Privacy policy

Who to contact

UniSale, UniSale Business and UniSale Kiosk are operated by "NATURAL TREASURE" MCHJ, Uzbekistan.

For questions about UniSale or this policy, contact Wencheng Chen at wenson@unisale.cn. Additional phone and WeChat contact details are on our support page.

Participating shops manage their own products, staff and orders. A shop may also handle information under its own privacy practices when fulfilling your order.

Information we use

• Account and sign-in information: profile name, contact details you provide, profile image, language, account identifiers, sign-in provider identifiers, authentication credentials or tokens, and business-role bindings. Social sign-in providers may share your name, email and profile information according to your choices and their settings.
• Orders and business activity: products, carts, orders, delivery addresses, recipient contact details, order notes, reviews, inventory, staff roles, cash settlements, and payment transaction identifiers, amounts and status. A service order can reveal information about the service you selected, including a health-related service. Submit only information needed for that order.
• Location and addresses: a delivery address or location you enter, and device location when you allow a location-based feature. These support regional-server routing, shop discovery, navigation, delivery and other location-based operations. You can control location access in your device settings.
• Content you submit: support requests, messages, product or profile images, uploaded documents and other content you choose to provide. If you use voice input, your recording is sent for speech recognition so it can be converted into text.
• Search and voice: text searches and voice recordings you choose to send are processed to recognise speech and find shops, products or services. Voice input requires microphone permission. Do not include confidential information unrelated to your search.
• Photos and files: photos you capture or select can be used for your avatar, product information, image search or payment evidence, depending on the feature you use. Camera access is used for these actions and barcode scanning. Selecting a file does not grant access to every file on your device.
• Support and communications: the contact details and issue description you submit are sent to the staff assigned to handle your request. If you link Telegram, we process your Telegram identifier to send the business notifications you enable.
• Technical information: IP address, app and browser information, session and device identifiers, security and diagnostic records, and interactions needed to operate the service. Advertising features may record an impression and an account or launch identifier.

The information used depends on the app, your role and the features you use. Camera, photo, microphone and location features request the relevant device permission.

Why we use it

We use information to sign you in, maintain accounts and permissions, display catalogs, process orders and payments, coordinate delivery, operate shops and kiosks, respond to support requests, protect accounts, investigate errors and misuse, and meet applicable recordkeeping obligations.

Optional features use the information needed for that feature, such as audio for voice input or location for finding a shop. You can decline a device permission, although the corresponding feature may not work.

When information is shared

Information is made available to the shop and authorized staff who need it to carry out a transaction or business task, and to delivery personnel where needed to fulfill an order. Profile, product and review content may be visible to other users when you publish it.

If a shop belongs to an enterprise, its general manager can view that shop's business data, including orders, inventory and sales. Independent shops are not visible to an enterprise.

When a shop enters a supplier code at stock-in, that supplier can view the currently associated product's stock and historical sales. Replacing the supplier code transfers this product-level visibility to the new supplier; it ends when stock reaches zero. Suppliers cannot use this association to see the shop's unrelated products, customer records, staff or payment data.

Depending on the feature and region, we use hosting and infrastructure services, including Cloudflare R2 where configured, Apple, Google, Facebook or Telegram sign-in, payment providers, messaging services, map services and speech-recognition services. Configured translation and image-search services receive the information needed for those features. For example, a map provider receives network requests for the area you view and a translation service receives the text to be translated. These providers receive the information needed for the function you use. Their own privacy notices also apply to information they process through their services.

We may disclose information where required by applicable law, to respond to a lawful request, or to protect users and the service. Contact us for information about the providers used for your account or region.

Storage, security and international processing

UniSale operates regional services in Uzbekistan and China. Requests may be routed by region, and information may be processed outside your country, including by providers involved in your chosen features.

We use HTTPS connections, account permissions and other technical safeguards. Password credentials are stored as hashes; retained Apple authorization tokens are encrypted. No method of storage or transmission can guarantee absolute security.

The apps and websites store session information, settings and cached content on your device. Signing out clears local sign-in state. Browser or operating-system settings let you remove local website or app data.

Retention and account deletion

Information is retained while needed to operate your account and the service, fulfill transactions, resolve disputes, protect the service or meet applicable obligations. Retention depends on the type of record and its purpose; there is no single retention period for every record.

You can initiate deletion from Profile → Delete account or the account-deletion page. For a customer account, deletion removes sign-in credentials, social account bindings, saved addresses and personal profile/contact information, and revokes active sessions. Personal text associated with supported order, delivery, payment and support records is removed or redacted.

For a business account with an established role, this action instead removes sign-in credentials and social bindings, revokes sessions and suspends sign-in. The staff account and business records remain. Administrator accounts cannot use self-service deletion; contact support for help with a data request.

If you signed in with Facebook, the public Facebook sign-in data deletion instructions explain both the self-service path and how to ask for help without signing in.

Shops and business records remain. Inventory, orders, transaction amounts and identifiers, financial totals, unsettled cash obligations and historical role references are retained. A deleted customer’s historical account record becomes inactive and anonymous rather than removing the business records linked to it. Removing business sign-in does not delete a shop or cancel its financial obligations.

Private avatar files are queued for deletion. An image still used by another account or business record may remain. File cleanup and Apple authorization revocation may retry after account deletion; these external cleanup steps can take additional time. For Apple sign-in, we temporarily retain only the provider identifier needed to block account recreation until revocation succeeds, while profile claims are erased immediately.

Backups and records retained for security or legal obligations may have a different retention period from active account data. Contact support about a specific record or deletion request.

Your choices and requests

You can update available profile details, change app permissions in your device settings, sign out, disconnect a sign-in provider through that provider's settings, or request account deletion. Disconnecting a provider alone does not delete your UniSale account. Deleting your UniSale account does not delete your Google, Apple, Facebook or Telegram account, or records independently held by a shop or payment provider.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to certain processing, or withdraw consent. Send requests to wenson@unisale.cn. We may ask for information needed to verify account ownership. You may also contact the relevant privacy authority.

If you believe a child has supplied information without appropriate permission, contact support so we can investigate and handle the information appropriately.

Policy changes

We may update this policy when the service or its data practices change. The effective date above identifies the current version. Material changes will be explained through the service or another appropriate notice.