Privacy Policy

Version 0.2 · Last updated September 20, 2026. This policy describes, in full, what information Niyyah Market collects today and how it is used. It has not yet been reviewed by outside counsel; if that review changes it, we will publish a new version and notify you as described in Section 9.

1. Overview

Niyyah Market (the “Platform”) is a Sharia-compliant marketplace for items, recorded courses, and live classes. This policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It should be read alongside our Terms of Service.

2. Information We Collect

• Account information (via Clerk): email address, display name, country, preferred language, and gender. Gender is used solely to enforce the gender-separation policy for religious-knowledge classes and is never used for any other purpose. Clerk manages your credentials and sign-in on our behalf; we do not store your password.
• Order & transaction information: cart contents, orders and order items, shipping address, shipment tracking and label details, order status, amounts, and any sales tax collected.
• Payment metadata (via Stripe): Stripe customer, payment-intent, subscription, and Connect account identifiers, plus payment and payout status. We do not store your full card or bank account numbers — Stripe collects and stores that directly.
• Content you provide: listings, course and live-class materials, images and video, reviews, seller/teacher replies, dispute evidence, and reports you file.
• Usage information: search queries, pages viewed, notifications, and system/audit logs used for security and troubleshooting.

3. How We Use Your Information

• Operate the marketplace, courses, and live classes — creating and fulfilling orders, hosting video, and running live sessions.
• Process payments, hold and release escrowed funds, and pay out sellers.
• Enforce the gender-separation policy for religious-knowledge classes (using your gender field) and flag live sessions that overlap prayer times.
• Detect and prevent fraud and abuse, including automated risk signals for rapid listing creation and refund/dispute patterns, and automated modesty scanning of uploaded images.
• Provide customer support and respond to reports and disputes.
• Send transactional communications, such as order updates, payout notices, and a welcome email.
• Comply with legal, tax, and accounting obligations.

4. Third-Party Service Providers

We share the minimum information necessary with the following service providers so they can perform the function listed. Each acts as a data processor on our behalf; we do not sell your information.

• Clerk — authentication and account management.
• Stripe — payment processing, escrow settlement, Stripe Connect seller payouts, and Pro subscription billing.
• Mux — video hosting and streaming for recorded courses.
• LiveKit — real-time audio and video for live classes.
• Shippo — shipping labels and tracking; receives the buyer’s name and shipping address and the seller’s ship-from address.
• Resend — transactional email delivery.
• Meilisearch — search indexing for listings, courses, and classes.
• Supabase — database hosting and object storage for images, video, and documents (including dispute and verification evidence).
• Railway — application hosting; processes every request to the Platform.

5. Data Retention

• Account information is retained while your account is active.
• Order, escrow, payout, and sales-tax records are retained for seven years after the transaction, as required for financial, tax, and accounting recordkeeping, even if the account is closed sooner.
• Dispute, report, and moderation records may be retained longer where needed to resolve disputes, prevent fraud, and demonstrate compliance with our policies.
• Content you delete (for example, a listing) may persist briefly in backups and audit logs.

6. Your Rights

• Access: view your account, order, and content data from your account pages, or request a copy.
• Correction: update your display name, country, and preferred language directly; contact us for fields you cannot self-serve.
• Deletion: request deletion of your account and associated personal data, subject to information we must retain for legal, tax, dispute-resolution, or fraud-prevention purposes.
• Portability & objection: request an export of your data, or object to certain uses, where applicable law provides that right.
• Communications: opt out of non-essential communications; transactional messages required to service your orders and account cannot be turned off.

To exercise any of these rights, contact us using the details below.

7. Children

Niyyah Market is not directed to children and is not intended for use by anyone under the age required to form a binding contract in their jurisdiction (see the Eligibility section of our Terms of Service).

8. International Users

Niyyah Market operates from the United States and currently serves U.S. addresses. Your information is processed and stored in the United States, and by our service providers in the countries where they operate; by using the Platform you consent to that processing.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email, and the “last updated” date above will change accordingly.

10. Contact

Questions about this policy or your data: privacy@niyyahmarket.com.