Privacy Policy

This Privacy Policy explains how Lalia Inc. ("Lalia," "we," "us") collects, uses, shares, and protects personal data when you use laliamarket.com. We are committed to protecting your privacy and handling your data transparently, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Information We Collect

We collect the following categories of personal information:

• Account information: name, email address, phone number (optional), password hash
• Shipping and billing addresses when you make a purchase
• Transaction data: order history, payment amounts, vendor payouts
• Usage data: pages viewed, search queries, products browsed, device type, browser, IP address
• Vendor data: business name, description, logo, bank account details (processed by Stripe), product listings

2. How We Use Your Information

• Process transactions and deliver products you purchase
• Communicate with you about orders, shipping updates, and account activity
• Provide customer support and respond to inquiries
• Improve our platform through analytics and user behavior insights
• Detect and prevent fraud, abuse, and security incidents

3. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences (language, currency, location), and collect analytics data. Essential cookies are required for the platform to function. Analytics cookies help us understand how users interact with our platform.

For detailed information about the specific cookies we use and how to manage them, please see our Cookie Policy

4. Third-Party Services

We share data with the following third-party services, each operating under their own privacy policies:

• Stripe — processes all payment transactions. Stripe receives your payment card details directly; we never store card numbers on our servers.
• PostHog — provides product analytics. Collects anonymized usage data including page views, clicks, and feature usage.
• Sentry — monitors application errors. Receives technical error reports which may include IP address and browser information.
• Resend — delivers transactional emails (order confirmations, shipping updates). Receives your email address and order details.
• Supabase — provides our database and authentication infrastructure. Stores account data in encrypted form.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years to comply with financial and tax obligations.

If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

6. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable laws:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Opt out of analytics tracking and marketing communications at any time

To exercise any of these rights, contact us at privacy@laliamarket.com. We will respond within 30 days.

7. International Data Transfers

Lalia operates globally and may transfer your data to countries outside your country of residence. We ensure all transfers comply with applicable law, using Standard Contractual Clauses or other approved transfer mechanisms where required. Our infrastructure providers (Supabase, Vercel, Stripe) maintain SOC 2 compliance and employ encryption in transit and at rest.

8. Children's Privacy

Lalia is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. The "last updated" date at the top of this page indicates when the policy was most recently revised.

Contact Us

For privacy-related questions or to exercise your data rights, contact our privacy team at privacy@laliamarket.com