By registering for Panoqor, using the website, web application, workspace, public tour pages, or submitting data through forms and other service interfaces, the user gives Individual Entrepreneur Keremet Labs, IIN 820707300847, unconditional consent to collect and process their personal data in accordance with this consent and the laws of the Republic of Kazakhstan.
This consent applies to the collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, and destruction of personal data to the extent necessary for the operation of Panoqor.
1. What personal data may be processed
- name, surname, username, pseudonym, and other profile details;
- email address and any other contact details voluntarily provided by the user;
- organization details, role within an organization, team composition, and account service identifiers;
- data uploaded by the user into the service, including property and tour names, descriptions, addresses, images, files, capture metadata, and other materials;
- billing and contract-related data where the user or their organization purchases services, including legal entity name, BIN, contract number, invoice number, comments, payment amount, and payment date;
- technical data, such as cookie identifiers, browser local-storage data, IP address in shortened or hashed form, user-agent, request time, and other service operation logs.
2. Purposes of collection and processing
- registering users, authenticating them, and granting access to Panoqor features;
- creating, storing, publishing, and managing 3D tours, properties, and organization workspaces;
- performing user agreements, contracts, invoices, and other obligations between the user and the operator;
- maintaining accounting, tax, and internal records, confirming payments, and preparing related documents;
- processing support requests and sending service, security, and terms-related notifications;
- ensuring service stability, preventing abuse and fraudulent activity, and protecting infrastructure;
- producing internal usage and view analytics and improving the product;
- complying with the laws of the Republic of Kazakhstan and protecting the operator’s rights and legitimate interests.
3. Transfer of personal data to third parties
The user consents to the transfer of personal data to third parties to the extent necessary to achieve the stated purposes and operate the Panoqor service.
- to Supabase as a provider of authentication, database services, and related cloud infrastructure;
- to Cloudflare R2 and related technical components for storing user files and tour content;
- to contractors and service providers involved in development, support, administration, hosting, and maintenance of the platform;
- to banks, accountants, auditors, and other counterparties where transfer is required for payment confirmation, accounting, or contractual performance;
- to state authorities and other authorized persons where disclosure is required by law.
4. Cookies, local storage, and technical analytics
The user agrees to the use of technically necessary cookies and browser local storage for service operation. In particular, Panoqor may store the interface language, current organization, browser session state, and the identifier of a public-tour visitor.
When public tours are viewed, the service may process a visitor ID, IP hash, and user-agent for counting views, limiting duplicate events, and preventing abuse.
5. Retention period
Personal data is retained for as long as necessary to achieve the purposes of processing, perform the operator’s contractual and legal obligations, and meet retention periods required by the laws of the Republic of Kazakhstan. Once those purposes are fulfilled, data is deleted, anonymized, or archived to the extent permitted by law.
6. Security measures
- use of secure data-transfer channels, including HTTPS;
- access controls and role-based restriction of data access;
- use of generally accepted organizational and technical information-security measures;
- logging of selected technical events and abuse-control mechanisms to protect infrastructure and user data.
7. Withdrawal of consent
The user may withdraw this consent by sending a request to [email protected] or by submitting a written notice to the operator. Withdrawal does not apply where processing is required by the laws of the Republic of Kazakhstan or where an outstanding obligation exists. After receiving a withdrawal request, the operator reviews it and takes action in accordance with applicable law.
8. User confirmation
- the user confirms that this consent has been read, understood, and accepted voluntarily;
- the user confirms that the personal data they provide is accurate;
- the user understands that some information published by them in public tours or other open sections of the service may become accessible to third parties within the chosen publication settings;
- the user agrees that the current version of this consent is published on the Panoqor website and applies from the date of publication.