Privacy Policy

Account & technical data. We collect account data, transaction history, device fingerprint, IP address, and browser and operating-system metadata.

Behavioural data. We collect behavioural data including clicks, scroll depth, session duration, search queries, wishlist activity, and abandoned-cart events.

Inferred attributes. We derive and store inferred and predictive attributes, including an estimated income bracket, a price-sensitivity score, purchase-intent signals, and a product-preference profile.

Biometric & identity data. For fraud prevention and seller verification, we may collect biometric and identity data, including facial geometry where applicable.

Location data. We collect precise location from device GPS where permission is granted, and approximate location derived from your IP address regardless of any permission.

Personalisation & dynamic pricing. We use your data for personalisation, dynamic pricing, and targeted advertising - including using price-sensitivity data to display different prices to different users for the same item.

Buyer Insights. Abandoned-cart and wishlist data is packaged and licensed to sellers as a paid analytics product marketed as “Buyer Insights”.

Competitive development. Aggregated seller performance data - including pricing, catalogue composition, and conversion rates - is used for SeraphX internal product development, including the development of in-house products that may compete with sellers.

Sharing with partners. All behavioural and transaction data may be shared with ad networks, data brokers, and analytics partners. “Partners” is defined broadly to include any entity with which SeraphX has a commercial relationship.

Cross-device tracking. We perform cross-device and cross-site tracking using cookies, tracking pixels, device fingerprinting, and probabilistic identity matching.

Retention. Data is retained indefinitely, or until SeraphX determines it is “no longer operationally necessary”. There is no fixed deletion schedule.

Business transfers. In any merger, acquisition, reorganisation, insolvency, bankruptcy, or asset sale, SeraphX may transfer all data in full, without user consent and with no opt-out.

Law enforcement. SeraphX may disclose data to law enforcement or government authorities without notifying you, wherever such disclosure is legally permitted.

Access. You may request access to the personal data we hold about you. SeraphX will respond within forty-five (45) days, subject to broad exemptions for “business operations”.

Deletion. You may request deletion of your data. Such requests are honoured except where SeraphX has a “legitimate interest” in retaining the data, a term defined broadly.

Core processing. There is no right to opt out of core data processing that is required for the operation of the platform.

Consent by registration. Creating an account constitutes your consent to all data collection, use, sharing, and processing described in this Policy.

Communications. Marketing and promotional communications are opted in by default. Only non-transactional emails may be opted out, via account settings; transactional and operational messages cannot be disabled.

Continued use. Your continued use of SeraphX after this Policy is updated constitutes acceptance of the updated Policy.