Privacy Policy
Last updated: August 2, 2026
1. Information We Collect
We collect the following information to provide our services:
- Steam Account Data: SteamID, username, avatar, and profile URL (via Steam OpenID authentication).
- Trade URL: Your Steam Trade URL, required to send trade offers.
- Balance Information: Wallet balance, transaction history, and deposit records.
- Telegram Chat ID: If you choose to link your Telegram account for notifications.
- Usage Data: Pages visited, actions taken, and error logs for platform improvement.
2. How We Use Your Information
- To facilitate trades between users and bots.
- To process deposits and withdrawals.
- To send trade notifications via WebSocket, Web Push, or Telegram.
- To detect and prevent fraud, scams, and abuse.
- To improve platform performance and user experience.
3. Data Sharing
We do not sell or share your personal information with third parties, except:
- Steam Corporation: Trade offers are sent through Steam's API.
- Kaspi Pay: Payment processing for deposits and withdrawals.
- Legal Requirements: When required by law or to protect the Platform from abuse.
4. Data Security
- All data is encrypted in transit (HTTPS/TLS).
- Steam API keys are encrypted at rest.
- Admin access is protected by JWT tokens with automatic revocation.
- Database access is restricted and logged.
5. Cookies
We use essential cookies for:
- Session management (login persistence).
- Admin authentication tokens (httpOnly, secure).
- Theme preference (localStorage).
We do not use tracking cookies or third-party analytics.
6. Data Retention
- Account data is retained as long as your account is active.
- Trade records are retained indefinitely for audit purposes.
- Deleted accounts have personal data removed within 30 days.
7. Your Rights
- Request a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Opt out of non-essential notifications.
8. Children's Privacy
The Platform is not intended for users under 13 years of age. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy at any time. Significant changes will be communicated via the Platform.
10. Contact
For privacy-related inquiries, contact us at privacy@sgomarket.com or via our support page.
