Privacy Policy
Effective 1 January 2026. Last updated August 2026.
1. Information we collect
We collect information you provide directly (account creation, listings, messages) and information collected automatically (cookies, IP address, device type).
- Account data: name, email, and — for sellers — payout details (handled by Stripe, not stored by us).
- Listing data: photos, descriptions, prices, and shipping information.
- Order data: items purchased, shipping addresses, and order status.
- Communication data: messages between buyers and sellers.
- Usage data: pages visited, searches performed, and referring URL, via cookies and analytics.
2. How we use your information
We use your information to:
- Operate and improve the Saria platform.
- Process payments and payouts (via Stripe).
- Send you service updates and policy changes.
- Enforce our terms and prevent fraud and abuse.
- Comply with legal obligations.
3. Third-party processors
We share data with trusted partners that power the platform:
- Stripe: payment processing (card data and billing details).
- Keycloak: authentication (account credentials).
- Object storage (AWS S3 / local): images and files.
4. Cookies & session management
We use cookies to keep you signed in and to understand usage for analytics. You can disable cookies in your browser, but some features may not work. We do not sell your data to advertisers.
5. Data retention
Account data is retained as long as your account is active. Order and payment history is retained to comply with tax and financial regulations. Deleted accounts may persist in backups for a limited period.
6. Your rights
You have the right to:
- Access your personal data.
- Request a copy of your data in a portable format.
- Request deletion (subject to legal holds for transactions).
- Opt out of marketing messages at any time.
To exercise these rights, contact us.
7. Security
We encrypt data in transit (HTTPS) and at rest. Payment information is never stored on our servers — Stripe handles it. While we take security seriously, no system is completely secure; please report any suspected breach to our team.
8. Contact us
Questions about this policy? Send us a message and we'll respond within a few business days.
This policy is placeholder content and not legal advice — it must be reviewed by counsel before production launch.