Privacy Policy & Data Security

1. Introduction & Commitment to Trust

At OloBuy ("we", "our", or "us"), we value your privacy and recognize that trust is the foundation of secure multi-vendor and manual escrow transactions. This Privacy Policy outlines comprehensively how OloBuy (Private) Limited collects, uses, secures, and discloses your personal information. By using our platform, you consent strictly to the practices described in this document.

2. Information We Collect

To operate a secure marketplace and protect both buyers and sellers from fraud, we collect only essential information:

• Account Information: Your name, email address, phone number, secure credentials (stored strictly as salted hashes, never in plain text), and your designated account type (buyer, seller, or both).
• Identity Verification (KYC): CNIC numbers and images where required under our Know-Your-Customer compliance to prevent malicious actors.
• Transaction Data: Deal descriptions, payment references, shipment tracking data, product or packaging photographs, dispute evidence, and communication transcripts within deals.
• Financial Information: Bank or mobile wallet details (e.g., JazzCash, EasyPaisa) registered exclusively for payouts and refunds. We do not store raw card numbers; payments are handled via licensed partners.

3. How We Use Your Information

Your data is handled with strict confidentiality and used for operational purposes:

• To initialize, manage, fund, and settle manual escrow deals securely.
• To investigate, detect, and mitigate fraud, scams, or money laundering attempts.
• To communicate important deal milestones, dispute updates, and security alerts.
• To comply with regulatory obligations and legal requests mandated under Pakistani law.

4. Data Security & Protection Protocols

We deploy strict industry-standard security mechanisms:

• Encryption: All information traveling between your device and our servers is secured using modern HTTPS/TLS encryption.
• Access Control: Sensitive archives (such as CNIC uploads or verification documents) reside in isolated, access-controlled storage accessible strictly by authorized system personnel for dispute management.
• Need-to-Know Basis: Internal access is strictly logged and limited on a strict business-need basis.

5. Data Sharing & Third Parties

We never sell or rent your personal data to third parties. Information is only shared with counter-parties to a deal (e.g., delivery address provided to a seller for shipping) or logistics and licensed payment partners to execute your requested transactions, or when legally compelled by competent Pakistani authorities (such as SECP or law enforcement).

6. Data Retention & User Rights

In accordance with financial and anti-money laundering frameworks, OloBuy retains transaction logs and verification records for a minimum duration of 5 years following a transaction. While you can update your general profile details anytime through your dashboard, complete historical erasure is restricted during active or disputed deals due to mandatory compliance rules.

7. Policy Modifications & Contact

OloBuy reserves the right to amend this Privacy Policy whenever operational or legal environments require it. Continued use of the platform after updates signifies your agreement. For privacy inquiries, reach out through our official support portal.