Privacy Policy

1. Scope

This Privacy Policy applies to:

• The Zakup mobile application (iOS and Android)
• Zakup backend services and APIs

Zakup is intended for business use only and is not designed for personal consumer use or for children.

2. Information We Collect

2.1 Account & Business Information

We may collect:

• Phone number (used for authentication)
• Email address (optional; used as a fallback or for communication)
• Organization / business name
• User role and permissions (customer or supplier roles)
• Preferred language (Armenian, Russian, English)

Zakup does not require personal profile photos or personal biographies.

2.2 Authentication & Security Information

To secure access and manage sessions, we process:

• Internal user and organization identifiers
• Device identifiers (generated device ID, user-agent for browsers)
• Authentication tokens (JWT and refresh tokens)
• Login timestamps and session metadata

Zakup uses SMS-based authentication.
Passwords are not collected or stored.

2.3 Business & Order Data

Zakup processes business-related operational data, including:

• Product catalogs and pricing
• Orders, baskets, counters, and order statuses
• Collaboration relationships between organizations
• Comments added during order acceptance or rejection

This data belongs to the organizations using Zakup and is processed solely to provide the service.

2.4 Notifications & Communication

We may process:

• SMS messages sent for authentication or system notifications
• Push notification tokens (via Firebase Cloud Messaging) to deliver order and system notifications

Firebase is used only for push notification delivery and not for analytics or user tracking.

2.5 Technical & Log Data

For system reliability and security, we collect:

• IP address
• Request metadata and timestamps
• Error and diagnostic logs

These logs are used strictly for security, troubleshooting, and service improvement.

3. Information We Do NOT Collect

Zakup does not:

• Collect precise or approximate location data
• Access contacts, photos, camera, or microphone
• Track users across apps or websites
• Use analytics or advertising SDKs
• Sell or share personal data for marketing purposes

4. How We Use Information

We use collected information only to:

• Authenticate users and secure accounts
• Enable ordering, collaboration, and procurement features
• Send transactional notifications related to orders and system events
• Maintain platform security and prevent abuse
• Comply with legal obligations

Zakup does not use data for advertising, profiling, or behavioral tracking.

5. Payments

Zakup does not process payments within the application.
All payments, if any, are handled outside of the app between businesses.

6. Data Sharing

We may share limited data only with:

• Infrastructure and service providers (hosting, databases, SMS gateways, push notification services)
• Authorities if required by law

All service providers process data solely on our instructions and under appropriate safeguards.

Zakup does not sell or rent user data.

7. Data Retention

• Account and business data is retained while your organization actively uses Zakup
• Technical logs are retained for limited periods for security and diagnostics
• Account or organization data deletion can be requested by contacting us

8. User Rights

You may request to:

• Access your data
• Correct inaccurate information
• Request account or organization data deletion

Requests can be sent to:
📧 admin@zakup.am

At this stage, account deletion is handled manually upon user request.

9. Security

We apply industry-standard security measures, including:

• Encrypted communication (HTTPS)
• Token-based authentication
• Role-based access control
• Restricted internal access to production data

10. Children's Privacy

Zakup is not intended for individuals under the age of 16.
We do not knowingly collect data from children.

11. International Processing

Data may be processed on servers located outside the user's country.
By using Zakup, you consent to such processing in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy periodically.
Material changes will be communicated through the application or other appropriate channels.

13. Contact Information

Zakup MSM LLC
📧 admin@zakup.am
🌐 zakup.am