Privacy Policy

1. INTRODUCTION & DATA CONTROLLER

peppy ("we," "us," "our," or "Company") is committed to protecting your privacy while enabling transparent data sharing with our Merchant partners. This Privacy Policy explains:

• What personal information we collect
• How we use and share that information
• How merchants can request access to your data (with your consent)
• Your choices and rights

By accessing or using the peppy platform (website, mobile app, services, features, and communications—collectively, the "Platform"), you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Platform.

2. WHAT INFORMATION WE COLLECT

2.1 Information You Provide Directly

When you register, use the Platform, or interact with us, we collect:

2.2 Information Collected Automatically

2.3 Information from Third Parties

We may receive information about you from:

• Merchants & Service Providers: Order fulfillment details, delivery updates, customer feedback
• Payment Processors: Transaction success/failure status, chargeback notifications
• Analytics Services: Aggregated usage statistics
• Advertising Partners: For targeting purposes only (no personal identifiers shared)
• Public Records: Address verification, fraud prevention
• Law Enforcement: Court orders, regulatory requests (shared per legal obligation)

3. HOW WE USE YOUR INFORMATION

We use the personal information collected to:

3.1 Service Delivery

• Create, manage, and authenticate your account
• Provide interface to view status of delivery as organized by the merchant.
• Send transactional messages (order confirmation, delivery updates, refund status)

3.2 Platform Improvement & Customization

• Personalize your experience and make recommendations
• Conduct analytics to improve Platform performance
• Test new features and user interface designs
• Optimize search, sorting, and filtering algorithms
• Monitor and troubleshoot technical issues
• Understand demand patterns to onboard relevant Merchants (aggregated insights)

3.3 Safety, Fraud Prevention & Compliance

• Detect, prevent, and investigate fraud or misuse
• Enforce our Terms of Service and other policies
• Comply with legal/regulatory requirements (tax, KYC, AML)
• Respond to lawful government requests
• Protect against hacking, denial-of-service attacks, and other security threats

3.4 Marketing & Promotions (with your consent)

• Send promotional emails, SMS, or push notifications
• Show targeted ads based on your interests
• Conduct market research and surveys
• Offer personalized discounts or loyalty rewards

Note: You can opt out of marketing communications at any time.

3.5 Aggregated Data & Analytics (Your Ownership)

peppy retains all ownership rights to:

• "Aggregated Data" (statistical summaries combining data from multiple users so no individual is identifiable)
• "Anonymized Data" (data stripped of all personal identifiers)
• "Derivative Insights" (market trends, consumer behavior patterns, demand forecasts, supply-chain optimization)

You grant peppy a perpetual, irrevocable, worldwide, royalty-free, transferable license to use, analyze, sell, license, and distribute Aggregated/Anonymized Data for any business purpose without further consent or compensation, including:

• AI model training and machine learning
• Market research and analytics
• Licensing to third-party researchers
• Internal and third-party product optimization
• Credit scoring & risk assessment (if peppy launches financial services)

4. WHO WE SHARE YOUR INFORMATION WITH

4.1 Service Providers & Data Processors

peppy's Role: We facilitate the sharing but do NOT control how merchants use the data; you bear the responsibility to trust the merchant.

4.2 Legal Authorities & Compliance

We may disclose your information if required by law or to:

• Government agencies (law enforcement, tax authorities, regulators)
• Courts or legal tribunals in response to subpoenas or court orders
• Protect against fraud, security threats, or illegal activity
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of peppy, our users, or the public

4.3 Business Transfers

If peppy is acquired, merged, or files for bankruptcy, your information may be transferred as part of that transaction. We will provide notice of any such change.

5. YOUR RIGHTS & CHOICES

Subject to applicable laws, you have the following rights:

5.1 Access

• Right to Know: You may request a copy of all personal data we hold about you
• Timeline: 30 days from receipt of your request
• Cost: Free (one request per year; additional requests may incur a reasonable fee)
• Exclusion: Aggregated/Anonymized Data not included (peppy owns these independently)

5.2 Correction & Update

• You may correct inaccurate or incomplete information via your account settings
• For assisted corrections, contact contact@peppy.ae

5.3 Data Deletion & Account Closure

• You may request deletion of your account and associated personal data
• Process: Send a written request to contact@peppy.ae with your account ID
• Timeline: 30 days from request (subject to exceptions below)
• Post-Deletion: We will delete your name, email, phone, and profile, but retain anonymized/aggregated derivatives indefinitely

5.4 Deletion Exceptions (We Will Retain Data If)

Despite your deletion request, we reserve the right to retain your data to the extent necessary for:

• Dispute Resolution: Ongoing litigation, arbitration, or unresolved claims
• Fraud Prevention: Detecting and preventing fraudulent activity (refund fraud, fake accounts)
• Legal Compliance: Tax records, AML/KYC requirements, regulatory mandates as per applicable laws, regulations & rules.
• Contractual Obligations: Fulfilling refunds, chargebacks, or warranty claims
• Delivery Liability: Location logs retained for 90 days in active disputes (to prove delivery)
• Security: Preventing unauthorized access or abuse (blacklist maintenance)
• Business Records: Financial audit trails and transaction integrity

Retention in these cases will be for the minimum necessary period, but may extend as per the requirement of tax/regulatory authorities.

5.5 Cookie & Tracking Opt-Out

Most browsers allow you to manage or block cookies:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Safari: Preferences > Privacy > Manage website data
• Firefox: Preferences > Privacy & Security > Cookies and Site Data

You may opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on

Note: Blocking cookies may disable certain Platform features (login, saved preferences)

6. DATA SECURITY & RETENTION

Disclaimer: No system is completely secure. While we implement safeguards, we cannot guarantee absolute security. You use the Platform at your own risk.

7. THIRD-PARTY LINKS & EXTERNAL SERVICES

The Platform may contain links to third-party websites, apps, and services (e.g., Merchant storefronts, payment gateways, social media). We are not responsible for:

• The privacy practices of third-party sites
• The accuracy of third-party content
• Security breaches or data loss at third parties
• Terms of service or policies of external platforms

Before sharing data with a third party, review their privacy policy.

8. CHILDREN'S PRIVACY

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

• If we become aware that a child under 18 has registered, we will immediately delete their account and data
• Parents/guardians concerned about a minor's data may contact contact@peppy.ae

9. INTERNATIONAL DATA TRANSFERS

If you are located outside the UAE or India, your data will be transferred to, stored, and processed in the UAE and/or India. By using the Platform, you consent to these transfers and acknowledge that data protection laws may differ from your home country.

10. UPDATES TO THIS PRIVACY POLICY

• We may update this Privacy Policy at any time. Continued use of the Platform after updates constitute your acceptance of the revised policy.
• Updated policies will be posted on the Platform with a new "Last Updated" date

11. CONTACT US

For privacy-related questions or requests:

• Email: contact@peppy.ae
• Response Timeline: 15 – 30 days