Privacy Policy

Last updated: January 18, 2026

1. Introduction

Welcome to TokKae. We are a Cambodia-based e-commerce marketplace committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services.

By using TokKae, you consent to the data practices described in this policy. Our services are intended for users who are at least 18 years of age. If you are under 18, you may not use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Phone number (+855 Cambodia format)
  • Password (encrypted)
  • First and last name
  • Profile picture

2.2 Identity Verification (Sellers)

If you register as a seller, we may collect:

  • ID card or Passport
  • Business license
  • Bank statements
  • Tax certificates

2.3 Address Data

For shipping and delivery purposes, we collect:

  • Recipient name and phone number
  • Street address, district (khan), commune (sangkat)
  • City, province, country
  • GPS coordinates (for delivery optimization)
  • Postal code

2.4 Transaction Data

When you make purchases or sales, we collect:

  • Order history and details
  • Payment information
  • Shipping preferences
  • Voucher usage

2.5 Device & Usage Data

We automatically collect:

  • Browser type and version
  • IP address
  • Device identifiers
  • Pages visited and time spent
  • Performance metrics (via Vercel Speed Insights)

2.6 Seller-Specific Data

For sellers, we additionally collect:

  • Shop information (name, description, logo, banner)
  • Bank account details (for payouts)
  • Business registration documents
  • Performance metrics

3. How We Collect Information

We collect information through:

  • Direct input: Information you provide during registration, forms, and account settings
  • Automatic collection: Cookies, analytics, and similar technologies
  • Third-party authentication: Google OAuth and Telegram login
  • Location services: Google Maps for address autocomplete and delivery zones

4. Third-Party Services

We use the following third-party services:

ServicePurposeData Shared
SupabaseAuthentication & databaseEmail, phone, auth tokens
Google OAuthSocial loginGoogle profile info
TelegramSocial loginTelegram user ID, name
Google MapsAddress autocomplete, delivery zonesAddress queries, coordinates
UploadthingFile storageProfile pictures, product images, documents
Vercel Speed InsightsPerformance analyticsPage load metrics, device info

5. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Process orders and fulfill deliveries
  • Provide customer support
  • Ensure security and prevent fraud
  • Improve our services and user experience
  • Send marketing communications (with your consent)
  • Comply with legal obligations

6. Data Storage & Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Data stored on secure servers
  • Encryption in transit (HTTPS) and at rest
  • Access controls and authentication
  • Regular security audits

7. Local Storage (Browser)

We use browser local storage to enhance your experience. This includes:

  • Authentication state (auth-storage)
  • Shopping cart (cart-storage)
  • Seller shop data (seller-storage)
  • User preferences (language, currency, notifications)

8. Data Sharing

We may share your information with:

  • Sellers: To fulfill your orders (name, address, contact details)
  • Delivery partners: To deliver your orders
  • Payment processors: To process payments
  • Legal authorities: When required by law
  • Business transfers: In the event of a merger or acquisition

We never sell your personal data to third parties.

9. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate or incomplete data
  • Deletion: Request deletion of your account and data
  • Export: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Withdraw consent: Revoke previously given consent

To exercise these rights, please contact us at [email protected].

10. Data Retention

We retain your data as follows:

  • Active accounts: Until you request deletion
  • Order records: 7 years (for legal and tax compliance)
  • KYC documents: Duration of seller account + 5 years
  • Analytics data: 26 months

11. Cookies Policy

We use cookies and similar technologies to:

  • Essential cookies: Required for authentication and shopping cart functionality
  • Analytics cookies: Help us understand how you use our site and improve performance

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect site functionality.

12. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].

13. International Data Transfers

Your data may be processed outside of Cambodia by our third-party service providers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: