Privacy Policy

MDStore is a marketplace operated by Societatea cu Răspundere Limitată „ADS WEB AUGUST”, IDNO 1026023162317, Republic of Moldova. Registered address: Mihail Sadoveanu 6/6.

The new model collects no artwork checkout details for new transactions. Profiles, listings and only contacts selected as public are visible to visitors. Login email and private phone are not published automatically. Opening an external service sends the visit to that service under its own rules; MDStore cannot read that conversation. With Analytics consent, a random sessionStorage identifier helps deduplicate views and clicks; pseudonymous event hashes are retained for at most two days and daily aggregates for at most 90 days. These statistics contain no email, phone, IP or contextual message. Technical IP addresses may temporarily support abuse limits and be processed by infrastructure providers. Withdrawal stops tracking and removes the local identifier. Reports and support requests are available to authorized staff. Historical orders and payments remain protected and retained under applicable duties without retrospective rewriting. PayPal Sandbox is isolated and administrator-only. For data rights or information: contact@adsmoldova.md.

For MDStore services we retain the account identifier, PayPal references, amounts and conversion, balance history, plans, promotion periods and accepted terms version. These records are private to the holder and authorized staff. PayPal processes payment in its own environment; MDStore does not receive card numbers or PayPal passwords. The email provider processes the address and transaction confirmation. Processing supports the requested service, record keeping, abuse prevention and applicable legal duties. Financial records are retained for required periods and dispute resolution. The signed functional HttpOnly mdstore_referral cookie retains the inviter code for up to 30 days after an invitation is opened. Account attribution and reward records support the program and prevent duplicate rewards. Inviters see aggregate totals without their friend's contact details. Private wallet pages load no advertising or Analytics tools.

MDStore uses Zoho for account, review, support and transaction confirmation messages. Transactional email uses Zoho CPaaS; offers use Zoho Campaigns when connected. The provider receives the email address, name and information required for the message. Authorized staff can access account data, CRM notes, consent records and sending history. News and offers require separate consent confirmed by email; cookie consent does not subscribe anyone to a newsletter. Unsubscribe in the message or in your account Email preferences. Optional notifications can be disabled separately. Payment confirmations and necessary account messages are separate from marketing. Open and click tracking pixels are not enabled in these emails. Technical delivery, bounce and complaint states are used to manage sending and avoid unwanted messages. Transaction documents are accessible only to the account holder and administration. Data requests: contact@adsmoldova.md.

Accounts involve the name, email and identifiers needed for authentication; profiles and listings contain descriptions, photos, prices and locality. Creators choose public contacts separately. Data from the former order and creator-verification system is retained for historical records, unresolved matters and applicable duties. Support, reports and data-rights requests are accessible to authorized staff. Do not submit identity documents, passwords or sensitive data in public fields.

Account, order and request data supports the service requested and pre-contractual steps. Applicable legal obligations may require retaining documents; service protection includes abuse prevention. Analytics, marketing and optional search history use separate, withdrawable consent. Moldova's current framework includes Law 195/2024. The applicability of GDPR/ePrivacy to EU/EEA targeting and legitimate-interest assessments require legal review.

Vercel provides hosting and Blob image storage; Neon provides PostgreSQL; Clerk handles authentication and the social login selected by the user. Google Tag Manager/GA4 and Vercel Analytics run with Analytics consent. OpenAI may receive assisted search text and AI support messages; the application requests store:false, which does not guarantee absence of provider logs. For historical transactions, PayPal processed online payments and details entered in its interface; MDStore retains transaction identifiers, amount, currency and status, but not the full card number or security code. The relevant creator receives order/request information. With Marketing consent, Meta Pixel 5535458020013357 sends public page visits and technical browser data to Meta for campaign measurement. This integration does not supply form fields or configure advanced matching. WhatsApp/Meta, Telegram and Viber receive data when you choose them; Facebook/Instagram links open independent services. Email contact uses the published contact address. Contacting us does not subscribe you to marketing.

Providers may process data in other countries. The operator must confirm contracts, locations, subprocessors and transfer safeguards. A complete automatic deletion schedule has not yet been verified for accounts, orders, messages, verification records, files, logs and backups. Retention must be documented according to purposes, applicable duties and disputes; no arbitrary deadline is promised.

You may request access, correction, deletion, restriction, objection and, where applicable, portability, and withdraw consent. Email contact@adsmoldova.md with the subject «MDStore personal data» and describe your request. Proportionate identity verification may be needed; do not send identity-document copies unprompted. Submit a request in your account Messages section. It reaches administration with status, replies and account notifications. Identity verification and export/deletion are handled manually; closing a request does not delete data automatically. Some documents may need to be retained under law. Complaints can be made to Moldova's National Centre for Personal Data Protection (CNPDCP); official contacts and procedures are at https://datepersonale.md.

Cookie settings in the footer let you accept, refuse and withdraw consent by category. See the cookie policy for browser storage details. HTTPS and authentication mechanisms are used; absolute security cannot be guaranteed. A verified age-check mechanism is not present. Conditions for minors, images of people and potentially sensitive data require legal assessment.