Privacy Policy
Last updated:
This policy explains how ideo (ideo.mn, app.ideo.mn) collects, uses, stores and protects your personal information. ideo is a product of kommai (Ulaanbaatar, Mongolia), which is responsible for your data.
1. Information we collect
- Google account information: when you sign in with Google we receive your name, email address and profile picture. We never receive your Google password.
- Device and security information: device type, browser, IP address and last activity of each signed-in device. We use it to protect your account and to enforce the one-active-stream rule.
- Purchases: tickets, deposits, payment status and eBarimt receipts. Card and bank credentials are processed by our payment provider (QPay); we do not store them.
- Verification: if you verify your identity (for 18+ events or to become a creator), we keep your verified name, whether you are an adult and the verification date. ID document images are deleted within 30 days after review. Your national register number is kept only as a one-way hash, to ensure one person has one verified account.
- Creator information: phone number, bank account (encrypted), organization details and eBarimt details.
- Viewing information: which events you watched and when, and messages you post in Chat.
2. How we use it
- To create your account, sign you in and provide tickets and viewing access
- To prevent account sharing and unauthorized redistribution
- To process payments, refunds and creator payouts, and to issue eBarimt receipts
- To restrict age-restricted content
- To fix problems and keep the service secure
3. Google user data
When you sign in with Google, ideo requests only the basic scopes openid, email and profile. We use your name and profile picture to show your account (for example next to your Chat messages) and your email address to identify your account, send receipts and contact you about your purchases. We do not access your Gmail, Drive, contacts or any other Google data.
ideo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models.
4. Cookies
We use only strictly necessary cookies: the sign-in cookie (ideo_sid) and a short-lived cookie during Google sign-in. We do not use advertising or tracking cookies.
5. Sharing
We do not sell your information. We share it only with parties needed to run the service:
- Amazon Web Services — infrastructure and Live streaming
- Google — sign-in
- QPay — payments
- Tax authority — eBarimt
- Competent authorities, when required by law
The organizer (creator) of an event you bought a ticket for may see your name; they do not see your email or payment details.
6. Retention
We keep account information until you delete your account. Payment and tax records are kept for the period required by law. Sign-in records are deleted automatically after 30 days.
7. Your rights
You can access, correct and request deletion of your information. You can sign out any device under Account → Signed-in devices.
Deleting your account: email support@ideo.mn from your account’s email address. We delete your account and Google profile data within 30 days, except payment and tax records we must keep by law. You can also remove ideo’s access at any time in your Google Account → Security → Third-party connections.
8. Security
Data is transmitted over encrypted connections and sensitive data such as bank accounts is stored encrypted. The sign-in cookie cannot be read by JavaScript (HttpOnly).
9. Contact
Send privacy questions and requests to support@ideo.mn.