Privacy Policy

1. Information we collect

We collect information in three ways:

• You provide it: account details (name, email, password), organisation details (business name, country, roles), listings you publish, contact form enquiries, and messages you send us.
• It is collected automatically: technical data such as IP address, browser type, pages visited and approximate location derived from your IP address, used for security, analytics and to operate the service.
• From sign-in providers: if you sign in with Google or another provider, we receive the basic profile information that provider shares with us (typically your name and email).

2. How we use information

We use the information we collect to:

• Provide, maintain and secure the platform, including authentication and account management.
• Publish your listings on the Exchange and show them to other users and visitors.
• Keep each organisation's records separate and visible only to its members and authorised staff.
• Respond to enquiries and provide support.
• Review role requests and verification submissions.
• Improve the platform, including aggregated, de-identified analytics.
• Meet legal obligations and enforce our terms.

3. What is public and what is private

Published listings are public: their title, description, price and the contact details you choose to include can be seen by anyone visiting the Exchange, and may be indexed by search engines.

Draft listings, your organisation's membership, roles, audit history and internal records are private to your organisation and authorised platform staff. Other businesses on the platform cannot see them.

4. AI-assisted features

Features such as the Listing assistant send the details you enter (for example product, quantity and price) to an AI model to generate a draft. The generated text is shown to you for review and is only published if you choose to publish it. Do not enter personal data or third-party confidential information into these tools.

5. Sharing of information

We do not sell your personal information. We share information only with:

• Service providers that host and operate the platform (cloud hosting, database, authentication and AI processing), bound by contractual confidentiality and data protection obligations.
• Other users and visitors, but only the content you choose to publish.
• Authorities, where required by law or to protect the rights and safety of users and the platform.

6. Data retention

We keep account and organisation records while your account is active. Contact form enquiries are retained for as long as needed to handle them and for a reasonable period afterwards. You may request deletion of your account and associated personal data at any time; some records may be retained where the law requires it or for legitimate security and audit purposes.

7. Security

Access to organisation records is controlled by row-level security rules enforced by the database, so one business cannot read another's private data. Passwords are handled by the authentication provider and are never stored in plain text. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify affected users of a personal data breach where the law requires it.

8. International transfers

The platform operates globally and your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us through the Contact page.

10. Children

ZarZar is a business-to-business service and is not directed at anyone under 18. We do not knowingly collect personal data from children.

11. Changes and contact

We may update this policy from time to time and will post the new version here with a revised effective date. Questions and requests can be sent through the Contact page.