Privacy

What data we collect

• Phone: for sign-in and protection against abuse.
• Name and email: your name appears on listings, email is needed for paid services (optional otherwise). With Google sign-in we receive your email and Google identifier.
• Acceptance of the public offer: version number, time and method of acceptance.
• Contacts for buyers: only those you add yourself.
• Listings and reviews: texts, photos and the listing's place. We remove technical data from uploaded photos, including where they were taken.
• Conversations: messages, photos and map locations in chat.
• Geolocation: only when you press the button to detect your location.
• Technical data: IP address and browser details in server logs, the list of signed-in devices, the log of contact views.
• Shop documents: if you attach them to an application. Only the administration sees them.

What other people see

Listings, the seller's name and reviews are visible to everyone. Buyers see an approximate place, not the exact point.

A private seller's contacts are visible only to signed-in users with a phone, and only if the seller allows it. A shop's contact phone and website are visible to everyone. The phone number used to sign in is not shown to buyers: for a shop only the contact phone is visible, and for a private seller only what they have allowed.

Where data is stored

Listing and account data is stored on our servers in Turkmenistan. The connection between your browser and the site is protected by HTTPS.

Who we share data with

We do not sell your data and do not use third-party analytics or advertising counters. Data goes only to the services the site cannot work without:

• SMS gateway: your phone number and sign-in code.
• Amazon SES email service: your email and the text of the email. Like any email, it passes through external servers. Emails contain no conversation text, prices or coordinates.
• Google: only if you sign in with Google.

Emails you send to our support pass through email services, like any other email.

Who can read conversations

Nobody reads conversations just like that. An administrator can open one only by stating a reason, for example: a report, suspected fraud or spam, a lawful request from state authorities. Each such access is written to a log.

Automatic checks

Listing texts and photos, reviews, suspicious messages and chat photos are checked by our own neural networks. Data is not sent to third-party cloud models. They also translate listings. Phone, name and email are not passed to the listing check.

We keep check results and listing texts to analyse errors and improve the models.

Cookies

We use only functional cookies: to keep you signed in (30 days) and to remember your city, theme and language. There are no advertising cookies. The browser also stores form drafts and hint settings.

How long we keep data

Accounts, listings and conversations are kept for as long as the account exists. The log of staff actions is kept for 3 years. View statistics are kept for 400 days and contain nothing about who viewed.

Backups are kept for up to 12 months on our server in Turkmenistan and are deleted when the term ends. Database backups are encrypted, and photo backups can be accessed by administrators only. The data of a deleted account disappears from the backups no later than the end of this term.

How to delete your account

Open Profile → Delete account. You can cancel the deletion within 14 days.

Deleted: phone, email, Google sign-in, name, contacts, shop profile, listings with photos, favourites, notification settings, photos and locations in chat, the log of contact views.

Kept with no link to you: message texts on the other person's side, reviews in the rating under the label "Deleted user", reports, balance operations, statistics and the log of staff actions.

If there is money on the balance, get it returned through support first.

Questions

Write to us at support@dukan.tm. If we change this page, the date at the top will change too.