Privacy Policy

Khmer Digital (“we,” “us,” or “our”) operates a digital product marketplace based in Phnom Penh, Kingdom of Cambodia. We are the data controller responsible for the personal data collected through our platform at khmerdigital.com.

For privacy-related inquiries, contact our Data Protection contact at sattyphap@gmail.com.

2.1 Account Information

• Email address
• Display name / full name
• Hashed password (we never store plain-text passwords)
• Google OAuth profile data (if you sign in with Google): name, email, profile picture URL
• Account role (buyer, seller)
• Account creation timestamp

2.2 Seller-Specific Information

• Store name (English and Khmer)
• Business description
• Payout account details (e.g., bank account or mobile wallet information)
• National ID or business registration (if required for verification)
• Product listings and inventory data

2.3 Transaction Data

• Order records including product, quantity, price, and timestamp
• Payment status and references (transaction IDs, idempotency keys)
• Payment receipt images uploaded by buyers
• Seller ledger entries (earnings, commission deductions, payout records)

2.4 Digital Product Reveal Logs

• Timestamp of digital item reveal
• IP address at time of reveal
• User agent (browser and device information)
• User ID of the account that triggered the reveal

2.5 Technical and Usage Data

• IP address
• Browser type and version
• Operating system
• Pages visited and timestamps
• Request IDs and structured server logs
• Error reports (via Sentry, anonymized where possible)

2.6 Communication Data

• Support inquiries sent to our team
• Dispute submission content
• In-platform notifications

• Directly from you: when you register, complete your profile, list products, place orders, submit disputes, or contact support.
• Automatically: via server logs, session cookies, and error tracking when you use the platform.
• From Google: if you choose to authenticate via Google OAuth, we receive basic profile data from Google's API.
• From payment providers: payment confirmation details and webhook payloads from our payment gateway partners.

• Account management: creating, authenticating, and maintaining your account.
• Order fulfillment: processing payments, allocating inventory, and delivering digital items to buyers.
• Seller payouts: calculating commissions, crediting ledger balances, and processing approved payout requests.
• Fraud prevention and security: detecting suspicious activity, verifying payment authenticity, logging reveals, and enforcing platform rules.
• Dispute resolution: reviewing evidence submitted by buyers and sellers to resolve order disputes.
• Platform improvement: analyzing usage patterns and errors to improve features and reliability.
• Compliance: maintaining audit logs as required by Cambodian law and our internal policies.
• Notifications: sending transactional notifications about orders, approvals, disputes, and payouts.

We do not sell your personal data to third parties. We do not use your data for unsolicited advertising or profiling for commercial purposes outside the platform.

• Contract performance: processing is necessary to fulfill orders, pay sellers, and provide the services you requested.
• Legitimate interests: fraud detection, security logging, error monitoring, and platform improvement.
• Legal obligation: maintaining financial records, audit logs, and complying with Cambodian legal requirements.
• Consent: where required (e.g., optional analytics). You may withdraw consent at any time without affecting the lawfulness of prior processing.

We may share your data with:

• Other users: seller store name and product details are visible to buyers. Buyer identity is not shared with sellers beyond what is necessary for order fulfillment.
• Payment providers: payment references and amounts are shared with our payment gateway to process and verify transactions. We store webhook payloads for audit but redact sensitive payment data in logs.
• Cloud infrastructure providers: our hosting provider (DigitalOcean) and object storage provider process data as part of platform infrastructure under data processing agreements.
• Error monitoring (Sentry): anonymized error and performance data is processed by Sentry to help us identify and fix bugs.
• Legal authorities: we may disclose data if required by law, court order, or to protect the rights and safety of Khmer Digital, its users, or the public.

All third-party service providers are contractually bound to protect your data and may only use it for the purposes we specify.

Session Cookies

We use secure, HttpOnly, SameSite=Lax session cookies to authenticate your browser session. These cookies are essential for the platform to function and cannot be disabled without logging out of your account.

Local Storage

Shopping cart data is stored in your browser's local storage to persist your cart between visits. This data stays on your device and is not transmitted to our servers unless you proceed to checkout.

Analytics and Error Tracking

We may use error tracking tools (Sentry) that collect limited technical data. We do not use third-party advertising or behavioral tracking cookies.

• Passwords are hashed using Argon2id with a secret pepper — we never store plain-text passwords.
• Digital Product secrets (license keys, account credentials) are encrypted at rest using application-level encryption. Encryption keys are stored outside the repository.
• Session cookies are marked HttpOnly, Secure, and SameSite=Lax to prevent cross-site attacks.
• API security: all mutations require CSRF protection, and sensitive endpoints are rate-limited.
• Payment webhooks are validated with cryptographic provider signatures before any action is taken.
• Audit logs record all sensitive administrative actions (approvals, payouts, refunds, role changes).
• Database access uses least-privilege credentials. Production secrets are never committed to source code.

Despite our security measures, no system is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

• Account data: retained for as long as your account is active, plus a minimum of 3 years after account closure for legal and audit purposes.
• Transaction records: retained for a minimum of 7 years to comply with Cambodian financial record-keeping requirements.
• Audit logs: retained for a minimum of 5 years.
• Payment callback payloads: retained for a minimum of 5 years after the transaction date.
• Digital item reveal logs: retained for a minimum of 3 years.
• Server access logs: retained for 90 days by default.

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your personal data, subject to legal retention requirements.
• Restrict or object to certain types of processing (e.g., processing based on legitimate interests).
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw consent where processing is based on consent, without affecting prior lawful processing.

To exercise your rights, contact us at sattyphap@gmail.com. We will respond within 30 days. Identity verification may be required before processing your request.

Note: certain rights may be limited where retention is required by law (e.g., financial transaction records, audit logs).

Khmer Digital is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has created an account, please contact us at sattyphap@gmail.com.

Our servers and infrastructure are primarily located in or near Cambodia. However, some third-party service providers (e.g., Sentry for error monitoring) may process data in other jurisdictions. Where data is transferred internationally, we ensure that appropriate safeguards are in place consistent with applicable data protection principles.

Our platform may contain links to third-party websites or services (e.g., payment provider portals). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time. When we make significant changes, we will update the effective date at the top of this page and notify logged-in users via in-platform notifications. Your continued use of the platform after the effective date of the revised policy constitutes your acceptance of the changes.

For any privacy-related questions, requests, or concerns, please contact us: