Privacy Policy

This Privacy Policy explains how TOLQAR ("we", "us") collects, uses, and protects your data when you use our website and platform (the "Platform"), create an account, or purchase any of our digital products or services.

By using the Platform, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree with any part of it, please stop using the Platform.

We collect information you provide directly when creating an account, completing a purchase, or contacting support, including: name, email address, contact number (if provided), the crypto wallet address used for payment, and any proof-of-payment documents you upload.

If you choose to sign in via Google, Microsoft, or GitHub, we receive your name and email (and profile picture, if publicly available on your account) from the provider, with your explicit consent during sign-in.

If you choose to sign in via Telegram, we receive your account ID, name, and username, and your profile photo if available — via a verification mechanism officially signed by Telegram that prevents this data from being spoofed.

We may add additional sign-in methods in the future, and we will update this section when any new method is enabled for users.

Your data is used exclusively for the following purposes: creating and managing your account, processing and confirming your orders, providing technical support, sending notifications related to order or account status, improving the Platform's quality and security, and complying with any legal obligations.

We do not use your data for third-party marketing purposes without your explicit consent.

We use cookies and browser local storage to run the Platform, remember your preferences, and attribute TOLQAR Partners referrals, and — only with your consent — to measure usage through Google Analytics.

The full list of what we place on your device, how long it lasts, and how to change your choice or withdraw your consent is in the separate Cookie Policy page.

Your account data (name, email, encrypted password, order history) remains linked to your account as long as it stays active, and is used to let you track your orders and download your purchased digital products.

If you join the TOLQAR Partners program, we also collect the partner data described in the Partners Program Privacy Policy (registration, verification, payout, and performance data). It is used only to manage the program and is not shared with third parties, except as technically necessary to complete payouts.

We automatically collect limited technical data such as browser and device type and general usage logs (pages you visit, time of visit) to improve the Platform's performance and security and to detect and resolve technical issues. We also use Google Analytics to measure how the Platform is used (such as pages viewed, approximate location, and device and browser details); its cookies are not stored on your device unless you choose "Accept all", and Google processes this data under its own privacy policy. See our Cookie Policy for details.

For security and abuse prevention (for example, limiting repeated requests to sign-up, contact, and password-reset forms), IP addresses are processed temporarily and may also appear in standard server logs kept by our hosting and error-monitoring providers. They are not added to your account profile.

We do not sell your personal data to any third party. Limited data may be shared with the technical service providers listed in the next section, only to the extent needed to run the Platform and complete payment, and subject to their commitment to protect this data.

We may disclose your data if required by law, to protect our legal rights, or to prevent actual fraud or misuse of the Platform.

We rely on a limited number of technical service providers to run the Platform: website hosting and digital file storage (Vercel), transactional/account emails (Resend), technical error monitoring to improve Platform stability (Sentry), and usage analytics (Google Analytics), whose cookies are stored only with your consent.

For optional sign-in: Google, Microsoft, GitHub, and Telegram — each processes only the basic profile data needed to create your account, with your explicit consent during sign-in.

For payment processing: PayPal for international card and e-wallet payments, and Cryptomus and NOWPayments as automated crypto payment gateways. When paying through any of these gateways, payment data is processed directly by that provider under its own privacy policy, and we never have access to your full card details in any case.

If we enable additional payment providers (such as other card gateways), this section will be updated with their names; we list only providers that are actually enabled.

Currently available: international payment via PayPal, cryptocurrency payment (USDT over TRC20 and BEP20 networks, among others) via approved automated gateways, and local payment within Yemen via a number of approved local wallets and platforms (such as Al-Kuraimi, Jaib, and ONE Cash) in multiple currencies.

Additional payment methods will be listed here once they are enabled, and no payment method not listed here as available will be used.

Since some of the service providers mentioned above (hosting, payment providers, sign-in) operate servers outside your country of residence, your data may be transferred to and processed on servers in other countries. We only work with well-known providers that apply internationally recognized data-protection standards for everything processed through them.

Your data is stored on a securely hosted database, and downloadable digital files on a cloud storage service (Vercel Blob). No sensitive payment data (such as full card numbers) is ever stored on our own servers — that is processed exclusively by your chosen payment provider.

We take reasonable technical and administrative measures to protect your data from unauthorized access, loss, or misuse, including encryption in transit and secure password storage, with optional two-factor authentication (2FA) available for extra account protection.

Download links for purchased digital files are protected by signed, temporary tokens, and raw storage links are never exposed directly to the customer.

We retain your account data for as long as it remains active, and order data for as long as needed for accounting, technical support, and dispute-resolution purposes, even after account closure if necessary.

You have the right to access your personal data held by us, and to request correction of any inaccurate information, through your account settings or by contacting support.

Depending on where you live (for example, under the GDPR), you may also have the right to request deletion or restriction of processing, to object to certain processing, and to receive a copy of your data. Contact us to exercise any of these rights.

You can request deletion of your account and personal data by contacting us at support@tolqar.com or via our contact page. We will process your request within a reasonable time, subject to any legal or accounting obligation requiring us to retain certain records (such as completed order records) for a limited additional period.

The Platform is not directed at children under 18, and we do not knowingly collect personal data from minors. If we learn that a minor has provided their data without their guardian's knowledge or consent, we will act to delete that data as soon as we become aware of it.

We reserve the right to update this Policy from time to time to reflect legal or operational changes, such as adding new payment gateways in the future. Any update will be posted on this page along with an updated "last modified" date above.

The site offers an automated assistant that answers questions about our services. It is AI software, not a staff member, and it can make mistakes; do not rely on its answers alone for financial or legal decisions.

When you use it, your recent messages in the chat are sent to an AI service provider to process and generate the reply. We do not store the chat text in our database, and we do not use it for advertising analytics; the provider's processing of it is governed by its own terms and privacy policy. We keep only generic technical logs (such as request counts and anonymous 👍/👎 reply ratings) without the chat text. Network addresses (IP) may be processed temporarily to rate-limit usage and prevent abuse.

To make it easy to pick up where you left off, your chat is saved on your own device only (in your browser's local storage) for 10 days from your last activity, then deleted automatically. This copy never reaches us or any third party, and you can erase it at any time from the "Recent chats" list (delete one chat or all) or by clearing the site's data in your browser. Only message text and attachment file names are kept — not images or file contents. Only the latest messages are sent to the AI provider to generate a reply.

Attachments (an image or a text file), when enabled, are processed once to generate the reply through the AI provider and are not stored by us. Do not share passwords, card details, ID documents or sensitive information in the chat or attachments. If you choose the "Send to the team" button, we receive your name, email and what you write (and a chat summary if you attach it) in order to reply, and this data is handled like contact messages under this Policy.

For any inquiry related to this Policy or your data rights, email us at support@tolqar.com or via the contact page on the site.