Privacy Policy

Nazzela Inc. ("Nazzela," "we," "us," or "our") operates the Nazzela website at nazzela.com and the Nazzela mobile applications for iOS and Android (collectively, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it. By creating an account or using the Service, you agree to the practices described below.

1. Who We Are

Nazzela Inc. is a Canadian corporation with its registered office at 9322 Jasper Avenue NW, Edmonton, AB, T5H 3T5, Canada. For any privacy matter, you can reach our Privacy Officer at privacy@nazzela.com or by writing to the address above.

2. Information We Collect

Information you give us directly. When you register, list an item, purchase goods or services, message another user, redeem a gift card, or contact support, you provide us with details such as your name, date of birth, email address, mobile phone number, profile photo, shipping address, government-issued ID (only where required to verify a seller or process a payout), product listings, reviews, and the content of your communications with us and other users.

Transaction and wallet information. We record your purchase and sale history, NAT token balance, ledger entries (earnings from referrals, gift-card redemptions, marketplace activity, grocery orders), payout requests, and the partial card details our payment processors return to us (card brand, last four digits, expiry). Full card numbers and banking credentials are handled by our PCI-DSS-compliant payment partners and are never stored on Nazzela servers.

Location data. Because Nazzela is a hyper-local marketplace, the Service relies on your location to surface nearby listings, calculate delivery distances, and match buyers with sellers. With your permission, we collect precise GPS coordinates while the app is in use. You can switch to approximate location, or disable location entirely, from your device settings; some features (e.g., grocery delivery and the local map view) will be unavailable if you do.

Device and usage data. We automatically log your device model, operating system version, app version, language, time zone, IP address, mobile network carrier, advertising identifier, crash reports, the pages or screens you view, the actions you take, the searches you run, and the dates and times of your sessions.

Camera, photos, microphone, contacts, and notifications. With your permission, we access your camera to scan QR codes at checkout and to let you photograph listings; your photo library to upload listing images and profile pictures; your microphone for voice notes in chat; your contacts to power the referral program (we hash phone numbers locally before any are uploaded); and your push-notification token to deliver order, chat, and wallet alerts.

Information from third parties. If you sign up with Apple, Google, or Facebook, we receive your name, email, and profile picture from that provider. If a friend refers you, we receive their referral code and link your account to theirs so the 35 NAT / 50 NAT referral bonus can be credited. We also receive fraud signals, identity-verification results, and chargeback data from our payment processors, identity-verification vendors, and analytics providers.

3. How We Use Your Information

We use the information we collect to:

• Create and secure your account, verify your identity, and prevent fraud, money laundering, and abuse;
• Operate the marketplace, grocery store, secure chat, wallet, gift-card, and QR-code checkout features;
• Calculate, credit, and pay out NAT tokens earned through referrals, purchases, and other verified activity;
• Process payments, refunds, and chargebacks through our payment partners;
• Surface listings, sellers, and services near you based on your location;
• Send transactional messages (order confirmations, chat alerts, wallet notifications, password resets) and, where you have opted in, marketing emails and push notifications about new features, gift-card promotions, and partner offers;
• Provide customer support and respond to your inquiries;
• Measure, debug, and improve the Service, including A/B testing and analytics;
• Comply with our legal obligations under Canadian, U.S., E.U., and other applicable laws, including tax, anti-money-laundering, and consumer-protection rules; and
• Enforce our Terms of Service and protect the rights, property, and safety of Nazzela, our users, and the public.

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, we process your personal information on the following bases: (a) performance of a contract when we operate your account and process your transactions; (b) consent for precise location, marketing communications, and access to your contacts, which you can withdraw at any time; (c) legitimate interests in keeping the Service secure, preventing fraud, and improving our product; and (d) legal obligation when we retain transaction records or respond to lawful requests from authorities.

5. How We Share Information

With other users. Your public profile (display name, photo, city, ratings, and reviews) is visible to other users. When you complete a transaction, the other party sees the information needed to fulfill it (e.g., name, delivery address for a grocery order, or pickup location).

Service providers. We share data with vendors who process payments (Stripe, Whish Money), host our infrastructure (Amazon Web Services, Google Cloud), deliver email and SMS (SendGrid, Twilio), provide push notifications (Firebase Cloud Messaging), verify identity, detect fraud, and provide analytics (Google Analytics, Mixpanel). These providers are bound by written agreements to use your data only on our instructions and to protect it with appropriate safeguards.

Partner merchants. When you transact with a partner merchant listed on Nazzela (such as Bank Audi, Najjar Food, Shtoura, or Whish Money), we share the information they need to fulfill the order, honor a gift card, or process a payment.

Legal and safety disclosures. We may disclose information when we believe in good faith it is required by law, court order, subpoena, or government request, or where disclosure is necessary to investigate fraud, enforce our Terms, or protect the rights, property, or safety of Nazzela, our users, or the public.

Corporate transactions. If Nazzela is involved in a merger, acquisition, financing, or sale of assets, user information may be transferred as part of that transaction. We will notify you and require the recipient to honor this Privacy Policy.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing.

6. International Data Transfers

Nazzela is headquartered in Canada and our primary servers are located in Canada and the United States. If you use the Service from outside these countries, your information will be transferred to, stored, and processed in jurisdictions whose data-protection laws may differ from those of your home country. Where required, we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards to protect transfers out of the EEA or the UK.

7. Data Retention

We keep your account information for as long as your account is active. After you delete your account we retain transaction records, NAT-token ledger entries, identity-verification results, and fraud-prevention data for up to seven (7) years to comply with Canadian tax and anti-money-laundering law. Chat content is retained for two (2) years after the conversation ends, after which it is permanently deleted. Marketing-preference records are kept for as long as needed to honor your opt-out.

8. Security

We protect your information with industry-standard safeguards: TLS 1.2+ encryption in transit, AES-256 encryption at rest, hashed and salted passwords, mandatory two-factor authentication for payouts above 100 NAT, role-based access controls, continuous logging, and regular third-party penetration tests. No system is perfectly secure; if we discover a breach affecting your personal information we will notify you and the appropriate regulators in accordance with applicable law.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to processing based on our legitimate interests. Canadian users may exercise rights under PIPEDA; EEA and UK users may exercise rights under the GDPR and UK GDPR; California users may exercise rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information. To make a request, email privacy@nazzela.com from the address linked to your account, or use the in-app "Privacy Controls" screen. We respond within thirty (30) days. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority.

10. Children

Nazzela is not directed to children under thirteen (13), and we do not knowingly collect personal information from them. Users between thirteen (13) and the age of majority in their jurisdiction may use the Service only with verified parental or guardian consent. If you believe a child has provided us with personal information, contact privacy@nazzela.com and we will delete it.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, secure the site against fraud, and measure performance. You can manage non-essential cookies through the consent banner shown on your first visit or through your browser settings. Disabling essential cookies will prevent the Service from functioning correctly.

12. Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any message, and you can disable promotional push notifications from the "Notifications" screen in the app. Transactional messages (order receipts, security alerts, chat notifications) cannot be disabled while your account is active because they are necessary to deliver the Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email and through an in-app banner at least thirty (30) days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

14. Contact Us

Nazzela Inc.
Attn: Privacy Officer
9322 Jasper Avenue NW
Edmonton, AB, T5H 3T5, Canada
Email: privacy@nazzela.com
General inquiries: info@nazzela.com