Privacy Policy for Tamayaz

1. About this policy

This Privacy Policy explains what personal information Tamayaz (“Tamayaz”, “we”, “us”) collects when you use the tamayaz.market website or the Tamayaz mobile app, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. Tamayaz is the controller responsible for that information.

• This policy covers the website and the mobile app together (the “Platform”), in the countries we serve: the United Arab Emirates, Saudi Arabia, Qatar, Kuwait, Bahrain, and Oman.
• It does not cover other users. When you contact a seller or buyer, or deal with them off the Platform, they handle your information under their own responsibility.
• Using the Platform is also subject to our Terms and Conditions, which cover Ads, fees, refunds, liability, and disputes.
• For any privacy question or request, email support@tamayaz.market.

2. Information you give us

We collect the information you enter yourself:

• Account details: full name, email address, mobile number, password (stored in encrypted form by our authentication provider), account type (individual, dealership, or car rental office), and your profile photo if you upload one.
• Location preferences: the country and city you select, the country you are browsing, your language, and your currency. We do not track your live GPS location.
• Business details, if you register as a dealership or car rental office: business name, city, address, phone number, and logo.
• Ad content: everything you publish about vehicles, plate numbers, mobile numbers, car rentals, and buy requests — including prices, specifications, descriptions, photos, and any documents you choose to upload.
• Messages you send through Tamayaz chat, and the content of any support request, complaint, or report you send us.
• Verification codes we send to your email address or by WhatsApp to your mobile number, and the fact that a code was used successfully.
• Purchase records: the plan or boost you bought, the amount and currency, the date, your payment status, and the customer and subscription identifiers created by our payment provider. We never receive or store your full card number, expiry date, or security code.

3. Information we collect automatically

• Device information: device type (Android or iOS), device model, and operating system version, which we store on your account so we can support your device and send notifications.
• Push notification token, on the mobile app, so we can deliver notifications about your Ads, chats, and account.
• Sign-in and session data: authentication tokens and cookies or similar local storage used to keep you signed in and to remember your language and theme.
• Listing interactions: when a listing is viewed, contacted, or shared, we record the total counts, the date, and either the account identifier of the signed-in user or an anonymous session identifier if the visitor is not signed in.
• Aggregated view, click, and share counts are shown to the owner of the Ad as performance statistics. We do not show the advertiser your name, your account, or your contact details because you viewed their Ad.
• Technical logs generated by our servers and hosting providers when the Platform is used, which may include your IP address, the date and time, and error information. We use these to keep the service secure and working.
• On the mobile app, we may use the Meta (Facebook) SDK to measure marketing campaigns and app installs. With your permission, it may collect your device advertising identifier. You can decline tracking when your device asks. The website does not use advertising or analytics trackers.

4. Photos and automatic Ad suggestions

• When you use the feature that fills in vehicle details from your photos, the photos you selected are sent to our artificial-intelligence provider, OpenAI, which analyses them and returns suggested details such as make, model, year, and colour.
• The suggestions are only pre-filled values. You review, correct, and confirm them before your Ad is published, and no decision about you is made automatically.
• Please do not include identity documents, bank cards, or other sensitive documents in the photos you upload.

5. What is public on Tamayaz

Tamayaz is a public marketplace. Please keep in mind that when you publish an Ad:

• Your Ad, its photos, its price and details, the city and country you selected, your name, and your profile photo are visible to anyone using the Platform — including visitors who are not signed in — and may be found through search engines and shown in our marketing.
• The phone number on your Ad is used for the call and WhatsApp buttons, so any visitor can see or use it to contact you. Do not publish a number you do not want to be contacted on.
• Chat requires the sender to be signed in. Your name and profile photo are shown to the user you chat with.
• Anything you publish or send to another user may be saved, screenshotted, or shared by them. Please share personal details only when you need to.
• You can remove an Ad, edit your profile, or delete your account at any time. Copies already saved or indexed by others, including search engines, are outside our control.

6. Why we use your information

We use your information only for the purposes below, and only where we have a lawful basis to do so — because it is necessary to provide the service you asked for, because you consented, because we have a legitimate interest in operating and protecting the Platform, or because the law requires it.

• Creating and managing your account, signing you in with email, Google, or Apple, and verifying your email address and mobile number.
• Publishing your Ads, keeping listing information accurate, and enabling other users to contact you.
• Operating chat, notifications, and customer support.
• Processing payments, managing plans, credits and boosts, issuing receipts, and handling refund requests and chargebacks.
• Providing Ad performance statistics to advertisers.
• Keeping the Platform safe: detecting and preventing fraud, scams, spam, duplicate or fake accounts, and abuse, and enforcing our Terms and Conditions.
• Measuring and improving the Platform, fixing errors, and developing new features.
• Marketing and promotion, including promoting the Platform and showing Ads published on it, and sending you marketing messages you can opt out of.
• Complying with legal obligations and responding to lawful requests from courts, the police, or other competent authorities.

Where we rely on your consent — for example for marketing messages or app tracking — you can withdraw it at any time. That does not affect processing that already took place.

