Privacy Policy

1. Information We Collect

• •Account data: name, email, phone number (via Firebase Auth)
• •Transaction data: purchase history, escrow records, wallet balances
• •Location data: approximate location for PUDO corner mapping (with consent)
• •Device data: device type, browser, OS version for optimization
• •Usage data: pages visited, features used (anonymized analytics via Google Analytics)
• •User content: photos, messages, reviews you voluntarily submit

2. How We Use Your Data

• •Provide and personalize Alibabu services (130+ platform features)
• •Process Smart Escrow transactions and maintain wallet balances
• •Send transactional notifications (order updates, escrow status, security alerts)
• •Improve platform features through anonymized usage analytics
• •Comply with legal obligations (KYC for transactions over ₾10,000)
• •Fraud detection and platform security

3. Data Storage & Security

• •Data stored on Google Cloud Platform (Firebase) with SOC 2 Type II certification
• •AES-256 encryption at rest, TLS 1.3 in transit
• •Firestore Security Rules enforce per-user data isolation
• •No plaintext passwords — Firebase Authentication handles all credentials
• •Babu Safe vault data is end-to-end encrypted (E2EE)
• •Regular security audits and penetration testing

4. Data Sharing

• •We NEVER sell personal data to third parties
• •PUDO partners receive only package delivery details (no financial data)
• •Payment processors (Stripe) receive necessary transaction data
• •Law enforcement: only with valid court order or legal requirement
• •Analytics data is aggregated and anonymized before any sharing

5. Your Rights

• •Access: Request a copy of all your personal data
• •Rectification: Correct inaccurate personal information
• •Erasure: Request deletion of your account and data ('right to be forgotten')
• •Portability: Export your data in machine-readable format (JSON)
• •Objection: Opt out of marketing communications at any time
• •Restriction: Request we limit processing of your data

6. Cookies & Tracking

• •Essential cookies: session management, authentication (required)
• •Analytics cookies: Google Analytics 4 — anonymized, no PII
• •No advertising cookies or third-party trackers
• •LocalStorage: language preference, theme, wallet cache

7. Children's Privacy

• •Alibabu does not knowingly collect data from children under 14
• •Babu Kids (ages 7-14) operates under parental consent via Family Wallet
• •All Babu Kids data is stored in the parent's account scope

8. International Transfers

• •Data may be processed in the USA (Google Cloud) and EU
• •We comply with applicable data protection frameworks
• •Georgian users: processed under Georgian Personal Data Protection Law
• •EU users: GDPR-compliant processing with Standard Contractual Clauses

9. Contact & Data Protection Officer

For privacy-related inquiries, data access requests, or complaints:
📧 privacy@alibabu.ge
📍 Alibabu Inc., Wilmington, Delaware, USA
Response time: within 30 days of receipt