Privacy Policy
Last updated: [effective date]
This Privacy Policy explains how [Company legal name] (“Buyosh”) collects, uses, and shares personal information when you use the Buyosh platform. We aim to handle your data lawfully, fairly, and transparently.
1. Information we collect
Account information you provide: name, email, phone number, and password (stored only as a secure hash).
Order and address information: the items you order, delivery addresses and their map coordinates, scheduling, and special instructions.
Device and notification data: push-notification identifiers and basic device information used to deliver order updates.
Usage information: how you interact with the Service, collected to operate and improve it.
2. How we use your information
To create and manage your account; to process, route, and fulfill orders; to enable delivery; to send transactional messages and order updates; to provide support; to keep the Service secure; and to comply with legal obligations.
3. How we share your information
With the Business you order from, so it can prepare and fulfill your order (including your name, order, and — for delivery — address and contact details).
With couriers assigned to deliver your order, limited to what is needed for delivery.
With service providers who process data on our behalf: the payment provider (Tranzila), push notifications (OneSignal), transactional email (Resend), and cloud hosting and storage. We do not sell your personal information.
4. Cookies and local storage
We use cookies and browser local storage for essential functions such as keeping you signed in and remembering your preferences. You can control non-essential storage through the consent options where offered.
5. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, accounting, or dispute-resolution obligations. [Specific retention periods to be confirmed with legal counsel.]
6. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to or restrict certain processing. On account deletion we anonymize personal data while retaining records we are required to keep.
To exercise these rights, contact us using the details below.
7. Security
We use technical and organizational measures to protect your information, including hashed passwords, encrypted transport, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond to incidents.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
9. Where your data is processed
Your information may be processed and stored by our service providers in locations that may be outside your country. Where required, we take steps to ensure an adequate level of protection for such transfers.
10. Changes to this policy
We may update this Policy from time to time. If we make material changes we will take reasonable steps to notify you and will update the “last updated” date above.
Contact us
For privacy questions or to exercise your rights, contact [Company legal name] at [contact email], [registered business address].