Privacy Policy

ElanLink.az ("Platform") respects the privacy of its users. This Privacy Policy explains how your personal data is collected, used, stored, and protected when using the platform.

• Creating and managing your account.
• Posting, moderating, and displaying listings.
• Content verification through the automated moderation system.
• Ensuring platform security (preventing spam, fraud, abuse).
• Processing payment transactions.
• Sending email notifications (listing status, expiration, etc.).
• Improving the platform and statistical analysis.
• Complying with legal requirements.

• All data is transmitted using SSL/TLS encryption.
• Personal data is stored in an encrypted database.
• JWT tokens are stored only in httpOnly, secure, sameSite: strict cookies.
• Files are securely stored in Cloudflare R2.
• System access is regularly audited and audit logs are maintained.
• Passwordless authentication - no risk of password theft.

The platform uses cookies for the following purposes:

• Authentication - for session and refresh tokens (essential cookies).
• Language selection - to remember your chosen language.
• Security - for CSRF attack protection.

Your personal data is not shared with third parties, except in the following cases:

• Kapital Bank ASC - the acquiring bank for accepting and processing card payments (Visa, Mastercard).
• Cloudflare - for file storage and CDN services.
• Legal requirements - by court order or lawful request.

• Right of access - to know what data has been collected about you.
• Right to rectification - to request correction of inaccurate data.
• Right to erasure - to request deletion of your account and data.
• Right to object - to object to certain data processing.
• Right to data portability - to receive a copy of your data.

• Account data - while the account is active and 30 days after deletion.
• Listing data - deleted 90 days after archival.
• Transaction logs - stored for 1 year.
• Violation history - stored indefinitely (for security).

ElanLink.az is not intended for persons under 18 years of age. We do not knowingly collect personal data from persons under 18. If such data is discovered, it will be immediately deleted.

This Privacy Policy may be updated from time to time. Users will be notified of significant changes via email. By continuing to use the platform, you agree to the updated policy.