Your data, on your terms.

Bayti is a halal-food marketplace operated by Bayti LLC, a Delaware limited liability company. When this policy says “we,” “us,” or “Bayti,” it means Bayti LLC. When it says “you,” it means anyone who creates an account on getbayti.com or otherwise uses the service.

We collect the minimum we need to run the marketplace. That breaks down into six buckets:

• Account information — your email address (used both to log you in and to send order updates), your name as you choose to display it, and (optionally) your mobile phone number if you opt in to SMS order updates.
• Order information — what you ordered, from whom, when, how it was fulfilled (pickup or delivery), and the delivery address you supplied for delivered orders.
• Payment information — we do not store credit card numbers or other payment credentials. Payment data is collected and processed by Stripe, who is independently certified as PCI-DSS Level 1. Bayti receives only a tokenized reference and a short summary (last four digits, card brand) for receipts and customer support.
• Vendor information (only if you sign up as a chef, farm, or store) — your business name, public contact information, bank/payout details collected by Stripe Connect, and any halal sourcing claims you provide for your listings.
• Messages — the content of messages you send to a vendor (or a vendor sends to you) through our in-app chat. Before an order is placed, contact details (phone numbers, email addresses, and street addresses) are automatically hidden from these messages.
• Location information (delivery drivers only) — if you use the Bayti mobile app as a delivery driver and go on-shift to deliver an order, the app collects your device’s precise and approximate location, including in the background while the app is minimized, for the duration of an active delivery. We use this to show the customer live delivery progress and to route the order. Background location collection starts only when you accept a delivery and stops as soon as that delivery is completed or cancelled. If you use Bayti only as a customer or a vendor, the app does not collect your device location — a delivery address you type in is treated as order information, not device location.

We may also automatically collect basic technical information when you visit the site (browser type, IP address, pages viewed) so that we can keep the service running and diagnose problems. We do not use this for advertising profiles.

We use your information only for the things you came to Bayti for:

• To process orders, accept payment, and pay vendors.
• To send transactional email about your order (placed, accepted, ready, in transit, delivered, refunded). These are not marketing emails; they are required to complete the service you requested.
• To send transactional SMS about your order, if you opted in to SMS. See the “SMS messaging” section below for details.
• To dispatch a courier for delivery, when you choose Bayti delivery. Your delivery address and a contact phone are passed to the courier service for the duration of the delivery.
• To operate the in-app chat between you and a vendor about an inquiry or an order, and to keep contact details hidden until an order is placed.
• To share a delivery driver’s live location with the customer while the driver is actively delivering an order, and to route the delivery. This device-location collection applies only to delivery drivers during an active delivery; it runs in the background only for that window and stops when the delivery ends. It is never used for advertising and is not collected from customers or vendors.
• To prevent fraud, abuse, and policy violations, and to comply with applicable law.

We do not use your information to build advertising profiles, train third-party AI models, or sell it to data brokers.

We use a small number of trusted vendors to operate the service. Each one only receives the data it needs to do its job, and each one is contractually required to keep that data confidential and to use it only for our purposes.

• Stripe — payment processing, payouts to vendors via Stripe Connect, sales tax calculation when enabled.
• Supabase — application database and authentication (your email, account record, orders, listings).
• Vercel — application hosting and basic request logging.
• Resend — transactional email delivery (order receipts, status updates).
• Twilio — transactional SMS delivery (vendor new-order pings, customer order-status updates).
• Uber Direct — courier dispatch when you choose Bayti delivery on a delivery order. The courier receives the delivery address, your first name, and a contact phone number for the duration of the delivery.
• Google Maps — geocoding addresses and computing delivery distances. Address strings are submitted to Google for this purpose; we do not pass account identifiers.

If you provide a mobile phone number and opt in, we may send you transactional SMS related to your orders. This is the same program described in our Terms of Service under the SMS section.

• How to opt in: Vendors (sellers) turn on the “Text me when a new order arrives” toggle in their Bayti dashboard under Settings → Order notifications. At that toggle, before enabling it, the vendor sees this consent disclosure:“By turning this on, you agree to receive recurring automated order-notification text messages from Bayti (new-order alerts and courier-pickup updates) at the mobile number on your account. Message frequency varies with your order volume. Message & data rates may apply. Reply STOP to unsubscribe, HELP for help. See our Terms and Privacy Policy.”Customers opt in at checkout by entering a mobile number (optional) beneath a matching disclosure; full details are at getbayti.com/sms. We only text people who have taken this explicit opt-in action — we never message purchased or third-party lists, and we never share mobile numbers or opt-in status with anyone.
• Frequency: variable. You receive SMS only in response to actions on your account (a new order, a status change, etc.). Bayti does not send marketing SMS.
• You can opt out at any time by replying STOP to any message we send. You can ask for help by replying HELP.
• Standard message and data rates may apply, depending on your carrier and plan. Bayti does not charge for SMS.
• No mobile information — including your phone number and SMS consent — will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never sold, rented, or disclosed to anyone for marketing, and are not shared with third parties except the messaging provider strictly necessary to deliver the texts you requested (see Twilio under “Third-party processors”).

You can do all of the following at any time by emailing us at hello@getbayti.com:

• Request a copy of the personal information we hold about you.
• Ask us to correct any inaccurate information in your account.
• Ask us to delete your account and the personal information associated with it. Some information must be retained for legal, tax, or fraud-prevention reasons (typically receipts and order records for up to seven years); we’ll tell you which.
• Withdraw your consent to receive SMS. You can also do this by replying STOP to any message, or by toggling SMS off in your account settings.
• Withdraw your consent to receive transactional email (note: this also disables your ability to receive order receipts and status updates, which may make the service unusable).

If you are located in California, the EEA, or another jurisdiction with additional privacy rights, those rights still apply on top of everything above; reach out and we will honor them.

We keep your account information for as long as your account is open. When you ask us to delete your account, we remove your personal information from our active systems within 30 days. Some records (notably order receipts, refunds, and payouts) are retained for up to seven years to satisfy legal, tax, and accounting obligations. Messages you send through the in-app chat are kept with the related conversation or order and removed when you delete your account, subject to the same legal retention limits.

We use a small number of cookies that are necessary to keep you logged in and to keep your cart consistent between pages. We do not use third-party advertising cookies, and we do not allow ad networks to set cookies on our site.

Bayti is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email hello@getbayti.com and we will delete it.

If we make material changes to this policy, we will update the effective date at the top and, where required by law, notify you by email. Your continued use of Bayti after a change means you accept the updated policy.

Questions, concerns, or privacy requests: hello@getbayti.com.