Privacy policy

1. Who we are

Gordon Techs operates this marketplace and is the controller of the personal data described here. Contact details are in section 10.

2. What we collect

Account data

Your name, email address and a securely hashed password. We never store your password in readable form. If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.

Profile data

Anything you choose to add to your profile, such as a profile photo.

Store data (suppliers)

Your store name, description, phone number, email, street address, city, country and logo. Bear in mind that most of this is published on your public storefront — that is its purpose.

Content you create

Product listings and images, reviews and ratings, chat messages and any files you attach to them, and the sale records a supplier enters after a deal.

Technical data

Standard server logs, and the timestamps needed to show whether a message was delivered and read, and whether a user is currently online.

What we do not collect

No payment data. There is no checkout on this Platform, so we never receive or store card numbers, mobile money details or bank accounts. We also do not ask suppliers for payout details.

3. Why we use it

• To create and secure your account, and to verify your email address.
• To publish product listings and storefronts to other users.
• To deliver messages between customers and suppliers in real time.
• To send notifications about replies, reviews and store approval decisions.
• To review supplier applications and moderate stores and content.
• To produce aggregate figures shown in the supplier and admin dashboards.
• To investigate abuse, fraud and breaches of our terms.

4. What other people can see

• Public to anyone: product listings and images, store name and location, reviews with the reviewer's display name and photo.
• Visible to the person you are talking to: your display name, photo, message content and attachments, and whether you are online or have read a message.
• Visible to administrators: account and store details needed for approval and moderation.
• Never shown: your password, and your email address is not published on your profile.

Take care with what you put in a chat message. If you share a phone number, address or payment instruction with a supplier, that person then has it.

5. Service providers

We use a small number of processors to run the Platform. They handle data on our instructions only.

• Neon — hosts the PostgreSQL database holding accounts, listings, messages and reviews.
• Cloudinary — stores uploaded images: product photos, store logos, profile pictures and chat attachments.
• Pusher — delivers real-time chat messages and presence updates.
• Google — only if you choose to sign in with Google.
• Our email provider — sends verification codes, password resets and notification emails.
• Vercel — hosts and serves the application.

We do not sell personal data, and we do not share it with advertisers.

6. Storage on your device

When you sign in, we store a session token and a refresh token in your browser's local storage so you stay signed in. They expire, and signing out removes them. We do not use advertising or third-party tracking cookies.

7. How long we keep it

• Account and profile data: while your account is open.
• Listings and reviews: while published, and reviews may remain after a listing is removed.
• Chat messages: retained so both sides keep a record of what was agreed.
• Verification codes and password reset tokens: short-lived, and invalid once used.
• Records needed for security, fraud investigation or legal obligations: kept as long as necessary for that purpose.

8. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything inaccurate — most of it you can edit yourself in your profile or store settings;
• delete your account and associated personal data;
• restrict or object to a particular use of your data.

Some content cannot be fully unpublished on request — a review or a chat message forms part of another person's record of a transaction, so we may anonymise rather than delete it. Contact us using the details below and we will respond within a reasonable period.

9. Security and children

Passwords are hashed, sessions are token-based and expire, and access to administrative tools is restricted by role. No system is perfectly secure, so please use a strong, unique password and tell us at once if you suspect your account has been accessed. The Platform is not intended for children, and accounts should be created only by people old enough to enter a binding contract where they live.

10. Contact and changes

We will update this policy as the Platform changes, and the date at the top shows the current version. For any privacy question or request: