# Privacy Policy
**Effective date: 30 May 2026**
StoresWiki LLC ("StoresWiki", "we", "us") operates the StoresWiki Mart marketplace through the website https://mart.storeswiki.com and the StoresWiki Mart mobile and web applications (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have.
## 1. Information We Collect
We collect the following categories of information:
**1.1 Information You Provide**
- **Account information**: name, email address, phone number, password (stored as a one-way hash).
- **Address information**: delivery addresses you save in the app, including coordinates picked from the map.
- **Order information**: items you order, payment method, special instructions, ratings and reviews.
- **Communications**: messages exchanged with vendors or delivery personnel through the in-app chat, support requests.
- **Profile photo and uploaded files** (e.g. prescriptions for pharmacy orders), if you choose to upload them.
- **Identity documents**: only if you apply to become a vendor or delivery person.
**1.2 Information Collected Automatically**
- **Device information**: device model, operating system version, app version, unique device identifiers.
- **Usage information**: pages and features you use, timestamps, search queries, items you browse.
- **Location information**: precise (GPS) and approximate (IP-based) location, used to show nearby stores and deliver orders accurately. We collect precise location only when the app is in use; not in the background.
- **Crash and diagnostic data**: stack traces and device state at the time of an error, to help us fix bugs.
**1.3 Information from Third Parties**
- **Payment processors** (e.g. Stripe, PayPal, local providers) confirm transactions. We never see or store your full card number.
- **Authentication providers** (Google, Apple, Facebook), if you choose social sign-in, share your name and email.
- **Push notification services** (Firebase Cloud Messaging by Google) provide a device token so we can send you order updates.
## 2. How We Use Your Information
We use your information to:
- Deliver the Service: route orders to stores and delivery personnel, calculate delivery zones and fees, process payments.
- Communicate with you: send order updates, receipts, support replies, and (with your permission) marketing messages.
- Improve the Service: analyse aggregate usage, fix bugs, prevent fraud and abuse.
- Comply with the law: respond to legal requests and enforce our Terms.
We do not sell your personal information.
## 3. Sharing Your Information
We share your information only with parties needed to operate the Service:
- **Vendors** (the store fulfilling your order): receive your name, delivery address, phone, and order details — only for the order they fulfil.
- **Delivery personnel**: receive your name, delivery address, and phone for active deliveries.
- **Payment processors**: receive payment information directly through their secure forms.
- **Cloud and analytics service providers** (Google Cloud, Firebase, Cloudflare): host the Service infrastructure and provide notification, analytics and crash-reporting features under contracts that limit their use of your data.
- **Authorities and legal advisors**: when required by law or to protect our rights, you, or others.
We do not share your information with advertising networks.
## 4. Data Retention
- Account data: kept while your account is active. After deletion, we retain identifiable data for up to 90 days for fraud prevention, then anonymise or delete it.
- Order records: retained for 7 years to comply with tax and accounting obligations.
- Diagnostic data: retained for 30 days.
## 5. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your data (subject to retention obligations above).
- Withdraw consent for marketing messages or location collection.
- Object to or restrict certain processing.
- Receive a portable copy of your data.
- Lodge a complaint with your local data protection authority (in the EU, your country's DPA).
To exercise these rights, email us at the address in section 8.
## 6. Children
The Service is not intended for users under 18. We do not knowingly collect data from children. If we learn we have collected such data, we delete it.
## 7. Security
We use industry-standard technical and organisational measures: TLS encryption in transit, hashed passwords, encrypted backups, and access controls to our systems. No system is 100% secure; if we learn of a breach affecting your data we will notify you and the relevant authorities as required by law.
## 8. Contact Us
**Data controller**: StoresWiki LLC
**Email**: [email protected]
**Postal address**: (replace with your registered business address before going live)
## 9. Changes to This Policy
We may update this Policy. The updated version will be posted at https://mart-admin.storeswiki.com/privacy-policy with a new effective date at the top. If the changes are material, we will notify you in the app or by email at least 30 days before they take effect.