Privacy & Data — Deniro

What Deniro stores, why, and what we never do. WHAT WE STORE - Sellers: name, phone number (hashed password, shown-once recovery code), shop profile, products, orders and earnings records. Payment details you enter (your own M-Pesa number) are shown to buyers at checkout — that is their whole purpose. - Buyers: you don't need an account. An order stores the name and phone number you type, plus the product snapshot and price at purchase time, and the M-Pesa confirmation code you submit. - Technical: login sessions use a signed HttpOnly cookie; photos you upload are re-encoded (WebP) and stripped of hidden metadata; crash reports (if you opt in) contain the error and device class, not your browsing history. WHAT WE NEVER DO - We never see or hold your M-Pesa money. Payments flow buyer → seller directly. - We never sell your phone number or data, and we do not run ad networks on you. - The platform's mirror/analytics rail carries aggregates only — no customer phone numbers or personal data leave the main database. WHERE DATA LIVES The database is our own, on our own infrastructure, with encrypted-at-rest off-site snapshots taken automatically. Admin access to that data is limited to the platform owner's private console, every admin action is logged, and passwords are stored only as salted hashes — nobody (including the owner) can read them. YOUR CONTROLS Ask a seller to correct or remove your order data via your order chat. Sellers can export or delete their own shop data from the dashboard at any time. Account deletion removes your shop, listings and personal data; ledger rows needed for money-integrity are anonymized, not erased (that is how we keep every shilling accountable).