1. What this covers
This policy explains what personal data DiasporaGifts collects when you use diasporagifts.mk as a buyer or a vendor, why we collect it, and how it's handled.
2. What we collect
Depending on how you use the platform, we collect:
- Account details — your name, email address, and password (stored securely, never in plain text).
- Order details — recipient name and phone number, delivery address and city, delivery date, and any personal message you write for the gift card.
- Vendor application details — business name, owner name, phone, business address, category, and bank account number (for payouts), if you apply to sell on the platform.
- Payment information — we do not collect or store your card details. Payments are processed directly by PayPal under their own privacy policy.
- Support messages — anything you send us through the in-app support chat.
3. Why we collect it
We use this information to:
- Create and manage your account.
- Process orders and pass delivery details to the relevant vendor so they can fulfil your order.
- Pay vendors for delivered orders.
- Send order confirmations, delivery updates, and — if you opt in — occasion reminders you've set up.
- Respond to support requests.
- Keep the platform secure and prevent fraud or abuse.
4. Who we share it with
We share only what's necessary for your order to be fulfilled:
- The vendor fulfilling your order receives the recipient's name, phone, delivery address, delivery date, and your card message.
- PayPal processes your payment directly — we never see your card or PayPal account details.
- We use Supabase to securely store account and order data, and Resend to deliver transactional and reminder emails.
We do not sell your personal data to third parties.
5. Cookies and sessions
We use a small number of essential cookies to keep you signed in and to remember your session. We don't use third-party advertising trackers.
6. Your rights
You can, at any time:
- View and update your profile details from your account settings.
- Ask us to delete your account and associated personal data by emailing us.
- Ask what personal data we hold about you.
- Withdraw consent for optional communications, such as reminder emails, from your notification settings.
We keep order records for as long as reasonably needed for accounting, dispute resolution, and legal obligations, even after an account deletion request.
7. Data security
Your data is stored with industry-standard encryption and access controls. No online service can guarantee absolute security, but we take reasonable technical and organizational measures to protect your information from unauthorized access.
8. Changes to this policy
We may update this Privacy Policy as the platform evolves. We'll update the date at the top of this page when we do.