Privacy Policy

1. What We Collect

We collect: name, username, email, phone (encrypted), country, date of birth, and payment information processed by Pesapal.

2. How We Use It

We use your information to operate the Platform, process payments, prevent fraud, and communicate with you about your account.

3. Contact Information Security

All seller-provided phone numbers are encrypted with AES-256 before storage. They are only decrypted and revealed to verified buyers who have completed payment.

4. Sharing

We do not sell your data. We share only what is necessary with: Supabase (database), Pesapal (payments), and Vercel (hosting).

5. Cookies

We use essential cookies and browser storage (sessionStorage) for authentication. We do not use advertising cookies.

6. Your Rights

You can request: access to your data, correction, deletion, and export. Email support@spicyconnection.online.

7. Compliance

We comply with the Kenya Data Protection Act (2019), GDPR (EU), and CCPA (California) where applicable.