Privacy Policy

Last Updated: December 29, 2025

1. Introduction

Bazar Trust Passport ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

2. Information We Collect

2.1 Information You Provide

  • Business Information: Company name, registration number, address, website
  • Contact Information: Email address, phone number
  • Verification Documents: Business licenses, certificates (processed and deleted after verification)
  • Payment Information: Processed securely through Shopify's payment system

2.2 Information Collected Automatically

  • Shop Data: Store name, Shopify store ID, products, settings
  • Usage Data: App interactions, feature usage, performance metrics
  • Technical Data: IP address, browser type, device information

2.3 Blockchain Data

  • Public Data: Verification status and timestamp (stored on blockchain)
  • Private Data: Never stored on blockchain, only verification proof

3. How We Use Your Information

We use your information to:

  • Process and complete business verifications
  • Display verification badges on your store
  • Communicate about your verification status
  • Provide customer support
  • Improve our services
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

  • Email service providers (Mailgun) for verification emails
  • Business verification providers (Middesk) for KYB verification
  • Blockchain networks (Hedera) for verification anchoring

4.2 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security audits
  • Secure data centers

6. Data Retention

  • Verification Data: Retained for the lifetime of your Shopify store
  • Documents: Deleted immediately after verification
  • Blockchain Data: Permanent (only verification proof, no personal data)
  • Inactive Accounts: Deleted after 2 years of inactivity

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Object to data processing
  • Withdraw consent

To exercise these rights, contact: support@bazarproof.com

8. GDPR Compliance

For EU merchants and customers:

  • Legal basis: Contract performance and legitimate interests
  • Data transfers: Standard contractual clauses
  • Contact: support@bazarproof.com

9. CCPA Compliance

For California residents:

  • Right to know what data we collect
  • Right to delete personal information
  • Right to opt-out of data sales (we don't sell data)
  • Non-discrimination for exercising rights

10. Children's Privacy

Our service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place.

12. Cookies and Tracking

We use essential cookies for:

  • Session management
  • Security features
  • User preferences

We do not use tracking cookies or third-party analytics.

13. Third-Party Links

Our app may contain links to third-party services. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or app notification.

15. Contact Information

For privacy questions or concerns:

Email: support@bazarproof.com
Company: Bazar

16. Shopify Integration

This app integrates with Shopify. Your use of Shopify is governed by Shopify's privacy policy. We access only the minimum data necessary to provide our services.

Data We Access from Shopify:

  • Shop information
  • Product data (for badge display)
  • Metafields (for verification data)
  • Webhooks (for real-time updates)

Data We Don't Access:

  • Customer personal information
  • Order details
  • Payment information
  • Customer emails

17. Blockchain Privacy

Blockchain verification creates a permanent public record. However:

  • Only verification status is public
  • No personal information is stored on-chain
  • Transaction hashes are pseudonymous
  • You control what information to share

By using Bazar Trust Passport, you acknowledge and agree to this Privacy Policy.