Privacy Policy

1. Who we are and what this policy covers

The RebithReprice service (the rebithreprice.kz website, hereinafter the "Service") is owned and operated by Sole proprietor Rebith (hereinafter "we", the "Company"). This policy describes what data we collect about users of the Service, why, how we store and protect it, to whom and under what conditions we share it — and, no less importantly, to whom and why we do not share it and how we do not use it.

By registering on the website and creating a personal account, you confirm that you have read this policy and agree to the processing of your personal data on the terms described below.

2. How the service is built and where your data actually lives

RebithReprice consists of two separate parts, and this matters for understanding which data goes where:

• The rebithreprice.kz website — personal account, registration, subscription payment, admin panel. Only your account details are stored here: email, phone, full name, store name, subscription status.
• The bot's personal VDS instance (kaspi-bot) — a separate dedicated server deployed specifically for you. It is there, in your instance's own database, that your products, prices, orders, stock, correspondence with buyers in Kaspi chat and access to your Kaspi.kz seller account are stored.

These are two different databases, and they do not mix. The website does not store or see your products, prices, orders or correspondence with buyers — login to the control panel happens via a one-time signed pass (SSO), without transferring or storing your store's business data on the website.

3. What data we collect

When you register and use your personal account on the website, we collect:

• Registration data: email, phone number, full name, store name.
• Password — stored only as an irreversible cryptographic hash; in plain form we never see or store it.
• Subscription data: plan, subscription status and expiry date, renewal history.
• Technical data: IP address — used for protection against password guessing and abuse (request rate limiting) and for security logs.
• Session data: a signed session cookie needed to keep you logged in to your account. There are no third-party advertising or analytics cookies on the website — we do not install Google Analytics, Facebook Pixel, Yandex.Metrica or similar counters.

4. What we use the data for

• Creating and operating your personal account, login and access recovery.
• Email confirmation and password reset — via a link sent to your address.
• Issuing a one-time secure pass (SSO) to log in to the control panel on your VDS.
• Monitoring subscription status and access to paid functionality.
• Contacting you about payment, technical support and the operation of the service.

5. We do not share your data with third parties

We do not transfer, sell or disclose our clients' personal data to third parties. This applies to email, phone, full name, store name, subscription data and any other information you provided at registration or while using the Service.

There are only two narrow exceptions to this rule:

• a direct demand of the state authorities of the Republic of Kazakhstan acting within the law and their official powers;
• technical contractors without whom the website physically cannot operate (hosting provider, the service for sending email confirmation and password reset messages, the bot protection service at registration) — they receive access strictly to the extent needed to provide their service, may not use the data for their own purposes and get no access to the data of your VDS instance.

We do not sell databases, do not pass client contacts to advertising networks and do not share user lists with anyone, including partners and other businesses.

6. We do not analyze the market using client data

Separately and explicitly: we do not use the data and activity of Service clients for market analysis. RebithReprice is a repricing tool that by its nature deals with competitors' prices and the products of each specific store. We do not collect this data into a shared database, do not build market analytics on it, do not produce industry reports and do not sell such conclusions or access to aggregated data to third parties — in any form.

Each client's VDS instance is an isolated environment. One client's prices, stock, orders and repricing strategy never become visible to other clients and are not used by us for any purpose other than providing the service to that very client. We only get access to the data of a specific instance upon the client's own direct request — for example, when contacting technical support with a problem that needs diagnosing.

7. Data storage and protection

• The connection to the website is protected by HTTPS.
• Passwords are stored as a hash, not in plain form.
• The SSO key for panel login is individual to each client: a leak of one client's key gives no access to another client's instance.
• Access to personal data in the website's admin panel is limited to authorized Company employees, to the extent needed for work (technical support, subscription management).

8. Data retention period

We keep account data while the account exists and for a reasonable period after deletion — to resolve possible disputes and meet legal requirements. At your request we delete or anonymize account data, unless this conflicts with mandatory legal requirements (for example, accounting and tax record requirements).

9. Your rights

You have the right at any time to:

• request a copy of the personal data we hold about you;
• demand correction of inaccurate data;
• request deletion of your account and related personal data;
• withdraw your consent to data processing — understanding that this may mean you can no longer use the Service.

To do so, write to us — contacts are given in section 11.

10. Changes to the policy

We may update this policy — for example, when the service structure or legal requirements change. The current version is always available on this page, with the date of the last update shown at the top. We additionally announce material changes in your personal account or by email.

11. Contacts

For questions about personal data processing — WhatsApp +7 778 166 75 45.
Company: Sole proprietor Rebith, RebithReprice service (rebithreprice.kz).