PRIVACY POLICY
BatoBuzz Merchant Application
Effective Date: June 11, 2026
Welcome to BatoBuzz Merchant (the "App"), operated by BatoBuzz ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect information about merchants who register and use the BatoBuzz Merchant application on Android devices.
By downloading, registering, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App immediately.
We collect the following categories of information when you use the App:
During registration and account setup, we collect:
• Business name, business email address, and business address
• Business category (e.g., Food, Fashion, Health, Electronics, etc.)
• PAN (Permanent Account Number) card number and a photo of your PAN card
• City and ward/municipality of the business
• Citizenship certificate (front and back photographs)
• Owner's photograph
• Phone number (used as your primary login identifier)
• A PIN code you create for account login
• Biometric data references (fingerprint or Face ID) — stored locally on your device using secure storage; biometric templates are never uploaded to our servers
• Firebase Authentication credentials (managed by Google Firebase)
• Posts, reels/videos, job listings, and event announcements you publish on the platform
• Images and media files you upload
• Comments and reactions to posts
• Ratings and reviews about other merchants
• Chat and inbox messages you send and receive
• Firebase Cloud Messaging (FCM) token for push notifications
• Device operating system type (Android/iOS)
• App usage activity (screens visited, actions performed) for analytics
• Merchant profile view counts and engagement statistics
• Daily and historical performance metrics (views, interactions) stored under your merchant account
• QR code scan data associated with your business profile
We use the information we collect for the following purposes:
• Account Registration & Verification: To create and verify your merchant account, including reviewing submitted identity documents
• Authentication: To allow you to securely log in using your phone number, PIN, or biometrics
• App Functionality: To enable core features such as posting content, messaging, viewing the marketplace, managing business settings, and displaying your QR code
• Push Notifications: To send you alerts about messages, new activity, promotions, and important account updates via Firebase Cloud Messaging
• Analytics & Insights: To provide you with statistics about your merchant profile's performance (views, reach, engagement)
• Multi-Account Support: To allow you to manage and switch between multiple merchant accounts on the same device
• Customer Support: To respond to enquiries, resolve disputes, and troubleshoot issues
• Platform Safety & Compliance: To detect fraud, verify business identity, and comply with applicable laws and regulations
We do not sell your personal information. We may share your information in the following limited circumstances:
The following information you provide is visible to other users of the BatoBuzz platform:
• Business name, business category, city/ward, and business address
• Posts, reels, job listings, and events you publish
• Your business QR code
• Ratings and reviews you give or receive
We use third-party services that process data on our behalf:
• Google Firebase (Authentication, Firestore Database, Firebase Storage, Cloud Messaging) — subject to Google's Privacy Policy
• Image compression libraries for optimising uploaded media
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of BatoBuzz, our users, or the public.
If BatoBuzz undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
Your data is stored in Google Firebase services (Firestore and Firebase Storage), which employ industry-standard security measures including encryption in transit (TLS) and at rest.
Sensitive credentials (biometric-linked PINs and phone numbers) are stored exclusively on your device using Flutter Secure Storage and are never transmitted to our servers in readable form.
Identity documents (citizenship certificates, PAN card, owner photo) are uploaded to Firebase Storage with restricted access controls.
While we implement reasonable technical and organisational safeguards, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to protect your PIN and not share your account credentials with others.
We retain your personal information for as long as your merchant account is active or as needed to provide you with services. If you request account deletion:
• Your profile, posts, and associated content will be removed from the platform
• Identity verification documents will be deleted from Firebase Storage
• Anonymised or aggregated analytics data may be retained for platform improvement purposes
To request account deletion, please contact us at the address provided in Section 10.
The BatoBuzz Merchant app requires the following device permissions to function:
• Camera & Storage/Media Access: To capture or upload images for posts, reels, profile pictures, and identity documents
• Biometrics (Fingerprint/Face ID): To enable biometric login (optional; can be disabled in app settings)
• Internet Access: Required for all core app functionality
• Push Notifications: To receive real-time alerts and messages
You may revoke permissions at any time through your device settings; however, doing so may limit certain app features.
The BatoBuzz Merchant App is intended for use by registered business owners and is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated personal data
• Objection: Object to certain processing of your data
• Data Portability: Request your data in a portable format
To exercise any of these rights, please contact us using the details in Section 10. We will respond within a reasonable timeframe in accordance with applicable law.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:
BatoBuzz
Email: batobuzz@gmail.com
App Name: BatoBuzz Merchant
Platform: Google Play Store (Android)
We are committed to resolving any concerns promptly and transparently.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you through the App or by other means.
Your continued use of the App after any changes constitutes your acceptance of the revised Privacy Policy.
This Privacy Policy was last updated on June 11, 2026.