Privacy policy
Last updated
This policy explains what KeyFusion collects, why, who it goes to, and what you can ask us to do with it. It covers this website and the buyer account behind it.
What we collect
Account details
The identifier you sign in with — a Telegram account, an email address, or both — together with any details you choose to add to your profile. If your account is linked to Telegram, we store your Telegram user ID and username so we can recognise you and send order notifications.
Orders
What you bought, when, the price, and the delivered codes. Order records are kept because they are the proof of what we owed you and delivered, and because you need them to resolve a problem with a code later.
Balance and payments
Every credit and debit on your balance, as a ledger entry. For crypto top-ups we store the payment reference and status reported by our payment processor, and the amount credited. We never see, receive or store your card details, wallet keys or exchange credentials — payments are handled entirely by the processor.
Reviews
If you review an order, we store your rating, your comment and which product it was for. Your name or handle is published only if you chose to show it; otherwise the review appears as “Verified user”. Reviews are public — see the reviews page.
Technical data
Our servers log requests in the ordinary way: IP address, time, the page requested, and browser user-agent. These logs exist to keep the service running and to investigate abuse and fraud.
Why we use it
- To provide the service — creating your account, taking payment, delivering codes, keeping your balance correct.
- To support you — answering questions and investigating problems with an order or a code.
- To prevent fraud and abuse — checking that payments and accounts are legitimate, and enforcing our terms of service.
- To meet legal and accounting obligations — keeping records of transactions for as long as the law requires.
Who we share it with
We do not sell your data, and we do not share it for advertising. It is disclosed only to:
- Our payment processor, which handles crypto top-ups and tells us whether a payment confirmed.
- Telegram, where your account is linked to it, for sign-in and notifications. Telegram’s own privacy policy applies to what happens inside Telegram.
- The suppliers who issue the codes, to the extent needed to fulfil an order or investigate a faulty code.
- Authorities, where we are legally required to disclose.
Cookies and advertising
The site sets a session cookie so you stay signed in, and remembers your light or dark theme preference.
It also loads Google’s advertising tag. That is what lets us tell whether an advert we paid for actually led to a sale, which is the only reason it is here. If you are in the EEA, the United Kingdom or Switzerland, the tag is told to store nothing before it loads, so no advertising cookie is written on your device at all. Everywhere else it sets one.
We also work out which country a visit came from, so we know which countries are worth advertising in. That happens on our own server and only the two-letter country code is kept — your IP address is never written to our records. Country data by DB-IP.
How long we keep it
Order and balance records are kept for as long as we need them for accounting, tax and dispute purposes, which typically outlasts the account itself. Other account data is kept while your account is open and for a reasonable period afterwards. Server logs are kept only as long as they are useful for security and diagnostics.
Security
Traffic to the site is encrypted in transit. Access to production systems is restricted, and balance changes are written to an append-only ledger so a balance cannot be altered without leaving a record. No system is perfectly secure, and we do not claim otherwise — if a breach ever affects your data, we will tell you.
Your choices
You can ask us to:
- give you a copy of the data we hold about you;
- correct anything that is wrong;
- delete your account and the data we are not legally required to keep;
- stop sending you notifications.
Financial records tied to completed orders cannot be deleted on request, because we are required to retain them.
Depending on where you live, you may have further statutory rights, including the right to complain to a data protection authority.
Children
The service is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes, the updated version appears here with a new date. Material changes affecting how we use your data will be flagged to account holders.
Contact
To exercise any of the rights above, or to ask how your data is handled, write to info@keyfusion.io. For anything quicker, reach us at @KeyFusion; the contact page lists every route.
The data controller is KeyFusion Global F.Z.E, registered in Ajman Free Zone, United Arab Emirates, at B.C. 1304659 – C1 Building, Ajman Free Zone, UAE.