Privacy Policy
Last updated: 30 September 2026
Effective date: 30 September 2026
Data controller: Simple Payments LLC (ООО «Простые платежи»)
Privacy contact: support@kazna.online
Website: https://kazna.online/en
This Privacy Policy explains how we collect, use, share, retain, and protect personal data when you use
kazna.online, Kazna bots/mini-apps, and the Kazna plugin for ChatGPT and Codex
(MCP). It is written in English for Directory review and international users. The Russian version of our Privacy Policy
remains available at https://kazna.online/privacy.
1. Who we are (data controller)
The data controller is Simple Payments LLC (ООО «Простые платежи»), operating the Kazna platform.
For privacy requests, email support@kazna.online. We process personal data
under applicable law, including Russian Federal Law No. 152-FZ “On Personal Data” and, where applicable, principles
aligned with GDPR transparency and data-subject rights.
2. Scope
This Policy covers personal data processed when you:
- visit or use https://kazna.online (including /en paths);
- use Kazna Telegram or MAX bots and mini-apps;
- sign in to an author cabinet;
- connect the Kazna MCP plugin inside ChatGPT or Codex via OAuth.
The Kazna ChatGPT/Codex plugin provides read-only author cabinet insights for an already connected
account. It does not run checkout, create products, set prices, or initiate payouts inside ChatGPT or Codex.
3. Categories of personal data we collect
Depending on how you use Kazna, we may process the following categories of personal data:
- Identity and contact data: name, email address, phone number, locale preferences.
- Account data: author profile fields, business details you submit, authentication records.
- Messenger data: messenger user id, display name, username, and profile photo when provided by Telegram or MAX.
- Transaction and billing metadata: order codes, amounts, statuses, ledger entries, payout request status. We do not store full payment card numbers (PCI DSS card data is handled by the payment provider).
- Cabinet content you manage: channel titles/status, storefront profile fields, subscriber lists for owned channels.
- Technical data: IP address, device/browser signals, cookies, local storage, security logs, UTM attribution.
- Support data: messages you send to support@kazna.online or support bots.
- Plugin / OAuth data: OAuth client identifiers, authorization codes, access/refresh tokens, and the read-only tool responses returned for your own author account (channels, subscribers, storefront profile, orders, billing summaries).
We do not intentionally collect government ID numbers, health data (PHI), or full payment card PAN/CVV.
We do not ask ChatGPT for full conversation history beyond what is needed to execute a tool call you initiate.
4. Purposes of use
We use personal data to:
- provide and secure the Platform and author cabinet;
- authenticate users (cabinet sessions and OAuth for ChatGPT/Codex);
- fulfill platform features you request (orders, access delivery, receipts, author payouts on kazna.online);
- prevent fraud, abuse, and security incidents;
- comply with legal and accounting obligations;
- respond to support requests;
- measure product usage with analytics described below.
5. Legal bases
Where required, we rely on: performance of a contract; consent (where we ask for it); legitimate interests in
operating, securing, and improving the Platform; and legal obligations.
6. Categories of recipients (who we share with)
We share personal data only as needed with:
- payment providers and fiscal data operators;
- banks for author payouts;
- Telegram and MAX for bot/mini-app delivery;
- hosting and infrastructure providers;
- web analytics providers (Yandex Metrica);
- OpenAI, when you connect Kazna through ChatGPT or Codex (to complete OAuth and tool calls you initiate);
- authors, for buyer contact/order details needed to fulfill a purchase on the Platform;
- public authorities when required by law.
We do not sell personal data and do not share it for third-party advertising unrelated to Platform operation.
7. Data retention timelines
- Account data: for the life of the account, then deleted or anonymized within a reasonable period after closure, unless longer retention is required by law.
- Orders, billing, and payout records: typically retained for accounting/legal retention periods (up to several years as required by applicable law).
- OAuth access tokens: short-lived (hours).
- OAuth refresh tokens / MCP cabinet tokens: until expiry, revocation in cabinet Settings, or account deletion.
- Security and server logs: typically up to 12 months, unless needed longer for investigations.
- Support emails: as needed to resolve the request, then according to ordinary business retention.
8. Your rights and controls
Subject to applicable law, you may request:
- Right of access — a copy of personal data we hold about you;
- Right to rectification — correction of inaccurate data;
- Right to erasure (“right to be forgotten”) — deletion where legally applicable;
- Right to restriction — limit processing in certain cases;
- Right to data portability — receive data in a structured format where applicable;
- Right to object — object to certain processing based on legitimate interests;
- Withdrawal of consent — where processing is based on consent.
How to exercise these rights: email support@kazna.online with the subject
“Privacy request”. Authors can also revoke MCP/OAuth access in cabinet Settings and disconnect ChatGPT/Codex.
9. Cookies and analytics
We use cookies and browser storage for sessions, preferences, and attribution. We use Yandex Metrica for traffic
analytics. You can limit cookies in your browser; some features (including sign-in) may stop working if cookies are blocked.
10. International transfers
Personal data may be processed on servers in different countries, including when you use messengers or connect the
plugin through OpenAI. We apply safeguards required by applicable law for such transfers.
11. Security
We use administrative and technical measures appropriate to the risk, including HTTPS, access controls, and
least-privilege access to production systems. No method of transmission or storage is 100% secure.
12. Children
Kazna is not directed to children under 18. We do not knowingly collect personal data from children.
13. Changes to this Policy
We may update this Policy. The current English static version is published at
https://kazna.online/legal/privacy-en.html.
Material changes will be reflected by updating the “Last updated” date above.
14. Contact
Privacy and data-subject requests:
Email: support@kazna.online
Web: https://kazna.online/en