Privacy Policy

1. Information We Collect

Account information — When you create an account we collect your first name, last name, and WhatsApp number. If you sign in with Google we also receive your email address and profile name from Google.

Business information — Business owners provide a business name, description, location, and optionally a logo photo. This information is displayed publicly on your shop page.

Product information — Product names, prices, descriptions, and photos uploaded by business owners are stored and displayed publicly on the shop page.

Usage analytics — We collect anonymised usage data in the mobile app (such as which screens are visited and actions taken) using Mixpanel. On the web shop we collect page views, product views, group filter selections, search queries, and WhatsApp button clicks. Web visitor data is associated with an anonymous device identifier, not a personal identity.

Technical data — Standard server logs may include IP addresses and browser/device information. IP addresses used for analytics are hashed (one-way) and cannot be reversed to identify you.

2. How We Use Your Information

• To create and manage your account
• To display your shop and products to customers
• To provide you with analytics about your shop's performance
• To improve the Service based on usage patterns
• To contact you about important changes to the Service

3. Information Shared Publicly

Your business name, description, location, logo, and all products you add are displayed publicly at your shop URL (duka-link.com/your-shop). Your personal name and WhatsApp number are not displayed publicly on the web shop, but your WhatsApp number is used to generate the "Chat on WhatsApp" link on your products.

4. Third-Party Services

We use the following third-party services to operate DukaLink:

• Supabase — database and file storage. Your data is stored on Supabase infrastructure. See supabase.com/privacy.
• Google Sign-In — for authentication. See policies.google.com/privacy.
• Mixpanel — for usage analytics. See mixpanel.com/legal/privacy-policy. Mixpanel data is anonymised and does not include personal identifiers for web visitors.
• Vercel — for hosting the web shop. See vercel.com/legal/privacy-policy.

5. Data Retention

We retain your account and shop data for as long as your account is active. If you delete your account, your personal information and shop data will be deleted within 30 days. Analytics data is retained for up to 12 months.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information via the Settings screen in the app
• Delete your account and associated data by contacting us
• Opt out of analytics by contacting us

7. Children's Privacy

DukaLink is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via the app. Continued use of the Service after changes constitutes acceptance of the updated policy.