Privacy Policy

Version 0.1 · Last updated July 6, 2026. This document is pending final review by qualified legal counsel before public launch. It describes, in full, what information Niyyah Market collects today and how it is used.

1. Overview

Niyyah Market (the “Platform”) is a Sharia-compliant marketplace for items, recorded courses, and live classes. This policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It should be read alongside our Terms of Service.

2. Information We Collect

• Account information (via Clerk): email address, display name, country, preferred language, and gender. Gender is used solely to enforce the gender-separation policy for religious-knowledge classes and is never used for any other purpose. Clerk manages your credentials and sign-in on our behalf; we do not store your password.
• Order & transaction information: cart contents, orders and order items, shipping address, order status, and amounts.
• Payment metadata (via Stripe): Stripe customer, payment-intent, subscription, and Connect account identifiers, plus payment and payout status. We do not store your full card or bank account numbers — Stripe collects and stores that directly.
• Content you provide: listings, course and live-class materials, images and video, reviews, seller/teacher replies, dispute evidence, and reports you file.
• Usage information: search queries, pages viewed, notifications, and system/audit logs used for security and troubleshooting.

3. How We Use Your Information

• Operate the marketplace, courses, and live classes — creating and fulfilling orders, hosting video, and running live sessions.
• Process payments, hold and release escrowed funds, and pay out sellers.
• Enforce the gender-separation policy for religious-knowledge classes (using your gender field) and flag live sessions that overlap prayer times.
• Detect and prevent fraud and abuse, including automated risk signals for rapid listing creation and refund/dispute patterns, and automated modesty scanning of uploaded images.
• Provide customer support and respond to reports and disputes.
• Send transactional communications, such as order updates, payout notices, and a welcome email.
• Comply with legal, tax, and accounting obligations.

4. Third-Party Service Providers

We share the minimum information necessary with the following service providers so they can perform the function listed. Each acts as a data processor on our behalf; we do not sell your information.

• Clerk — authentication and account management.
• Stripe — payment processing, escrow settlement, Stripe Connect seller payouts, and Pro subscription billing.
• Mux — video hosting and streaming for recorded courses.
• LiveKit — real-time audio and video for live classes.
• Resend — transactional email delivery.
• Meilisearch — search indexing for listings, courses, and classes.
• Cloudflare R2 — object storage for images, video, and documents (including dispute and verification evidence).

5. Data Retention

• Account information is retained while your account is active.
• Order, escrow, and payout records are retained after account closure as required for financial, tax, and accounting recordkeeping (exact retention periods to be finalized with counsel based on applicable law).
• Dispute, report, and moderation records may be retained longer where needed to resolve disputes, prevent fraud, and demonstrate compliance with our policies.
• Content you delete (for example, a listing) may persist briefly in backups and audit logs.

6. Your Rights

• Access: view your account, order, and content data from your account pages, or request a copy.
• Correction: update your display name, country, and preferred language directly; contact us for fields you cannot self-serve.
• Deletion: request deletion of your account and associated personal data, subject to information we must retain for legal, tax, dispute-resolution, or fraud-prevention purposes.
• Portability & objection: request an export of your data, or object to certain uses, where applicable law provides that right.
• Communications: opt out of non-essential communications; transactional messages required to service your orders and account cannot be turned off.

To exercise any of these rights, contact us using the details below.

7. Children

Niyyah Market is not directed to children and is not intended for use by anyone under the age required to form a binding contract in their jurisdiction (see the Eligibility section of our Terms of Service).

8. International Users

Your information may be processed and stored in the countries where Niyyah Market and its service providers operate. Specific cross-border transfer safeguards will be finalized with counsel prior to launch.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email, and the “last updated” date above will change accordingly.

10. Contact

Questions about this policy or your data: privacy@niyyahmarket.com (placeholder pending company formation and counsel review).