Street address, district (khan), commune (sangkat)
- City, province, country
- GPS coordinates (for delivery optimization)
- Postal code
2.4 Transaction Data
When you make purchases or sales, we collect:
- Order history and details
- Payment information
- Shipping preferences
- Voucher usage
2.5 Device & Usage Data
We automatically collect:
- Browser type and version
- IP address
- Device identifiers
- Pages visited and time spent
- Performance metrics (via Vercel Speed Insights)
2.6 Seller-Specific Data
For sellers, we additionally collect:
- Shop information (name, description, logo, banner)
- Bank account details (for payouts)
- Business registration documents
- Performance metrics
3. How We Collect Information
We collect information through:
- Direct input: Information you provide during registration, forms, and account settings
- Automatic collection: Cookies, analytics, and similar technologies
- Third-party authentication: Google OAuth and Telegram login
- Location services: Google Maps for address autocomplete and delivery zones
4. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & database | Email, phone, auth tokens |
| Google OAuth | Social login | Google profile info |
| Telegram | Social login | Telegram user ID, name |
| Google Maps | Address autocomplete, delivery zones | Address queries, coordinates |
| Uploadthing | File storage | Profile pictures, product images, documents |
| Vercel Speed Insights | Performance analytics | Page load metrics, device info |
5. How We Use Your Information
We use your information to:
- Create and manage your account
- Process orders and fulfill deliveries
- Provide customer support
- Ensure security and prevent fraud
- Improve our services and user experience
- Send marketing communications (with your consent)
- Comply with legal obligations
6. Data Storage & Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Data stored on secure servers
- Encryption in transit (HTTPS) and at rest
- Access controls and authentication
- Regular security audits
7. Local Storage (Browser)
We use browser local storage to enhance your experience. This includes:
- Authentication state (auth-storage)
- Shopping cart (cart-storage)
- Seller shop data (seller-storage)
- User preferences (language, currency, notifications)
8. Data Sharing
We may share your information with:
- Sellers: To fulfill your orders (name, address, contact details)
- Delivery partners: To deliver your orders
- Payment processors: To process payments
- Legal authorities: When required by law
- Business transfers: In the event of a merger or acquisition
We never sell your personal data to third parties.
9. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete data
- Deletion: Request deletion of your account and data
- Export: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw consent: Revoke previously given consent
To exercise these rights, please contact us at [email protected].
10. Data Retention
We retain your data as follows:
- Active accounts: Until you request deletion
- Order records: 7 years (for legal and tax compliance)
- KYC documents: Duration of seller account + 5 years
- Analytics data: 26 months
11. Cookies Policy
We use cookies and similar technologies to:
- Essential cookies: Required for authentication and shopping cart functionality
- Analytics cookies: Help us understand how you use our site and improve performance
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect site functionality.
12. Children's Privacy
Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].
13. International Data Transfers
Your data may be processed outside of Cambodia by our third-party service providers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
15. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Address: Phnom Penh, Cambodia