Introduction

Bazary is an online marketplace connecting customers with verified home-based sellers across Jordan. This Privacy Policy explains how we collect, use, store, protect, and share your data when you use https://bazaryapp.com or the Bazary mobile app.

By using Bazary, creating an account, placing an order, registering as a seller, or contacting us, you agree to the practices described here.

Data We Collect

1. Account Information

• Full name
• Phone number (used for OTP verification)
• Email address (optional)
• Password (stored hashed with bcrypt — cannot be recovered)

2. Order & Delivery Information

• Delivery address (text and map-selected)
• Approximate GPS coordinates of address (for delivery fee calculation)
• Order history and details

3. Payment Information

• We do not store card data — sent directly to Mastercard Payment Gateway (PCI-DSS compliant)
• We store only: card type (Visa/Master), last 4 digits, transaction date, success/failure status

4. User-Generated Content

• Product images (for sellers)
• Chat messages with sellers
• Support tickets
• Ratings and reviews
• Voice/image input for Wazari AI assistant (not stored — deleted after processing)

5. Technical Data

• IP address at time of use
• Browser / OS / app version
• Crash logs
• FCM token (for push notifications)

How We Use Data

• Order fulfillment & delivery — share name, address, phone with the assigned seller and courier (Wakilni for crafts/fashion)
• Communications — order confirmations, delivery updates, Push notifications
• Fraud & abuse prevention — monitor conversations and enforce platform safety policy
• Experience improvement — usage analysis and product recommendations
• Legal compliance — retain transaction records per Jordanian tax law

Data Sharing

• Sellers — buyer name, phone, delivery address (per order only)
• Wakilni — delivery info for crafts and fashion
• Mastercard Payment Gateway — payment data for processing
• Firebase (Google) — FCM for notifications + Cloud hosting (if used)
• Gemini AI (Google) — Wazari inputs (processing only — Google does not retain for us)
• Judicial authorities — upon valid court order from Jordanian court

We do NOT sell data to any third party for advertising purposes.

Data Security

• All communications encrypted with HTTPS + HSTS
• Passwords stored with bcrypt (irreversible)
• MongoDB Atlas database with IP whitelist + encryption at-rest
• Access tokens valid for 30 days, revoked on logout
• Rate limiting on OTP and sensitive endpoints

User Rights

Request account & data deletion

You can request account deletion in two ways:

1. In-app: Account → Delete account
2. Email info@bazaryapp.com from the registered email

Deletion is processed within 30 days. Financial transaction records are retained for 5 years per Jordanian tax law.

Other rights

• Export your data (Right to portability)
• Correct inaccurate data
• Restrict processing

Contact: info@bazaryapp.com.

Children

The app is intended for adults 18+. We do not knowingly collect data of children under 18. If we discover such an account, we delete it immediately.

Updates

We update this policy periodically. Material updates are sent via in-app notification + email to registered users.