7. Who we share information with

We do not sell your personal information. We share it only in these cases:

• Other users, to the extent you choose to publish it in your Ad or profile, or send it in chat.
• Google Firebase (Google Cloud), which provides sign-in, the chat database, and app configuration.
• Amazon Web Services, which stores uploaded photos, logos, and documents.
• Stripe, which processes card payments and holds the payment records associated with your purchases.
• The WhatsApp Business platform (Meta), which delivers verification codes to your mobile number, and Meta measurement tools in the mobile app as described above.
• Our email providers, which deliver verification, service, and marketing emails.
• OpenAI, which analyses the photos you submit for automatic Ad suggestions.
• Google and Apple, if you choose to sign in with their accounts.
• Courts, police, regulators, and other authorities, where we are legally required to disclose information or where disclosure is necessary to investigate fraud or protect someone’s safety or rights.
• Professional advisers, and a buyer or successor if our business is sold or reorganised, in which case this policy continues to apply to the information transferred.

Our providers may only use your information to deliver their service to us, under their own privacy terms. We do not allow them to use it for their own unrelated purposes.

8. Where your information is stored and transferred

• We use cloud infrastructure, so your information may be stored or processed outside the country where you live.
• Photos, logos, and documents you upload are stored in an Amazon Web Services region located in India.
• Our other providers — including Google, Stripe, Meta, OpenAI, and our email providers — operate internationally and may process your information in other countries.
• When information leaves your country, we take reasonable steps for it to remain protected, including using established providers and relying on their contractual data-protection commitments.

9. How long we keep your information

• We keep your account information for as long as your account exists.
• An Ad stays live for up to 180 days and is then archived so you can reactivate it. An Ad you mark as sold is removed seven days after you mark it. You can delete any Ad sooner yourself.
• When you delete your account, we delete your profile, your Ads, and your sign-in record, and we cancel and remove your customer record with our payment provider. Deletion cannot be undone.
• We may keep limited records for longer where we must — for example transaction and tax records, and records of fraud, abuse, or a legal claim — for the period required by law or for as long as needed to protect our legal position. Our payment provider keeps its own transaction records under its own obligations.
• Backups and provider logs are overwritten on the ordinary cycles of the systems that create them.

10. Security

• We use encrypted connections, access controls, and the security features of our cloud providers to protect your information, and we limit access to staff who need it.
• Card payments are processed by Stripe over its own secure, PCI-compliant systems. We do not hold your full card details.
• No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
• Keep your password private, use a strong password, and sign out on shared devices. Tell us at support@tamayaz.market if you think your account has been compromised.
• If a data breach affects your information, we will notify you and the competent authority where the law requires it.

11. Your rights and choices

Subject to the law that applies to you, you have the right to:

• Access the personal information we hold about you, and ask for a copy of it.
• Correct information that is wrong or incomplete. You can update your name, photo, mobile number, city, country, and business details yourself in your account.
• Delete your account and your information, which you can do yourself at any time from the website or the app.
• Withdraw consent you gave us, and object to or ask us to restrict processing that is based on our legitimate interests.
• Ask us to transfer your information to you or to another provider, where that right applies.
• Opt out of marketing at any time, using the unsubscribe link in our emails or by emailing us. You will still receive service messages about your account and Ads.
• Turn off push notifications, and refuse or reset the advertising identifier, in your device settings.
• Complain to the competent data protection authority in your country if you are not satisfied with how we handled your request.

To exercise any of these rights, email support@tamayaz.market from the email address registered on your account, and tell us what you need. We may ask for information to confirm your identity, and we will respond as soon as we reasonably can and within any period the applicable law requires. Some information may be kept where the law allows or requires us to — for example transaction records or evidence of fraud.

12. Cookies and local storage

• The website uses cookies and local storage that are necessary for it to work: keeping you signed in, holding your session, and remembering your language, theme, and country.
• We do not place third-party advertising or analytics cookies on the website, and we do not display third-party ad networks inside listings. If that changes, we will update this policy and ask for consent where it is required.
• You can clear or block cookies in your browser settings, but the Platform may not work properly if you block the necessary ones.

13. Age and young users

• The Platform carries no adult or age-restricted content and we do not impose a minimum age. We do not ask for your date of birth, we do not collect age information, and we do not profile or target users by age.
• Where a user is below the age of majority in their country, the account should be created and used with the consent of a parent or legal guardian, as set out in our Terms and Conditions.
• A parent or legal guardian can email support@tamayaz.market to access, correct, or delete the account and the information held in it.

14. Deleting your account

• You can delete your account yourself from the website (Account) or the app (Menu). Step-by-step instructions are on our Contact us page.
• Deletion removes your profile, Ads, chats, and unused credits, cancels any active subscription with no refund, and cannot be undone.
• If you cannot sign in, email support@tamayaz.market from the email address on your account and ask us to delete it. We may ask you for information to verify that the account is yours.

15. Changes to this policy

• We may update this policy when the Platform, our providers, or the law changes. The version on this page is the current one, and the effective date at the top shows when it took effect. This version replaces the version dated 1 September 2024.
• If a change is significant, we will notify you by email, in the app, or on the Platform before it takes effect, and where the law requires it we will ask for your consent.

16. Contact us

• Privacy questions, data requests, and complaints: support@tamayaz.market
• Address: Dubai, United Arab Emirates