Transparency and data protection
Privacy Policy
KHAMCX processes the minimum data needed to complete orders, verify payment, secure delivery, and support customers for clear and limited purposes.
Data we process
- Customer email address and selected language.
- Ordered products, prices, amount, currency, and order reference.
- Payment identifier, status, verification time, and information needed to match payment to the order.
- Entitlement records and use of the download allowance.
- Limited security information used to prevent abuse and enforce request limits; network identity is converted into signed hashes before rate-limit records are stored.
Why we use it
- Create the order and match products and price.
- Verify and confirm payment and prevent duplicates or abuse.
- Create entitlements, secure delivery, and send transactional messages.
- Diagnose payment, entitlement, or delivery issues and meet operational, legal, and security needs.
Payments and card data
Card data is handled inside the Moyasar payment form. KHAMCX does not store card numbers or card security codes in its database; it retains payment references, status, and the data needed for verification and matching.
Service providers
KHAMCX uses Moyasar to process and verify payments, Supabase for order and entitlement records, private storage, and temporary delivery, and Resend to send transactional confirmation messages. Each provider handles the data needed to perform its service.
Advertising measurement
KHAMCX uses the OpenAI Ads Measurement Pixel to measure campaign-related events such as checkout starts, completed orders, and subscriptions. The measurement service may use attribution identifiers and first-party cookies for measurement, and card data is not sent to it.
Protection and retention
Order, payment, and delivery operations are restricted server-side, and private resources use temporary access and permission controls. We retain data for operational, legal, or security necessity, then delete or anonymize it when no longer needed, subject to applicable obligations.
Your rights
You may request information about, access to, correction of, or deletion of your data where applicable, and object or withdraw consent where consent is the basis for processing, subject to legitimate legal obligations.
To exercise privacy rights, keep your order reference and reply through official order communications so the order can be verified securely.