Partify — B2B Car Spare Parts Marketplace

Partify ("we", "us", or "our") operates a B2B car spare parts marketplace based in Dubai, UAE. This Privacy Policy explains how we collect, use, store, and protect your personal and business information when you use our platform and services.

1. Information We Collect

We collect the following types of information when you register, use, or interact with our platform:

Business identity: company name, Trade License number, TRN Certificate, Emirates ID of authorized representatives
Contact details: phone number, email address, business address in the UAE
Account credentials: hashed passwords, JWT session tokens, OTP verification data
Transaction data: part requests, offers, orders, escrow payments, wallet balances, commission records (all amounts in AED fils)
Device and usage data: device type, OS version, app version, IP address, push notification tokens, and interaction logs

2. How We Use Your Information

We use your information for the following purposes:

To verify your identity (KYC) and maintain a trusted marketplace of buyers and suppliers
To facilitate part requests, offer matching, escrow payments, and order fulfillment
To calculate and apply commission tiers (Standard 8%, Silver 6%, Gold 4.5%, Platinum 3%) and 5% UAE VAT
To send transactional notifications via push notifications (expo-notifications) and SMS (Twilio) for order updates, escrow releases, and dispute resolutions

3. Data Sharing & Third Parties

We share your information only as necessary to operate the platform:

PayTabs UAE: payment processing for escrow deposits and withdrawals (AED, 3D Secure)
Cloudflare R2: secure storage of uploaded documents (Trade License, Emirates ID, part photos) via presigned URLs
Twilio: SMS OTP delivery for phone verification
Expo: push notification delivery for order and escrow updates

4. Data Storage & Security

Your data is stored in PostgreSQL databases with encryption at rest. Sensitive credentials (access tokens, refresh tokens) are stored using device-level secure storage (expo-secure-store). All API communication is encrypted via HTTPS/TLS. We implement JWT-based authentication with 15-minute access tokens and 30-day refresh tokens. We retain your data for as long as your account is active and for a reasonable period afterward as required by UAE commercial law.

5. Data Retention

We retain your personal and business data for the duration of your active account. Transaction records, including escrow payments, commission calculations, and dispute resolutions, are retained for a minimum of 5 years in compliance with UAE Federal Law and Dubai Department of Economy and Tourism (DET) regulations. You may request deletion of your account data by contacting us, subject to legal retention requirements.

6. Your Rights

Under UAE data protection regulations, you have the right to:

Access and review the personal and business data we hold about you
Request correction of inaccurate information in your profile or KYC documents
Request deletion of your account, subject to legal retention obligations
Opt out of non-essential communications while continuing to receive critical transactional notifications

7. Children's Privacy

Partify is a B2B platform intended for registered businesses in the UAE. We do not knowingly collect personal information from individuals under 18 years of age. All users must be authorized representatives of a registered business entity.

8. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at: [email protected] — Partify FZ-LLC, Dubai, United Arab Emirates.