Your data, on your terms.

Bayti is a halal-food marketplace operated by Bayti LLC, a Delaware limited liability company. When this policy says “we,” “us,” or “Bayti,” it means Bayti LLC. When it says “you,” it means anyone who creates an account on getbayti.com or otherwise uses the service.

We collect the minimum we need to run the marketplace. That breaks down into four buckets:

• Account information — your email address (used both to log you in and to send order updates), your name as you choose to display it, and (optionally) your mobile phone number if you opt in to SMS order updates.
• Order information — what you ordered, from whom, when, how it was fulfilled (pickup or delivery), and the delivery address you supplied for delivered orders.
• Payment information — we do not store credit card numbers or other payment credentials. Payment data is collected and processed by Stripe, who is independently certified as PCI-DSS Level 1. Bayti receives only a tokenized reference and a short summary (last four digits, card brand) for receipts and customer support.
• Vendor information (only if you sign up as a chef, farm, or store) — your business name, public contact information, bank/payout details collected by Stripe Connect, and any halal sourcing claims you provide for your listings.

We may also automatically collect basic technical information when you visit the site (browser type, IP address, pages viewed) so that we can keep the service running and diagnose problems. We do not use this for advertising profiles.

We use your information only for the things you came to Bayti for:

• To process orders, accept payment, and pay vendors.
• To send transactional email about your order (placed, accepted, ready, in transit, delivered, refunded). These are not marketing emails; they are required to complete the service you requested.
• To send transactional SMS about your order, if you opted in to SMS. See the “SMS messaging” section below for details.
• To dispatch a courier for delivery, when you choose Bayti delivery. Your delivery address and a contact phone are passed to the courier service for the duration of the delivery.
• To prevent fraud, abuse, and policy violations, and to comply with applicable law.

We do not use your information to build advertising profiles, train third-party AI models, or sell it to data brokers.

We use a small number of trusted vendors to operate the service. Each one only receives the data it needs to do its job, and each one is contractually required to keep that data confidential and to use it only for our purposes.

• Stripe — payment processing, payouts to vendors via Stripe Connect, sales tax calculation when enabled.
• Supabase — application database and authentication (your email, account record, orders, listings).
• Vercel — application hosting and basic request logging.
• Resend — transactional email delivery (order receipts, status updates).
• Twilio — transactional SMS delivery (vendor new-order pings, customer order-status updates).
• Uber Direct — courier dispatch when you choose Bayti delivery on a delivery order. The courier receives the delivery address, your first name, and a contact phone number for the duration of the delivery.
• Google Maps — geocoding addresses and computing delivery distances. Address strings are submitted to Google for this purpose; we do not pass account identifiers.

If you provide a mobile phone number and opt in, we may send you transactional SMS related to your orders. This is the same program described in our Terms of Service under the SMS section.

• Frequency: variable. You receive SMS only in response to actions on your account (a new order, a status change, etc.). Bayti does not send marketing SMS.
• You can opt out at any time by replying STOP to any message we send. You can ask for help by replying HELP.
• Standard message and data rates may apply, depending on your carrier and plan. Bayti does not charge for SMS.
• Mobile phone numbers and SMS opt-in status are never shared with third parties for marketing.

You can do all of the following at any time by emailing us at hello@getbayti.com:

• Request a copy of the personal information we hold about you.
• Ask us to correct any inaccurate information in your account.
• Ask us to delete your account and the personal information associated with it. Some information must be retained for legal, tax, or fraud-prevention reasons (typically receipts and order records for up to seven years); we’ll tell you which.
• Withdraw your consent to receive SMS. You can also do this by replying STOP to any message, or by toggling SMS off in your account settings.
• Withdraw your consent to receive transactional email (note: this also disables your ability to receive order receipts and status updates, which may make the service unusable).

If you are located in California, the EEA, or another jurisdiction with additional privacy rights, those rights still apply on top of everything above; reach out and we will honor them.

We keep your account information for as long as your account is open. When you ask us to delete your account, we remove your personal information from our active systems within 30 days. Some records (notably order receipts, refunds, and payouts) are retained for up to seven years to satisfy legal, tax, and accounting obligations.

We use a small number of cookies that are necessary to keep you logged in and to keep your cart consistent between pages. We do not use third-party advertising cookies, and we do not allow ad networks to set cookies on our site.

Bayti is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email hello@getbayti.com and we will delete it.

If we make material changes to this policy, we will update the effective date at the top and, where required by law, notify you by email. Your continued use of Bayti after a change means you accept the updated policy.

Questions, concerns, or privacy requests: hello@getbayti.com.