What we collect
Account data (name, email, mobile number, city), verification data (CNIC — stored as a one-way hash plus the last four digits only), listing and bidding activity, inspection records, messages sent through the platform, and standard technical data such as IP address and device fingerprint used for fraud detection.
What we never store
We do not store your full CNIC number, your card details, or your password in plain text. Card data is handled entirely by our licensed payment provider and never touches our servers.
How we use it
To operate the marketplace, verify identity, detect fraud including shill bidding, deliver inspection reports, send transactional notifications you have opted into, and meet legal and tax obligations.
We do not sell your personal data. We do not show advertising based on your bidding behaviour.
Who sees what
Other users see only your public handle (for example, bidder_4f9a), your city, your rating and your sales count. Your name and contact details are revealed to a counterparty only after a sale completes and a deposit is paid.
Retention
Inspection photographs are retained for three years to support the liability window. Messages are retained for two years after a conversation closes. Bid records are retained indefinitely, anonymised if you delete your account. Financial records are retained as required by statute.
Your rights
You may request a copy of your data, correct it, or request deletion. Deleting your account scrubs your personal data and anonymises your bid history; records we are legally required to keep are retained.
This document is provided for information. It is a template drafted for a product build and has not been reviewed by a qualified lawyer in Pakistan. Have it reviewed by counsel before relying on it commercially.