Account: your email, name and password (stored hashed). If you sign in with Google, the name, email and photo Google shares with us.
Listings: the text, photos, price, city and the phone number you choose to show. Listings are public.
Messages you send to other users, your favourites, saved searches and cart.
Technical data: IP address, browser and pages visited, kept by our hosting and analytics providers.
IMEI numbers you enter in the IMEI tool, which are sent to the lookup services listed below.
Why
To run your account and listings, deliver messages and alerts, prevent spam and fraud, translate listings, and understand how the site is used so we can improve it.
Who processes it
Supabase (database and sign-in), Cloudflare (hosting, photo storage, automatic translation), Google (Analytics and, if you use it, Google sign-in), FullIMEI and the State Customs Committee of Azerbaijan's public IMEI check (only the IMEI you enter).
We do not sell your personal data.
Cookies
We use cookies to keep you signed in and to remember your cart and language, and Google Analytics cookies to measure visits.
How long we keep it
Account data stays while your account exists. Listings stay until you delete them or they expire. Messages stay until the account is deleted.
Your rights
You can edit or delete your listings in your account at any time. To get a copy of your data, correct it, or delete your account, email info@bazarla.com from the address on your account. If an imported listing shows your post or phone number, you can ask us to remove it.
Connected social accounts
You can connect your own social accounts to Bazarla (Account → Connected accounts) and post your own listings to them. This is optional and off until you connect an account. Bazarla is operated by StandupCRM LLC; the permission screens you see at Facebook, Instagram, Threads, Google, YouTube, X, LinkedIn and TikTok are named “Bazarla”.
What we read: only what is needed to post for you — your account or Page name and id, the list of Facebook Pages you manage and the Instagram business account linked to each (Meta), your profile name and id (Threads, X, LinkedIn, TikTok), your channel name (YouTube), the business locations you manage (Google Business Profile), and the channel you add our bot to (Telegram). We do not read your feed, messages, followers, friends, groups or other people's content.
What we post: only the listing you choose, only to the destinations you tick, only when you press Publish — its text (which you can edit), one of its photos (or its video for YouTube) and the link to the listing on Bazarla. We never post automatically, never post to groups, and never post on behalf of anyone else.
How it is stored: the access tokens the networks give us are stored encrypted (AES-256-GCM) on Cloudflare, in a database separate from the rest of Bazarla, and are used only to publish what you ask. For Bluesky, Mastodon, Discord, Slack and Medium you paste an app password, server address, webhook or token of your own; it is stored the same way. We keep a log of what you posted (destination, time, result and the link the network returned) to show you your history and to enforce our limits (one post per listing per destination every 30 days, 10 posts a day).
How we protect your data: all traffic between your browser, Bazarla and the social networks is encrypted in transit with HTTPS (TLS). Access tokens are encrypted at rest with AES-256-GCM; the encryption key is kept as a server secret, separate from the database, and each token is bound to your own account so it cannot be used for anyone else. Tokens are never sent to your browser or written to logs, and every use of a token is recorded in an access log with its purpose. Each seller's connections are kept in their own separate workspace, and an automated isolation test (one user must not be able to see or use another user's accounts) has to pass before every Bazarla release. Only StandupCRM LLC staff who run the service have access to these systems. Data received from Google and YouTube is refreshed at least every 30 days and deleted when you disconnect, or 7 days after you remove Bazarla's access in your Google account.
Disconnecting and deleting: press Disconnect next to any account in Account → Connected accounts; we revoke the access where the network allows it and delete the stored token at once. You can also remove Bazarla in the network's own settings (for example Facebook → Settings → Business integrations); when Facebook tells us, we delete the connection. Deleting your Bazarla account deletes all connected accounts and their tokens. See the data-deletion page for every way to ask us to delete your data.
We do not sell this data or use it for advertising, and we do not share it with anyone except the network you post to and our hosting provider Cloudflare, Inc.
Google and YouTube: Bazarla's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We use YouTube and Google Business Profile data only to show you which channel or business location you are posting to and to publish what you ask; we never use it for advertising, never sell it, and no person at Bazarla reads it except to fix a problem you report. By connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's Privacy Policy (https://policies.google.com/privacy) also applies. You can remove Bazarla's access at any time at https://myaccount.google.com/permissions.
Connected social accounts
You can connect your own social accounts to Bazarla (Account → Connected accounts) and post your own listings to them. This is optional and off until you connect an account. Bazarla is operated by StandupCRM LLC; the permission screens you see at Facebook, Instagram, Threads, Google, YouTube, X, LinkedIn and TikTok are named “Bazarla”.
What we read: only what is needed to post for you — your account or Page name and id, the list of Facebook Pages you manage and the Instagram business account linked to each (Meta), your profile name and id (Threads, X, LinkedIn, TikTok), your channel name (YouTube), the business locations you manage (Google Business Profile), and the channel you add our bot to (Telegram). We do not read your feed, messages, followers, friends, groups or other people's content.
What we post: only the listing you choose, only to the destinations you tick, only when you press Publish — its text (which you can edit), one of its photos (or its video for YouTube) and the link to the listing on Bazarla. We never post automatically, never post to groups, and never post on behalf of anyone else.
How it is stored: the access tokens the networks give us are stored encrypted (AES-256-GCM) on Cloudflare, in a database separate from the rest of Bazarla, and are used only to publish what you ask. For Bluesky, Mastodon, Discord, Slack and Medium you paste an app password, server address, webhook or token of your own; it is stored the same way. We keep a log of what you posted (destination, time, result and the link the network returned) to show you your history and to enforce our limits (one post per listing per destination every 30 days, 10 posts a day).
How we protect your data: all traffic between your browser, Bazarla and the social networks is encrypted in transit with HTTPS (TLS). Access tokens are encrypted at rest with AES-256-GCM; the encryption key is kept as a server secret, separate from the database, and each token is bound to your own account so it cannot be used for anyone else. Tokens are never sent to your browser or written to logs, and every use of a token is recorded in an access log with its purpose. Each seller's connections are kept in their own separate workspace, and an automated isolation test (one user must not be able to see or use another user's accounts) has to pass before every Bazarla release. Only StandupCRM LLC staff who run the service have access to these systems. Data received from Google and YouTube is refreshed at least every 30 days and deleted when you disconnect, or 7 days after you remove Bazarla's access in your Google account.
Disconnecting and deleting: press Disconnect next to any account in Account → Connected accounts; we revoke the access where the network allows it and delete the stored token at once. You can also remove Bazarla in the network's own settings (for example Facebook → Settings → Business integrations); when Facebook tells us, we delete the connection. Deleting your Bazarla account deletes all connected accounts and their tokens. See the data-deletion page for every way to ask us to delete your data.
We do not sell this data or use it for advertising, and we do not share it with anyone except the network you post to and our hosting provider Cloudflare, Inc.
Google and YouTube: Bazarla's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We use YouTube and Google Business Profile data only to show you which channel or business location you are posting to and to publish what you ask; we never use it for advertising, never sell it, and no person at Bazarla reads it except to fix a problem you report. By connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's Privacy Policy (https://policies.google.com/privacy) also applies. You can remove Bazarla's access at any time at https://myaccount.google.com/permissions.
Verilerin silinmesi →