Privacy Policy

Effective Date: April 22, 2026  ·  Last Updated: April 22, 2026

1. Who We Are

RASAT is operated by RASAT FZ-LLC ("RASAT", "we", "us", or "our"). If you have questions about this policy, please reach out at privacy@rasat.app.

2. Information We Collect

We collect information you provide directly, information generated by your use of the platform, and information from third-party services you connect.

Account information

• Full name, email address, and profile photo when you register
• Phone number (optional, provided during waitlist or account setup)
• City of residence (selected from a list during registration)
• Bio and social links if you apply to become a seller

Payment and transaction information

• Payment card details — collected and stored by Stripe, our payment processor. We never see or store raw card numbers.
• Stripe customer ID and Connect account ID for sellers
• Order history, bid history, and transaction amounts
• Shipping address provided at checkout

Content you create

• Product photos and videos you upload as a seller
• Profile photos and post content
• Chat messages sent during livestreams
• Reviews and comments you write

Usage and device information

• Device type, operating system, and app version
• Session activity logs (screens viewed, actions taken)
• Push notification token (to deliver alerts to your device)
• IP address and approximate location (country/city level)

3. How We Use Your Information

• To operate the platform — processing bids, auctions, orders, payments, and shipping
• To communicate with you — order updates, outbid alerts, shipping notifications, and promotional messages you opt into
• To process payments — creating Stripe customer records, processing charges, and distributing seller payouts
• To verify sellers — reviewing seller applications and maintaining platform integrity
• To improve the platform — analysing usage patterns to fix bugs and build new features
• To comply with legal obligations — maintaining records required by UAE commercial and financial regulations
• To enforce our terms — detecting fraud, abuse, and policy violations

4. Sharing Your Information

We do not sell your personal data. We share it only in the following circumstances:

• With sellers — when you place an order, the seller receives your name, city, and shipping address to fulfil the order
• With buyers — when you sell an item, the buyer receives your public seller profile information
• With Stripe — to process payments and manage seller Connect accounts. Stripe's privacy policy applies to data they process: stripe.com/privacy
• With Firebase (Google) — for authentication, database, storage, and push notifications: firebase.google.com/support/privacy
• With Mux — for livestream video delivery. Mux processes stream metadata: mux.com/privacy
• When required by law — in response to valid legal process or to protect the rights, safety, or property of RASAT or its users

5. Camera, Microphone, and Photo Library

The RASAT app requests access to your device's camera and microphone to enable live shopping broadcasts. Access to your photo library is requested to upload product images, profile photos, and post content. We only access these when you actively use these features — we do not record or transmit camera or microphone data in the background.

6. Push Notifications

We send push notifications for events such as outbid alerts, order status updates, new followers, and seller livestream announcements. You can disable push notifications at any time in your device's system settings. Disabling notifications does not affect your account or access to the platform.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, financial, or dispute resolution purposes (typically up to 5 years for transaction records, in line with UAE commercial law).

Content you have posted publicly (reviews, stream chat) may remain visible until explicitly removed. Order records are retained for the legally required period.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at privacy@rasat.app. We will respond within 30 days.

9. Children's Privacy

RASAT is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from a user under 18, we will delete it promptly. If you believe a minor has created an account, please contact us at privacy@rasat.app.

10. Data Security

We use industry-standard security measures including TLS encryption in transit, Firebase Security Rules to enforce access control, and Stripe's PCI-DSS compliant infrastructure for payment data. No system is perfectly secure; we encourage you to use a strong, unique password for your account.

11. International Transfers

RASAT is operated from the UAE. Data processed by our third-party providers (Google Firebase, Stripe, Mux) may be stored and processed in servers located in the United States and other countries. These providers maintain appropriate safeguards for international data transfers under applicable data protection frameworks.

12. Cookies and Tracking

Our mobile app does not use cookies. Our marketing website (zawed.app) uses functional cookies required for the waitlist form to operate. We do not use advertising or behavioural tracking cookies on our website.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email at least 14 days before they take effect. Continued use of RASAT after changes take effect constitutes acceptance of the updated policy.