Account information: your name, email address, and phone number, plus your password (stored only in hashed form — we cannot read it). If you enable two-factor authentication, we store the data needed to verify your codes.

Order information: the delivery or pickup addresses you save, the products you order, and your order history, including receipt confirmations and order status.

Communications: support tickets you open and messages you exchange with vendors or our team through the platform.

Vendor information: if you register as a vendor, we additionally collect your business details — such as business name, contact details, and address — needed to review your application and operate your store.

Payment information: card payments are processed by Stripe. Your card number never touches BaytiPlus's servers. For Cash on Delivery orders, no payment details are collected online.

We use your information to operate the marketplace: creating and securing your account, processing orders, routing each order to the right vendor, handling receipt confirmation, and responding to support requests.

We send transactional emails — such as order confirmations, order status updates, email verification, password and security notices — through our email provider. These are necessary to run the service.

We also use order and account records to prevent fraud and abuse, resolve disputes between customers and vendors, and meet our record-keeping obligations.

We process your data because it is necessary to provide the service you signed up for — creating your account, completing your orders, and giving vendors what they need to fulfill them.

Some processing is based on our legitimate interest in keeping the marketplace secure and reliable: fraud prevention, account security, and abuse detection.

Some records are kept because the law requires it — for example, order and transaction records retained for tax and accounting purposes.

Vendors: when you place an order, the vendor fulfilling it receives your name, phone number, delivery or pickup details, and the items in their part of your order — and only their part. Vendors may use this information solely to fulfill and support your order.

Service providers: Stripe processes card payments; Resend delivers our transactional emails; Cloudflare stores and serves product and media files. Each provider receives only the data needed to perform its role.

We do not sell your personal information, and we do not share it with advertisers. We may disclose information if required to do so by law or to protect the safety of our users and the platform.

BaytiPlus uses only essential cookies: a session cookie that keeps you signed in, and a security (CSRF) cookie that protects forms and requests from tampering.

We do not use advertising cookies or cross-site tracking. If you block essential cookies in your browser, signing in and checking out will not work.

We keep your account information for as long as your account is active. If you close your account, we delete or anonymize your personal information, except where we must retain certain records.

Order and transaction records are retained after account closure where needed for tax, accounting, and dispute-resolution purposes, then deleted or anonymized.

All traffic to BaytiPlus is encrypted in transit. Passwords are stored only as secure hashes, and sessions use protected, HTTP-only cookies.

You can add two-factor authentication to your account for an extra layer of protection. Card payments are handled entirely by Stripe, a certified payment processor — card data never reaches our servers.

Access to personal data inside BaytiPlus App is limited to the people who need it to operate the platform, and sensitive administrative actions are logged.

You can view and update your account details from your account settings at any time.

You can request access to, correction of, or deletion of your personal information by opening a support ticket in the app or contacting us through our contact page. We may need to verify your identity before acting on a request, and some records (such as completed order history) may be retained where the law requires it.

BaytiPlus is not directed at children. You must be at least 18 years old to create an account or place an order. If we learn that we have collected personal information from someone under 18, we will delete it.

We may update this policy as the platform evolves. When we make significant changes, we will give notice on the platform or by email before the changes take effect. The 'Last updated' date at the top of this page reflects the most recent revision.

For any question about this policy or your data, open a support ticket from your account or reach us through the contact page on this site. We aim to respond within a few business days.