Privacy Policy
An vigè depi October 21, 2026
This policy explains what personal information ServeMart (“TMaché”, “we”) collects when you use the TMaché marketplace, how we use and share it, and the choices and rights you have. We do not sell your personal information.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, password (stored only as a secure hash), display name, language, currency, region | You |
| Delivery & contact | Name, phone/WhatsApp, address, city, department or state | You, at checkout or in Account |
| Orders | Items, amounts, order status, delivery or pickup choice, tracking numbers, photos of goods and proof of shipment/delivery, problem reports | You and the other party to the order |
| Payments | Payment method type, amount, status, provider references; MonCash number for refunds; for Sellers, payout method and MonCash number or Stripe account ID | You, Stripe, MonCashConnect |
| Store (Sellers) | Store name, description, logo, photos, city, map location, optional street address, WhatsApp, delivery settings | Sellers |
| Messages | Messages between Buyers and Sellers | You |
| Reviews & activity | Reviews, saved items, followed stores, cart | You |
| Support | Support requests and our replies | You |
| Technical | IP address, browser and device type, pages visited, error logs | Automatically |
Card numbers: card details go directly to Stripe; we never receive or store your full card number. Location: “Near me” uses your device location only in your browser to filter results; we do not store it. Stores choose to publish their own map location.
2. How we use information
- To run the marketplace: accounts, listings, search and maps, checkout, order tracking, messaging and reviews;
- To process payments, hold funds, release payouts, issue refunds and resolve problems reported on orders;
- To send service emails: sign-in links, order and payout updates, new messages and support replies;
- To keep TMaché safe: prevent fraud and abuse, enforce our terms, secure accounts;
- To comply with legal, tax and accounting obligations;
- To improve the Service, using aggregated or de-identified information where possible.
Where the law requires a legal basis (for example, the GDPR), we rely on: performing our contract with you; our legitimate interests in operating a safe marketplace; compliance with legal obligations; and your consent where we ask for it.
3. How we share information
- Between Buyers and Sellers: when you order, the Seller receives your name, phone and delivery address (or pickup details) for that order, plus messages and photos you send. Buyers see a Seller’s public store information. Reviews show your display name.
- Service providers that process data for us under contract: Stripe (card payments and Seller bank payouts), MonCashConnect (MonCash payments and payouts), Vercel (hosting and image storage), Neon (database), Resend (email), and OpenStreetMap tile servers (map images; your browser requests tiles directly).
- Legal and safety: when required by law or legal process, or to protect the rights, property or safety of users, the public or TMaché.
- Business transfers: if TMaché is involved in a merger, acquisition or sale of assets, subject to this policy.
We do not sell personal information and do not share it for cross-context behavioural advertising.
4. Cookies
We use only essential cookies: a secure session cookie to keep you signed in, and preference cookies for language, currency, delivery region and light/dark mode. We do not use advertising or third-party tracking cookies. Your browser may also store a small flag so walkthroughs don’t repeat.
5. Retention
- Account and store data: while your account is open; deleted when you delete your account.
- Messages and reviews: until you delete your account (reviews are anonymised).
- Orders, payments, refunds and payouts: kept for up to 7 years after the transaction for tax, accounting, fraud-prevention and legal reasons, with your contact details removed if you delete your account.
- Support requests: up to 3 years.
- Security logs: up to 12 months.
6. Your rights and choices
Depending on where you live, you may have the right to access, correct, download (portability) or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update most information in Account and the Seller studio, and delete your account at any time — see the Data Deletion Policy. For other requests, email privacy@servemart.app. We will verify your identity and respond within 30 days (45 days where allowed). We will not discriminate against you for exercising your rights.
California residents: you have the rights described above under the CCPA/CPRA, including to know, delete, correct and opt out of sale or sharing (we do neither). EEA/UK residents: you may also lodge a complaint with your local data-protection authority.
7. Security
We use encryption in transit (HTTPS), hashed passwords and tokens, access controls, and providers with strong security programmes. No system is perfectly secure; please use a strong unique password and tell us about any concern.
8. International transfers
TMaché is operated from the United States, and our providers may process data in the United States and other countries. By using TMaché from Haiti or elsewhere, your information will be transferred to and processed in the United States, with safeguards required by applicable law.
9. Children
TMaché is not intended for anyone under 18, and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.
10. Changes
We will post any changes here and update the effective date. If changes are material we will notify you by email or in the app.
11. Contact
ServeMart · Cape Coral, Florida, United States · privacy@servemart.app