Privacy Policy

1. Information We Collect

To operate effectively, we may collect limited and relevant user data, including:

• Name, email address, and phone number
• Account credentials and authentication data
• City-level location information
• Platform usage and analytics data
• Interactions with Sandy, our AI assistant

2. How We Use Information

Your information is used intentionally and responsibly to:

• Operate and improve the platform experience
• Facilitate connections between users
• Provide support and communication
• Maintain safety, trust, and system integrity

3. AI Assistant (Sandy)

Sandy is an assistive AI tool designed to guide users through the platform experience.

• Sandy does not make binding or final decisions
• Conversations may be reviewed in a controlled manner to improve safety, accuracy, and performance

4. Data Sharing

We do not sell personal data. Information is only shared where necessary to operate the platform responsibly:

• With service providers (e.g., hosting and analytics)
• Where required by applicable law or legal process

To facilitate deliveries, limited information — such as seller contact details and delivery addresses — may be shared with a manually assigned delivery partner once a delivery match has been confirmed by the Founder or an authorized administrator.

This sharing is strictly limited to what is necessary to complete the delivery and constitutes user consent under this Policy.

5. Data Security

We apply reasonable technical and organizational safeguards to protect your information. While no system is absolute, we are intentional in maintaining a secure and controlled environment.

6. Data Retention

We retain data only for as long as necessary to support platform operations, user experience, and legal obligations.

7. Your Rights

Depending on your jurisdiction, you may:

• Request access to your personal data
• Request correction or deletion
• Withdraw consent where applicable

8. International Users

We aim to align with globally recognized data protection principles, including POPIA (South Africa) and GDPR standards, where applicable.

9. Contact

For privacy-related inquiries, please contact:

privacy@themallyard.com