Platform Privacy Policy

The internal platform may handle account details such as your email address and identity-provider subject, business contact and address details, product and supplier records, configuration choices, approval history and security or audit events.

Do not enter payment-card details, account passwords, secret API keys or information that the business does not need for its work.

Information is used to authenticate users, enforce business access, record terms acceptance, configure the business, maintain products and supplier records, support operational workflows, investigate security events and improve the platform's reliability.

AI assistance may process the specific product, supplier or support information submitted to a feature. A person must review AI output before relying on it or using it for a consequential action.

The platform may use the identity, hosting and database providers configured for the application. The current implementation is designed for Supabase Auth, Cloudflare Workers and Cloudflare D1; a provider is not considered connected until the application's Settings show a verified connection.

Information may be disclosed to a connected supplier, sales channel, delivery provider or other service only when the business enables that connection and the disclosure is needed for the requested business operation. No supplier or marketplace connection is implied by this draft.

Access should be limited to authenticated users with an active business membership. The application is designed to keep identity tokens in protected server-side sessions and business records in business-scoped storage.

The final hosting region, provider retention settings, backup schedule, security contact and deletion process must be confirmed by the owner before live use. Records may be retained for operational, legal, security and audit purposes, then securely deleted or de-identified when no longer required, subject to applicable law.

For a request to access or correct personal information in this internal platform, contact the Rippa Trading business owner using the support contact configured in the business profile. The owner should verify the request and respond within the period required by applicable law.

This draft does not establish a public retail privacy contact or make a legal determination about the application of any privacy law. The final notice and complaint process require professional review before release.