Personal Information

We may collect the following types of personal information:

• Contact information (such as name, email address, mailing address, and phone number)
• Account information (such as username and password, or Google Sign-In credentials)
• Payment information (such as credit card details and billing address)
• Transaction information (such as purchases, sales, and payment history)
• Communication information (such as emails, chat messages, and phone calls)
• Location information (such as GPS coordinates and delivery addresses)

Usage Information

We may also collect information about how you use our Services:

• Log data (such as IP address, browser type, pages visited, and time spent)
• Device information (such as device type, operating system, and unique device identifiers)
• Cookies and similar technologies (such as web beacons and pixels)

Where We Store Your Data

Your data is stored securely using Google Cloud Platform (Firebase) services located in the United States. Firebase provides enterprise-grade security and compliance certifications including SOC 1, SOC 2, SOC 3, and ISO 27001.

How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption - All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
• Access controls - Strict role-based access controls limit who can access your data
• Authentication - Multi-factor authentication and secure session management
• Monitoring - Continuous security monitoring and regular security audits
• Secure infrastructure - Cloud infrastructure with physical security, redundancy, and disaster recovery

How Long We Keep Your Data

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account data - Retained while your account is active
• Transaction records - Retained for 7 years for legal and accounting purposes
• Usage logs - Retained for up to 90 days for security and analytics
• Communication records - Retained for up to 3 years for customer service purposes

How to Request Data Deletion

You may request deletion of your personal data at any time. To request deletion:

1. Email us at [email protected] with the subject line "Data Deletion Request"
2. Include your registered email address and account details
3. We will verify your identity and process your request within 30 days

Upon deletion, we will remove your personal data from our systems, except for data we are legally required to retain. Google Sign-In data will be disconnected from your account.