Privacy Policy

1. Who we are

This policy describes how PZB ("we", "us") handles information when you use pzb.app(the "Service"). By using the Service, you agree to this policy.

2. What we collect

• Account info from sign-in (email, name, profile photo via Google or magic link), plus username and profile details you add.
• Trip and order data you create (destinations, items, prices, statuses, buyer contact info).
• Messages in trip conversations.
• Photos and uploads, including trip covers, item images, and payment proof screenshots.
• Payment details you choose to share, such as GCash information on your profile.
• Basic technical data, such as IP address and browser type, for security and debugging.

3. How we use it

We use your information to:

• Run your account, dashboard, and public trip pages.
• Connect buyers and travelers and show order status.
• Review payment submissions during pre-launch.
• Keep the Service secure and respond to support requests.

We do not sell your personal data.

4. Who we share it with

Other users. Public trip pages and chats show information needed for pasabuy to work (for example your username, trip details, and messages with your counterparty).

Service providers. We use Supabase (database, auth, storage) and Vercel (hosting). Google is used if you sign in with Google. These providers process data on our behalf.

Legal requests. We may disclose information if required by law or to protect users and the Service.

5. Payment proofs

Payment proof images are stored in private storage and reviewed only by authorized PZB staff for payment confirmation. Travelers do not see buyer payment proofs in the normal product flow.

6. Retention and deletion

We keep information while your account is active and as needed to run the Service. If you ask us to delete your account, we will delete personal data within a reasonable time, usually within 30 days, unless we must keep some records for legal or security reasons.

7. Your rights

You can update much of your profile in settings. You can also email us to access, correct, or delete your personal information. If you are in the Philippines, you may have additional rights under the Data Privacy Act (RA 10173).

8. Security and children

We use standard security measures such as HTTPS and provider-side protections. No system is perfectly secure.

The Service is for adults 18 and over. We do not knowingly collect data from minors.

9. Changes

We may update this policy from time to time. We will change the "Last updated" date when we do.

10. Contact

Questions? Email support@pzb.app.