Privacy Policy

This Privacy Policy explains what personal information Partaz collects, how we use it, who we share it with, and what rights you have over it.

1. Who we are

Partaz (“we”, “us”) operates the Partaz platform. The data controller for your information is [LEGAL ENTITY NAME], registered at [ADDRESS].

2. Information we collect

When you use Partaz, we collect the following:

• Account information: first name, suburb / town, email address, optional phone number, optional profile photo, and your password (stored as a hash, not in plaintext).
• Listings: item titles, descriptions, categories, photos, optional personality fields, and loan settings you provide.
• Activity: borrow requests, loan history, handover and return photos, extension requests, reviews, and karma points.
• Communications: messages you send to other users via in-app chat.
• Technical information: session cookies for authentication. We do not use third-party advertising trackers.

3. How we use your information

We use your information to:

• Provide and operate the Service.
• Display your listings and profile to other users.
• Facilitate communication between users about loans.
• Enforce our Terms of Service and detect abuse.
• Send transactional notifications (request received, return due, etc.).
• Improve the Service in aggregate, anonymised form.

4. Who sees what

Other authenticated users of Partaz can see your first name, suburb, profile photo, item listings, reviews about you, and reputation score. Your full email address, phone number, and exact location are never displayed to other users.

5. Sharing with third parties

We use the following third-party services to operate Partaz:

• Supabase (database, authentication, file storage): stores your account, listings, messages, and photos.
• Vercel (web hosting): serves the website and processes requests on our behalf.

We do not sell your personal information. We do not share your data with advertisers. We may disclose information if compelled by valid legal process.

6. Data retention

We retain account data for as long as your account is active. When you delete your account, we anonymise your profile (your first name is replaced with “Deleted user”, your photo and contact details are removed) so that historical loan and review records remain intact for the people you transacted with. Messages between you and other users are deleted within 30 days of account deletion.

Photos uploaded as part of completed loans (handover and return photos) are retained for up to 12 months after loan completion to support any post-hoc disputes, then deleted.

7. Your rights

Depending on your jurisdiction, you have rights including the right to access the personal data we hold about you, to correct it, to request its deletion, to receive an export, and to lodge a complaint with a data-protection authority.

You can update most of your data directly in the app (Profile >Edit profile). To request an export or deletion beyond the in-app flow, contact hello@partaz.app.

8. International transfers

Our service providers may store data in regions outside your own. We rely on standard contractual clauses or equivalent safeguards where applicable.

9. Cookies

We use a single session cookie set by Supabase for authentication. We do not use marketing or analytics cookies.

10. Children

Partaz is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe a minor has registered, contact us at hello@partaz.app and we will close the account.

11. Changes to this Policy

Material changes will be communicated by email and surfaced in-app.

12. Contact

Questions about this Policy: hello@partaz.app.

This is a placeholder Privacy Policy drafted for internal review. It has not been reviewed by qualified legal counsel and may not satisfy the specific requirements of your jurisdiction (in particular GDPR, UK GDPR, CCPA, or LGPD obligations). Replace with a counsel-reviewed policy before any public launch.