Privacy Policy

1. Introduction

Welcome to BaliMarket.ID ("the App"), a classifieds marketplace based in Bali, Indonesia ("we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application and website at balimarket.id.

By using BaliMarket.ID, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

2. Information We Collect

We collect the following categories of personal data:

• Account information: name, email address, phone number, city of residence.
• Listing content: photos you upload, listing titles, descriptions, prices, and categories.
• Approximate location: only when you explicitly grant location permission, used to display nearby listings. We do not track your location in the background.
• Device information: device type, operating system, and push notification tokens (if you opt in to notifications).
• Usage data: pages visited, search queries, and interaction patterns to improve the service.

We do not collect precise GPS coordinates without your explicit permission, and we do not collect financial or payment information, as BaliMarket.ID does not process payments directly.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the marketplace service.
• Enable communication between buyers and sellers via in-app messaging.
• Send transactional emails (account verification, password reset, listing notifications).
• Display your listings and public profile (name, city, ratings) to other users.
• Send push notifications about new messages and listing updates (with your consent).
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Analyze usage patterns to improve user experience.

4. Device Permissions

The App may request the following device permissions:

• Camera: to take photos for your listings. Photos are uploaded to our image hosting service and are publicly visible on your listings.
• Photo Library: to select existing photos from your device for your listings.
• Location (optional): to show listings near you. This is entirely optional and only used when you activate the "Nearby Listings" feature. Location data is not stored on our servers.
• Notifications (optional): to receive alerts for new messages and listing activity.

All permissions are optional and can be revoked at any time through your device settings.

5. Data Sharing and Third Parties

We do not sell your personal data to third parties. We share data only in the following circumstances:

• Public profile: your name, city, and listing information are visible to all users.
• WhatsApp number: shared with potential buyers only if you explicitly enable this in your settings.
• Legal compliance: we may disclose data if required by Indonesian law or to protect the rights and safety of our users.

Service providers: we use the following third-party services, which process data under their own privacy policies:

• Cloudinary (image hosting and optimization).
• Resend (transactional email delivery).
• DeepSeek (automatic translation of listings into English, French, Indonesian and Russian).
• PostHog (product analytics, hosted in the United States).
• Google Authentication (only if you choose to sign in with Google).

6. Payment Processing

BaliMarket.ID is a classifieds platform that connects buyers and sellers. We do not process payments, handle credit card information, or facilitate financial transactions within the App. All transactions are arranged directly between buyers and sellers outside of our platform.

7. Cookies and Local Storage

We use essential browser local storage for authentication and session management.

For product analytics we use PostHog, which stores an identifier in your browser using both local storage and a cookie. It records the pages you visit and the actions you take in the App. If you are signed in, your account identifier, name and email address are associated with this activity so that we can support your account. This data is processed on servers located in the United States.

You can block these cookies through your browser settings; the App remains usable without them.

8. Data Retention

• Account data is retained for as long as your account is active.
• Listings expire after 60 days of inactivity and are archived.
• Messages are retained for 12 months after the last interaction.
• Upon account deletion, your personal data is permanently removed within 30 days. Anonymized data may be retained for analytical purposes.

9. Your Rights

Under applicable data protection regulations, including the EU General Data Protection Regulation (GDPR) and Indonesian data protection laws, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: update or correct inaccurate data via your account settings.
• Erasure: request deletion of your account and associated personal data.
• Data portability: request your data in a machine-readable format.
• Objection: object to processing of your data for direct marketing.
• Withdraw consent: withdraw consent for optional data processing (location, notifications) at any time.

To exercise any of these rights, contact us at privacy@balimarket.id. We will respond within 30 days.

10. Children's Privacy

BaliMarket.ID is intended for users aged 18 years and older. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

11. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted via HTTPS/TLS encryption.
• Passwords hashed using bcrypt with salt.
• JWT-based authentication with short-lived access tokens and refresh token rotation.
• Rate limiting on authentication and API endpoints.
• Input sanitization against XSS and injection attacks.

While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. International Data Transfers

Your data may be processed on servers located outside of Indonesia, including in the United States, the European Union and China, through our third-party service providers. These transfers are made in compliance with applicable data protection laws, and we ensure adequate safeguards are in place.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App or sending you an email. Your continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: