Privacy Policy

What we are

Keshan is a marketplace for homes and cars across Afghanistan and its diaspora. We connect buyers and sellers. We are not a party to any transaction conducted through the platform.

What we collect

• Account info — your phone number (if you sign in with a phone number and password) or your Google account email and name (if you sign in with Google), plus the avatar image Google provides and any display name you set.
• Listings — the text, photos, price, and location set on a listing.
• Saved listings — which listings you mark as favorites.
• Messages — the contents of chat messages you send to other users about a listing, so we can deliver them and show your conversation history.
• Technical data — your IP address, browser or device type, and timestamps of requests, kept in server logs for short periods (typically 30 days) for security and debugging.
• We do not collect payment information. We do not run analytics tracking or advertising cookies at this time.

Why we collect it

• To create and authenticate your account.
• To show listings to other users and process saves.
• To deliver and store the messages you exchange with other users.
• To prevent abuse and respond to security incidents.
• To improve the product (we may look at aggregate usage patterns, never tied to your identity).

Who we share it with

• Google — when you sign in with Google, the standard OAuth profile fields (email, name, avatar) are exchanged.
• Cloudflare R2 — uploaded photos are stored on Cloudflare's object storage.
• Vercel — hosts our website.
• Railway — hosts our application servers and database, processing your data only as our processor.
• Sentry — receives crash and error reports (which can include your IP address and technical context) so we can diagnose and fix problems.
• We do not sell your data. We will only disclose data in response to lawful legal process, and we will tell you when we are legally able to.

Your rights

If you are in the EU, UK, or Türkiye (KVKK), you have the right to access, correct, export, or delete the personal data we hold about you. To request any of these, email privacy@thekeshan.com from the email address on file. Account deletion is permanent within 30 days.

Children

Keshan is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

Changes

We will update this page when policy changes. Material changes will be announced in the app banner for at least 14 days before they take effect.

Contact

hello@thekeshan.com for general inquiries, privacy@thekeshan.com for data requests.