Privacy policy

1. Who we are

Rapid Cart (rapidcart.co) is operated by BAP Software Ltd, the data controller for the personal data described here. Contact: info@rapidcart.co.

2. Data we collect

Sellers (registered users):

• Name and email address (from registration or Google sign-in)
• Password, stored only as a cryptographic hash
• Profile data you provide: handle, display name, welcome text

Buyers (visitors placing order requests):

• Name and email address
• Phone number and delivery address, if you choose to provide them
• The content of your order request (item, price offer, wishes)

Guide requests (visitors asking for a free guide):

• Email address, and whether you asked for tips beyond the guide
• Which link brought you to the page (for example “instagram”), and whether the guide was opened

Technical data: our hosting provider keeps standard server logs (IP address, browser type) for security and abuse prevention. When an account is created we also store a one-way hash of the network address it came from — never the address itself — so we can limit how many accounts one connection creates. These hashes are deleted after 30 days. We do not use advertising trackers or profiling.

3. Why we process it

• To provide the service — deliver order requests from buyers to the seller they chose (performance of a contract)
• To send transactional emails: order confirmations to buyers and notifications to sellers (performance of a contract)
• To send a guide you asked for (performance of a contract), and — only if you ticked the box — occasional tips on selling online (consent, withdrawable through the link in every such email)
• To keep the service secure — rate limiting, spam prevention (legitimate interest)
• To comply with legal obligations where applicable

4. Who we share it with

When you submit an order request, your details go to the seller whose page you used — the seller then processes them independently to fulfil your request. Beyond that we share data only with the processors that run the service: Vercel (hosting), Neon (database), and our email delivery provider. We never sell personal data.

If you reached us by clicking an advertisement and then create an account, we tell that advertising platform that the click it sent us led to a signup. We send only the click identifier the platform generated itself — never your name, email address or anything else about you — and we do so from our server, without advertising cookies or trackers in your browser.

5. International transfers

Our processors may process data in the EU and the United States under appropriate safeguards such as EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Retention

Seller account data is kept until the account is deleted. Order data is kept while the receiving seller's account exists, so both sides can refer back to it. Guide requests are kept so the download link keeps working and so we can tell which guides are useful. You can request deletion at any time (see below).

7. Your rights

Under the GDPR (and similar laws), you can request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and a portable copy of data you provided. You can also complain to your local data protection authority. To exercise any right, email info@rapidcart.co.

8. Cookies

We use only essential cookies. See the cookie policy for details and settings.

9. Changes

If we change this policy, we'll update this page and the effective date. Significant changes will be announced to registered users by email.