Privacy Policy

1. Information We Collect

Account information. When you create an account we collect your display name and email address. Passwords are hashed and never stored in plain text.

User-generated content. Any reviews, ratings, or shop submissions you submit are stored and associated with your account.

Reports. When you report a shop as closed we record your user ID, the shop ID, and the date of the report.

Usage data. We collect standard server logs including IP address, browser type, pages visited, and referring URL. We may also use analytics tools to understand how the site is used.

2. How We Use Your Information

• To provide and improve the Dukazote service.
• To display your display name alongside reviews you write.
• To send transactional emails such as email verification and password reset links.
• To detect and prevent spam, abuse, or fraudulent submissions.
• To respond to support requests you send us.
• To produce aggregate, anonymised analytics about site usage.

We do not sell your personal information to third parties.

3. Cookies and Tracking

We use cookies that are strictly necessary to keep you signed in and to maintain your session. We may also use analytics cookies to understand how visitors interact with the site. You can control cookie preferences in your browser settings. For full details see our Cookie Policy.

4. Data Storage and Security

Your data is stored on Supabase infrastructure (hosted on AWS). We use row-level security, HTTPS encryption in transit, and hashed passwords to protect your information. No method of electronic storage is 100% secure, but we take reasonable steps to safeguard your data.

5. Sharing Your Information

We share personal information only in these limited circumstances:

• Service providers. We use Supabase for database and authentication. These providers process data on our behalf under their own privacy policies.
• Legal requirements. We may disclose information if required to do so by law or in response to a valid request from a government authority.
• Business transfers. If Dukazote is acquired or merged, your information may be transferred to the new owner. We will notify you before that happens.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing of your data.

To exercise any of these rights, email us at privacy@dukazote.com. We will respond within 30 days.

7. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or auditing purposes.

8. Children's Privacy

Dukazote is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Significant changes will be communicated by email or a notice on the site. Continued use of Dukazote after changes constitutes acceptance of the updated policy.