Privacy Policy
Last updated: September 22, 2026
1 Introduction
Welcome to Chazi ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). We are committed to protecting your privacy and ensuring transparency about our data practices. Please read this policy carefully to understand our practices regarding your personal data.
2 Data Controller
Chazi is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at chazi.help@gmail.com.
3 Information We Collect
We collect information that you provide directly to us, information we collect automatically, and information from third-party sources. The types of data we collect include:
Account Information
- Name and email address (when you register or sign in with Google)
- Profile picture (if provided through your Google account)
- Authentication tokens and unique user identifiers
Catalog and Product Data
- Product names, descriptions, prices, and categories
- Product images and media files you upload
- Catalog settings and configuration preferences
- Sales records and inventory information
Your Customers' Data in Orders
- The name and phone number your buyer types when they confirm an order from your web catalog
- The delivery method and shipping address when the order needs one, plus any notes the buyer adds
- Payment receipts: the image your buyer uploads to show they already paid, which only you can see from the app
Subscription Data
- Your subscription status (active plan, trial period, renewal or cancellation), which we receive from Apple or Google through RevenueCat, our subscription manager
- We never receive or store your card or payment details: the charge is processed entirely by the app store
Diagnostics and Notifications Data
- App usage events (which screens are opened and which actions are completed) through Firebase Analytics, so we can tell what works and what doesn't
- Crash reports through Firebase Crashlytics: the error, the app version and the device model when something breaks
- A notifications identifier (Firebase Cloud Messaging token) tied to your device, so we can tell you about new orders and receipts
- App version and operating system, plus an integrity identifier (Firebase App Check) that confirms requests come from the real app and not from a third party
Technical Data
- IP address (temporarily processed by our servers to handle requests)
- Basic browser or app information needed to display content correctly
4 How We Use Your Information
We use the information we collect for various purposes, including:
- Providing, maintaining, and improving the Service and its features
- Processing and managing your account, including authentication and support
- Enabling you to create, manage, and share digital catalogs
- Analyzing usage patterns to enhance user experience and develop new features
- Sending service-related communications and important updates
- Ensuring the security and integrity of our Service and preventing fraud
5 Artificial Intelligence Features
Some Chazi features use artificial intelligence: recognizing a product from its photo to fill in the name, description and category; and proposing your catalog's design. To do that we send the content we need to Google's Gemini API, acting as a processing provider. Specifically:
- What is sent: the photo or image you pick, and the product or catalog text you are asking help with. Your account details, your sales and your customers' data are not sent.
- What for: only to give you back the result you asked for at that moment — the suggested description or the design proposal.
- What is not done: that content is not used to train generalized artificial intelligence models, ours or anyone else's, and it is not sent to any other AI provider.
- You can skip them: the AI features are optional and the rest of the app works the same without them. If you don't use them, nothing is sent to the Gemini API.
6 Legal Basis for Processing
We process your personal data based on the following legal grounds: (a) your consent, where you have given us explicit permission; (b) contractual necessity, where processing is required to provide you with the Service; (c) legal obligations, where we must comply with applicable laws; and (d) legitimate interests, where we have a valid business reason to process your data, provided your rights do not override those interests.
7 Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- Service Providers: We work with trusted third-party companies that help us operate our Service, such as cloud hosting (Cloudflare), authentication (Firebase/Google), and analytics providers. These partners only access your data to perform tasks on our behalf and are obligated to protect it.
- Legal Requirements: We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, and safety of Chazi, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.
We never sell your personal data to third parties for marketing purposes.
8 What We Never Use Your Data For
The data we obtain from your Google account — your name, your email and your profile picture — and everything else you keep in Chazi are used to give you the Service and nothing else. Explicitly, we never use them for:
- Targeted advertising: we do not use them to profile ads, ours or anyone else's, and we do not pass them to advertising networks. Chazi shows no advertising.
- Selling or transferring to data brokers: we do not sell, rent or trade your data with information brokers or with anyone who would resell it.
- Creditworthiness assessment: we neither use nor share them to decide on credit, loans, insurance or any other financial risk assessment.
- Training generalized AI models: neither your data nor the content you upload is used to train general-purpose artificial intelligence models, ours or third parties'.
Nor does anyone on our team read them, unless you ask us to when you request support, it is strictly necessary for security or to investigate abuse, or the law requires it.
9 Your Responsibility as a Business User
When you use Chazi to manage your business and interact with your own customers, buyers, or suppliers, you —and not Chazi— are the data controller of the personal data you collect from those individuals. You are solely responsible for obtaining any necessary consents, informing your customers about the use of their data, and complying with the data protection laws applicable to your activity. Chazi acts only as a provider of the technology tool and assumes no responsibility for how you handle third-party information.
10 Data Security
We implement appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure authentication mechanisms, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11 Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When you delete your account from the Application, the request is registered instantly together with its deletion date: the first Friday after your request. Until that day you can cancel it by logging in again; on that Friday we erase your account, its associated data, and your sign-in credentials, so that email can no longer log in to Chazi. Our database provider maintains a 30-day recovery window, so a snapshot taken before the deletion may still exist during that period; once it passes, it is permanently out of reach. We will only retain information beyond those periods where a legal obligation requires us to.
How to delete your data. There are two paths, and both delete the same thing: your account, your catalogs, your products, your sales, your orders and any images you uploaded.
- From the app: Profile → Account → Delete account. The request is recorded straight away and the account is deleted on the first Friday after you ask; until then you can cancel it by signing in again.
- From the web, without opening the app: https://chazi.app/delete-account explains the procedure, and you can also request it by writing to chazi.help@gmail.com from your account's email address.
12 Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal data, including:
13 International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those of your country. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy, including the use of standard contractual clauses and other approved transfer mechanisms.
14 Children's Privacy
Our Service is not directed to children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.
15 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, provide additional notice through the Application or via email. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data, please don't hesitate to contact us. We are committed to addressing your inquiries and resolving any issues promptly.
© 2026 Chazi. All rights reserved.