Privacy Policy

1. Data Minimization Principle

At Kigezi.shop, privacy is an engineering requirement, not an afterthought. We collect and process strictly the minimum information necessary to provide ultra-fast mobile storefront discovery.

2. Merchant Information Collected

• Account Credentials: Email address and authentication tokens via Supabase Auth or OAuth identity providers (Google, Shopify).
• Store Metadata: Store name, public brand logos, theme colors, and public catalogue product details.
• Billing Records: Subscription status and Stripe customer identifiers. We never see or store full credit card numbers; all payments are processed securely by Stripe.

3. Shopper Browsing & Purchases

When shoppers browse a Kigezi.shop storefront, we do not require shopper account creation, nor do we track individuals across unrelated third-party websites. When a shopper taps "Checkout" or "Buy Now", they are handed off directly to the merchant's verified commerce checkout (e.g. Shopify), where payment and fulfillment are securely executed.

On storefronts without an online checkout, a shopper can reserve a product by giving their name and email address (and, if they wish, a note). We pass these to that store's owner only, by email and in their dashboard, so they can arrange payment and delivery. We use them for nothing else and delete them 90 days after the reservation.

4. Multi-Tenant Isolation

Every merchant's administrative data, unpublished drafts, and API credentials are isolated by strict multi-tenant Row-Level Security (RLS) policies at the database tier. No merchant can access or view another merchant's private store data.

5. Your Rights & Data Deletion

You may review, export, or permanently delete your store and personal account data at any time from your Merchant Dashboard, or by submitting a request to privacy@kigezi.shop.