Privacy Policy

This Privacy Policy explains how the TOLQAR platform ("Platform", "we", "us") collects, uses, and protects your data when you use the Platform, create an account, or purchase any of our digital products or services.

By using the Platform, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree with any part of it, please stop using the Platform.

We collect information you provide directly when creating an account, completing a purchase, or contacting support, including: name, email address, contact number (if provided), the crypto wallet address used for payment, and any proof-of-payment documents you upload.

If you choose to sign in via Google or GitHub, we receive your name and email (and profile picture, if publicly available on your account) from the provider, with your explicit consent during sign-in.

If you choose to sign in via Telegram, we receive your account ID, name, and username, and your profile photo if available — via a verification mechanism officially signed by Telegram that prevents this data from being spoofed.

We may add additional sign-in methods in the future, and we will update this section as soon as any new method is actually enabled for users.

Your data is used exclusively for the following purposes: creating and managing your account, processing and confirming your orders, providing technical support, sending notifications related to order or account status, improving the Platform's quality and security, and complying with any legal obligations.

We do not use your data for third-party marketing purposes without your explicit consent.

The Platform uses essential cookies to maintain your login session, and a separate cookie to track TOLQAR Partners referrals. The table below shows every cookie we set directly, with no ambiguity.

On your first visit, a banner lets you accept all cookies or essential-only. Essential cookies always run regardless, because the Platform cannot function without them (staying logged in, for example); your choice only controls non-essential ones.

You can also control or delete cookies from your browser settings at any time. Disabling essential cookies may prevent some Platform features (like staying logged in) from working correctly.

If you reach the Platform via a referral link from a TOLQAR Partners affiliate (?ref=), we set a separate cookie for 30 days that primes a new account registration via that link. Once you register, your account's link to the partner is saved permanently in the database (no longer relying on the cookie), and any purchase you make within an additional window of up to 120 days from registration (depending on partner tier) remains correctly attributed to them. We do not collect your IP address as part of referral records. We may keep a hash value derived from your account ID for statistical and referral-management purposes, and this value does not include your IP address.

When you choose to pay via PayPal, PayPal sets its own cookies for security and fraud-prevention purposes while using the payment button — we do not control the name or duration of these cookies, and they are fully governed by PayPal's own privacy policy.

In addition to cookies, we also use your browser's local storage — a similar but technically different technology — to remember your cart contents between visits. This data is managed by the same privacy settings in your browser, and is not automatically sent to the server the way cookies are.

Your account data (name, email, encrypted password, order history) remains linked to your account as long as it stays active, and is used to let you track your orders and download your purchased digital products.

If you join the TOLQAR Partners program, we also collect: full name, email, phone and country (optional), a brief description of your marketing approach, and your preferred commission payout method (text details only, not full bank account data). This data is used exclusively to manage the partner program, is not shared with any third party, and is kept for as long as your partner account remains active.

We automatically collect limited technical data such as browser and device type and general usage logs (pages you visit, time of visit) to improve the Platform's performance and security and to detect and resolve technical issues.

We do not sell your personal data to any third party. Limited data may be shared with the technical service providers listed in the next section, only to the extent needed to run the Platform and complete payment, and subject to their commitment to protect this data.

We may disclose your data if required by law, to protect our legal rights, or to prevent actual fraud or misuse of the Platform.

We rely on a limited number of technical service providers to run the Platform: website hosting and digital file storage (Vercel), transactional/account emails (Resend), and technical error monitoring to improve Platform stability (Sentry).

For optional sign-in: Google, GitHub, and Telegram — each processes only the basic profile data needed to create your account, with your explicit consent during sign-in.

For payment processing: PayPal for international card and e-wallet payments, and Cryptomus and NOWPayments as automated crypto payment gateways. When paying through any of these gateways, payment data is processed directly by that provider under its own privacy policy, and we never have access to your full card details in any case.

We may add additional payment providers (such as direct bank card gateways) in the future. This section will be updated with the name of any new provider as soon as it is actually enabled for customers — we do not list any currently-inactive service here.

Currently available: international payment via PayPal, cryptocurrency payment (USDT over TRC20 and BEP20 networks, among others) via approved automated gateways, and local payment within Yemen via a number of approved local wallets and platforms (such as Al-Kuraimi, Jaib, and ONE Cash) in multiple currencies.

Additional direct bank card payment gateways are coming soon. We will update this page as soon as they are officially enabled, and no payment method not listed here as actually available will be used.

Since some of the service providers mentioned above (hosting, payment providers, sign-in) operate servers outside your country of residence, your data may be transferred to and processed on servers in other countries. We only work with well-known providers that apply internationally recognized data-protection standards for everything processed through them.

Your data is stored on a securely hosted database, and downloadable digital files on a cloud storage service (Vercel Blob). No sensitive payment data (such as full card numbers) is ever stored on our own servers — that is processed exclusively by your chosen payment provider.

We take reasonable technical and administrative measures to protect your data from unauthorized access, loss, or misuse, including encryption in transit and secure password storage, with optional two-factor authentication (2FA) available for extra account protection.

Download links for purchased digital files are protected by signed, temporary tokens, and raw storage links are never exposed directly to the customer.

We retain your account data for as long as it remains active, and order data for as long as needed for accounting, technical support, and dispute-resolution purposes, even after account closure if necessary.

You have the right to access your personal data held by us, and to request correction of any inaccurate information, through your account settings or by contacting support.

You can request deletion of your account and personal data by contacting us at support@tolqar.com or via our contact page. We will process your request within a reasonable time, subject to any legal or accounting obligation requiring us to retain certain records (such as completed order records) for a limited additional period.

The Platform is not directed at children under 18, and we do not knowingly collect personal data from minors. If we learn that a minor has provided their data without their guardian's knowledge or consent, we will act to delete that data as soon as we become aware of it.

We reserve the right to update this Policy from time to time to reflect legal or operational changes, such as adding new payment gateways in the future. Any update will be posted on this page along with an updated "last modified" date above.

For any inquiry related to this Policy or your data rights, email us at support@tolqar.com or via the contact page on the site.