Privacy Policy

This policy covers buylow.live, including the storefronts, buyer tools and seller tools on it. It covers personal information about you that we handle because you use BuyLow, and it covers the information sellers and buyers exchange through the marketplace, because we hold and transmit it.

It does not cover a seller's own website or a payment provider's own website. When you are on a provider's site, that provider's policy applies.

You give us:

• Your email address, your password (stored only as a hash), and the name you enter at registration.
• Optional profile details, if you fill them in: phone number, date of birth, gender and an avatar image.
• The delivery details you give at checkout: recipient name, address lines, city, state or province, postal code, country and phone number.
• What you post: store name and description, opening hours, return policy, product listings, photos, prices, stock, coupons, reviews and review photos, chat messages, and requests for quotation and bids.
• The contents of any support message you send us.

We generate as you use the site:

• Your orders, their items, prices, discounts, shipping charges and status history, and the record of who changed each status.
• Which products you looked at. We count views per product per day and store only the product, the date and a number — not who you are, your address, or any device identifier.
• Your wishlist. When you are signed in, we store which products you saved and when, so the list follows you to any device. Before you sign in, it is kept in your own browser, and those products are moved to your account the next time you sign in.
• Sign-in records: whether and when you signed in, and the last time you read a notification.

Our servers keep technical logs. Like any web server, ours records request information such as an IP address and a timestamp while a page loads, to keep the site running and to investigate abuse. Those logs are held separately from your account, are not used to build a profile of you, and are not linked to your orders. We read an IP address in memory to rate-limit sign-up and sign-in attempts, and we do not store it in that process.

We do not collect: your card or bank account details, your government identifiers, precise location, or any health information. Payments are taken on the provider's own site, so card numbers and security codes never reach BuyLow.

• To create and secure your account: sign-in, session renewal, email verification, password reset, and signing you out everywhere after a password change.
• To run the marketplace: show listings, hold your cart, take payment, place and track orders, and record the status history.
• To let people transact: pass your delivery details to the seller of the item you bought, and pass your messages to the person you are messaging.
• To notify you: order and shipping updates by email, and alerts in the app. You can turn off the store notifications that apply to you, and you can unsubscribe from email.
• To protect the service and its users: rate-limiting, detecting abuse, suspending accounts and stores, hiding products, and answering abuse reports.
• To improve the site: counting product views per day, and reading error logs to fix faults.
• To meet legal obligations, including keeping order and payment records for accounting.

We do not use your information for advertising, we do not build advertising profiles, and we do not train models on your data.

Sellers. When you order from a store, that seller sees the recipient name, delivery address and phone number for that order, the items and quantities, and any message you send them. That is what they need in order to ship. Sellers do not see your email address, your other orders, your account details, or your reviews of other stores.

Buyers. A seller does not share their email address or phone number with you. You see their store name, description, opening hours, published return policy, and the reviews and ratings that other buyers have left.

Other bidders. When you submit a request for quotation, other sellers cannot see your identity or your bid, and you cannot see theirs, until the deadline passes.

Service providers who process data for us:

• Stripe and PayPal take payment and issue refunds. They receive the amount, the currency and the payment details you enter on their site, and they return a payment reference, a status and an amount. They are independent controllers of the payment data they hold.
• Resend sends our transactional email: verification, password reset, password-changed notices, and order and low-stock updates. It receives your email address and the contents of the message.
• Cloudflare hosts and serves the site, and runs privacy-friendly web analytics that measure page loads in aggregate. It sees the requests it serves.
• Our infrastructure providers run the database, the queue that processes payments and notifications, the cache, and object storage for product images and avatars.
• Our email and chat delivery runs on the same infrastructure.

Authorities, where we are legally required to disclose, or to establish or defend a legal claim.

Nobody else. We do not sell, rent or trade your personal information. We do not share it with data brokers, and we do not allow sellers to export buyer contact lists.

BuyLow sets two cookies, both strictly necessary to keep you signed in, and neither used for advertising. It also keeps a signed-out visitor's wishlist in your browser's local storage until you sign in. The Cookie Policy lists every one by name.

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• We do not run advertising or cross-site tracking pixels, and we do not build an advertising profile of you.
• We do not use sensitive categories of personal information — health, biometrics, precise location, government identifiers, or anything revealing such — and we do not infer them.
• We do not use your activity for automated decisions that have a legal effect on you.
• We do not share your data with sellers beyond what an order requires.

See also the Consumer Health Data Notice and the California Privacy Notice.

Security credentials and one-time codes expire on their own. Order and payment records are kept, because they are the accounting record of a transaction.

Kept for as long as the account or the record exists: your account, your orders and their status history, payments, your products and storefront, reviews, chat messages, requests for quotation and bids, and notifications.

When you delete your account, your name, email address, phone number, date of birth, gender and photo are erased, and your sessions, sign-in methods, cart, wishlist, notifications, push subscriptions, chat memberships and reviews are removed (the ratings they fed are recalculated). If you had a store, it is closed and its products are hidden. We keep the orders you placed or fulfilled, with their payment records and the delivery details printed on them, because an accounting or legal obligation requires them. Messages you sent in chats stay in those conversations, without your name. You can sign up again with the same email address; that starts a new account with no history. An account cannot be deleted while an order, an accepted quote or, for a store, an order to ship or a payout is still in progress.

• Passwords are stored as bcrypt hashes and are never recoverable, by us or by anyone else.
• Session cookies are marked httpOnly, so scripts cannot read them, and Secure in production.
• Access tokens are short-lived; signing out, changing a password, or a suspension revokes them immediately.
• Payment card details never reach our systems, and payment callbacks are verified with the provider before an order is marked as paid.
• Sign-up, sign-in and password-reset requests are rate-limited, and one-time codes are stored as hashes with a limited number of attempts.
• Access to personal information is limited to the people who need it to run the marketplace, and admin accounts are separate from customer accounts and cannot be used to browse customer data.
• The site is served over HTTPS in production.

No system is perfect. If you think an account has been compromised, change your password — that ends every session — and tell us.

What you can do today, without contacting anyone:

• See and change your email address, name, phone, date of birth, gender and avatar on your profile.
• Change your password, which signs you out on every device.
• Delete any review you have written, on a product or a store.
• Delete your account under Account → Delete Account in the app, or at buylow.live/account/delete.
• Remove products from your wishlist at any time by tapping the heart again.
• Unsubscribe from any marketing or notification email using the link in it, and turn off store notifications.
• Cancel an order, if it has not been shipped, from the order page.

Where you are in the EEA, the UK, Switzerland, California, Brazil or a jurisdiction with similar rules, you may also have the right to ask for a copy of your data, to have it corrected or erased, to object to or restrict processing, and to complain to a regulator.

BuyLow is a marketplace for grocery and household goods. It is not directed at children, and we do not knowingly collect personal information from a child. The product does not currently set or verify a minimum age, which is a gap we have flagged rather than papered over.

We may change this policy. The date at the top shows the version you are reading, and a material change is announced by email before it takes effect. If you keep using BuyLow after a change, the new version applies from that date.

Privacy questions and data requests will go to a single monitored address once it is published.