Privacy Policy

This policy explains what Keyzo (keyzo.io) collects when you visit the site, sign in, buy a product — from us or from an independent store on the site — leave a review, or apply to sell, and how we use that information. It sits alongside our Terms of Service.

Depending on how you use the site, we may hold:

• Account details from Google when you sign in: your name, email address and profile picture. We do not receive your Google password.
• Order history: products, quantities, amounts paid, the keys or links delivered to you, and — for a service — the account or post link you gave at checkout.
• Reviews you write: the stars, the text, and the order they belong to.
• Messages exchanged about an order from a store, between the buyer and the store, on the site.
• Whether you agreed to receive offers from us, and later whether you unsubscribed.
• If you apply to sell: your store name, your name, email, country, a messaging handle if you gave one, what you intend to sell, and a password you choose for the seller panel, stored only as a hash. Once approved, the products, stock, images and store image you upload.
• Technical data needed to run the site: signed session cookies, security logs, and the usual request metadata a web server sees (such as IP address and browser).
• Messages you send to support, including anything you attach to an order question.

We do not ask for payment-card numbers ourselves. Checkout is handled by the payment services we use; those services see what they need to take the payment, and we see the result.

We use this information to:

• keep you signed in and show your name, email and picture in your account
• fulfil orders, show your purchases, and let a store deliver what you bought from it
• investigate a code that did not work and process a refund when one is due
• show your review under a shortened name — first name and last initial — on the product and store it is about
• send you the emails in section 6
• review seller applications, run the seller panel and pay sellers through our payment partner
• protect the site against abuse and keep sessions honest
• reply when you write to support@keyzo.io

We do not sell your data, and we do not use it to advertise other companies to you.

Sign-in is provided by Google. When you tap Login with Google you leave Keyzo for a moment, approve the request on Google’s side, and come back. Google’s own privacy policy covers that step. We store only the profile fields listed above, and we refresh them on later sign-ins so your name and picture stay current.

When you buy from a store on the site, the seller running that store sees what it needs to deliver your order: your name, your email address, the product and quantity, and the link you gave for a service. Sellers agree to use that only to deliver the order and answer you about it. They do not see your payment details.

Messages between a buyer and a store about an order are stored with the order and are readable by the people who operate Keyzo. They are scanned automatically for contact details, links and mentions of outside payment, which are flagged for our review; we read a conversation when it is flagged, when either side asks us to step in, or when an order is disputed. We do not read them otherwise, and we never use them for marketing.

If you sell on Keyzo, the identity you verify to be paid out — documents, selfie, tax identifier, bank or wallet details — is collected and held by Whop, our payment partner, under Whop’s own privacy policy. We see only the outcome: whether you are verified and whether payouts are open, your balance, and your payout, dispute and case history as Whop reports them. Your public store page shows your store name, the image you upload, your description, your country and the ratings buyers leave; it does not show your personal name or email.

We send two kinds of email, from two addresses. Order and account emails — payment received, your codes, your review link, seller panel sign-in — come from send.keyzo.io and are part of the service; you cannot opt out of them while you use the site. Offers and news come from news.keyzo.io, only if you agreed to hear from us, and every one carries an unsubscribe link that works with one click.

Marketing emails record whether they were opened and which links were clicked, so we can tell what is worth sending; order emails are not tracked. Both are delivered by an email service acting on our instructions.

We set a small httpOnly session cookie after you sign in, so the site knows it is you on the next page. It is not used for advertising. If you sign out, the cookie is deleted. The seller panel and the admin panel each use a separate cookie of the same kind that never mixes with customer accounts. A short-lived cookie also remembers if you closed the Telegram notice.

Hosting, database, email and payment services that run the site may process data on our behalf. They only get what they need to do that job. Card payments, seller accounts, seller identity verification and payouts are handled by Whop, which acts as a payment processor under its own terms and privacy policy. Crypto payments are handled by NOWPayments. We may also share what the law requires if we are asked by a court or regulator.

Support mail sent to support@keyzo.io is read by the people who operate Keyzo, and only for that purpose. When you write about an order from a store, we may pass the relevant details to that store so it can put things right.

Account and order records stay for as long as the account is open and as long as we need them to handle a later support request, refund or payment dispute. A seller application that is turned down is deleted on request. If you want your account or store closed, write to us. We will delete or anonymise what we can; we may keep a minimal record where the law or a dispute requires it.

Access to customer and seller records is limited. Sessions are signed, passwords are hashed, and the codes sellers load are shown to no one but the seller and the buyer who paid. That said, no website can promise perfect security. Use a Google account you control, choose a seller password you use nowhere else, and tell us if something looks wrong.

The site is not aimed at children. We do not knowingly collect personal information from anyone who cannot form a contract where they live. If you believe we have, email us and we will remove it.

You can sign out at any time from your account page, and unsubscribe from offers from the link in any of them. You can ask us for a copy of what we hold, or to correct or delete it, by writing to support@keyzo.io. Where the law gives you further rights (access, erasure, objection), we will honour them.

We may update this policy. The date at the top is the version in force. Material changes will be reflected here.

Privacy questions go to the same inbox as everything else: support@keyzo.io.