Privacy Policy

Scope and responsibility

This notice describes the current application, not a certification of privacy compliance. Use synthetic data for pre-launch testing. The operator’s legal identity and address, monitored privacy contact, approved legal grounds, service-provider arrangements and retention schedule remain launch requirements.

Accounts and public profiles

The application handles your email address, public display name, password hash, account status and session/security records to authenticate you and control access. Your seller display name, approved verification indication, active offers and transaction-backed reviews can appear publicly. Account email, private verification documents and internal account identifiers are not part of the public seller profile.

Seller verification and private documents

Seller verification handles ID front and back images, a dated challenge selfie, proof of address, document category, submission status and review records. These support identity review and seller eligibility. The upload flow processes JPEG/PNG images, strips image metadata and uses private encrypted document storage. Document viewing requires authorized staff permission and records access. These controls do not eliminate all security risks; hosting and recovery checks remain prerequisites for real-data use.

Orders, messages and notifications

The application stores listing and order details, delivery-access events, ratings, disputes and financial records for supported transaction workflows. Order conversations are available to the buyer, seller and explicitly authorized staff. In-app notifications record recipient, event and read status. Notification and email preparation records may be stored, but external email delivery is disabled. Do not put passwords, identity documents or payment credentials in order messages.

Payout, security and promotion records

Payout settings, where configured, use private destination storage and masked displays; submitting settings is not proof that a provider supports or has verified the destination. External payouts are disabled. Security controls process network addresses for rate limiting and record selected request/error and administrative audit information. Application logs redact sensitive fields, but that is not a promise about every hosting log.

Promotion measurement can use pseudonymous account-derived identifiers to deduplicate eligible logged-in impressions and clicks. It does not add an advertising cookie. No external advertising or analytics integration is enabled by this application.

Access, service providers and retention

Information is limited by account ownership and staff permissions within the application. Hosting operators may process data as part of running the service; the approved provider inventory, locations and contractual arrangements must be confirmed before launch. No active payment, external email, third-party KYC or advertising relationship is claimed here.

A complete retention and deletion schedule is not configured. Records are not automatically erased merely because a session ends. Account, transaction, verification, message, audit and backup retention need documented purposes and approved periods before real-data operation. This page does not promise a fixed deletion deadline.

Privacy rights and requests

Depending on applicable law, rights may include information, access, correction, objection, erasure or blocking, portability and a complaint to the relevant authority. Requests may require identity verification and may be subject to legal limits. The application has no general privacy-request submission or account-erasure form. A monitored privacy channel and request-handling process must be established before launch; order chat is not a substitute for them.