Privacy Policy

This policy explains how Shop All collects, uses, and protects your data. We've tried to write it plainly — no inflated technical claims, and nothing here overstates what the system actually does.

1. What we collect

Account details (name, email or phone, address), order and payment data (only the last 4 digits of a saved card — never the full number), your reviews and messages, your ShopAll Points (cashback) balance and history, and basic usage signals like products you've viewed and recent searches so we can improve recommendations. If you sign in with Google or Apple, we only receive the name and email that account makes available — never your password with them. To deliver verification codes and order updates by email or SMS, we use standard third-party email/SMS delivery providers, who see only the message and your email/phone — not the rest of your account. If you sell, we also collect identity-verification documents to confirm your seller account.

2. Seller identity verification — how your documents are protected

If you upload an identity document (national ID or similar) to verify as a seller, it's encrypted immediately (Fernet/AES) with an encryption key completely separate from the one used for saved payment-card data — no single key can unlock both. Shop All staff cannot view the document image itself at all — review happens through an automated read (AI) that produces a result (is the document authentic? is the person 16+?) without any human ever opening the image, and the approve/reject decision is made from that result plus other information you provided (date of birth, business registration number for a store) — never by looking at the picture. If automated review isn't available at the moment you submit, you're told that honestly rather than given a fabricated result. Rejected documents are automatically deleted after a set period (90 days by default) — see the data retention policy for details.

3. Payment data

If you save a card for faster checkout, its token is encrypted with a key separate from identity-document encryption. Shop All never stores your full card number or CVV at any point — that's handled directly by the payment gateway.

4. Who sees your data

A store you buy from sees only its own portion of your order (your name, delivery address, the items you ordered from them) — never your full profile or orders from other stores. Shop All does not sell your data to third parties, and the platform doesn't currently run any ad-tracking tools.

5. Your rights

You can export a copy of your data or request account deletion from your profile page at any time. Deletion requests are actually carried out, not just flagged while the underlying data remains.

6. Data retention

We keep data only as long as needed to provide the service or as required by law. Rejected identity documents are deleted automatically by a scheduled cleanup process. This is an operational default, not a final legal determination — it's reviewed as needed.

7. Cookies

Shop All uses one essential session cookie (to keep you signed in) and small local-storage data (like your theme preference and recent searches) — details in the Cookie Policy.

Questions about privacy? Contact support.