Legal / Privacy
Privacy Policy
This Policy explains how Megazon handles personal information across its marketplace, mobile application, website, seller dashboard, and support services.
- Version
- 1.0
- Effective
- August 3, 2026
- Language
- English
On this page
- Introduction
- Scope
- Information Users Provide
- Customer Information
- Seller Information
- Location and Address Data
- Orders and Transactions
- Images and User Content
- Device and Technical Data
- Usage and Analytics Data
- How Information Is Collected
- Purposes of Processing
- Notifications and Communications
- Information Shared Between Customers and Sellers
- Service Providers
- Legal, Safety, and Enforcement Sharing
- Business Transfers
- No Sale of Personal Information
- Permissions and Consent
- Data Minimization
- Security
- Retention
- Account and Data Deletion
- Information That May Be Retained After Deletion
- User Rights and Choices
- Guest Users
- Children’s Privacy
- International Processing
- Third-Party Links and Independent Services
- Privacy Incidents
- Changes to This Privacy Policy
- Privacy Contact
01
Introduction
This Privacy Policy explains how Megazon collects, uses, shares, protects, retains, and deletes personal information when customers, guests, sellers, seller staff, or other users access the Megazon application, website, seller dashboard, and support services.
The organization responsible for the handling of personal information is Megazon.
02
Scope
This Policy applies to:
- customer accounts and guest browsing;
- seller accounts, stores, and seller staff;
- product listings, carts, orders, delivery, returns, and refunds;
- customer and seller support;
- the Megazon website, mobile application, and seller dashboard; and
- related security, analytics, moderation, and notification systems.
It does not control an unrelated third party’s independent service or website.
03
Information Users Provide
Depending on the role and feature used, Megazon may collect:
- full name and phone number;
- password, OTP verification, and authentication records;
- preferred language and notification preferences;
- city, delivery address, nearby reference point, and map-selected location;
- customer order notes and support communications;
- seller personal and business information;
- store name, description, logo, location, and contact details;
- product names, descriptions, images, categories, options, prices, discounts, and stock;
- reviews, ratings, reports, complaints, and uploaded support evidence; and
- information provided for identity, store, authorization, or compliance verification.
04
Customer Information
For customers, Megazon may process account details, saved addresses, cart contents, favourites if available, search activity, selected product options, orders, delivery details, cancellations, returns, refunds, reviews, notification settings, and support history.
05
Seller Information
For sellers, Megazon may process account and verification information, store information, store logo and location, product listings and images, inventory, prices, discounts, orders, fulfilment activity, returns, revenue and settlement information, ratings, verification state, moderation decisions, and support history.
Some store and listing information is intentionally public, including the store name, logo, description, general service information, products, prices, availability, ratings, and verification status.
06
Location and Address Data
Megazon may process precise or approximate location when a user chooses the map or location-selection feature. It is used to create or edit an address, determine delivery availability, coordinate fulfilment, and improve delivery accuracy.
Users may deny device location permission and manually enter an address where supported. Location is not collected continuously unless the application clearly introduces, explains, and obtains permission for such a feature.
07
Orders and Transactions
Megazon processes order identifiers, seller and customer details, items, options, quantities, prices, discounts, delivery fees, order totals, address, notes, status, timestamps, cancellation reasons, returns, refunds, and communications required to manage a transaction.
Because Megazon currently uses pay on delivery, it does not need payment-card details for ordinary orders. If electronic payments are introduced, this Policy and the app disclosures must be updated before collection begins.
08
Images and User Content
Megazon processes seller store logos, product photographs, descriptions, and related listing content to operate and moderate the marketplace. It may also process reviews, reports, or support attachments when users choose to submit them.
Do not upload confidential personal information that is unnecessary for a listing, review, or support request.
09
Device and Technical Data
Megazon may automatically collect device type, operating-system and app version, preferred language, IP address, installation or device identifiers, login activity, timestamps, network information, crash data, diagnostics, and security events.
10
Usage and Analytics Data
Megazon may collect searches, pages or screens viewed, interactions with products and stores, cart actions, feature usage, session information, referral information, performance events, and errors. Pseudonymous information that can reasonably be linked back to a user is treated according to this Policy.
11
How Information Is Collected
Information is collected:
- directly from the user;
- automatically from the app, website, device, or server;
- from the other party to an order;
- from delivery or support operations; and
- from authorized providers supporting authentication, notifications, maps, hosting, analytics, security, or other disclosed functions.
12
Purposes of Processing
Megazon uses information to:
- create, verify, authenticate, and secure accounts;
- operate customer and seller features;
- display stores, products, prices, and marketplace content;
- process, confirm, fulfil, track, cancel, return, and support orders;
- save and verify delivery locations;
- review sellers and moderate listings;
- calculate marketplace and seller performance information;
- provide customer and seller support;
- send operational notifications;
- detect fraud, abuse, prohibited products, and security threats;
- debug, analyze, maintain, and improve the service;
- enforce legal agreements and resolve disputes; and
- meet accounting, safety, and legal obligations.
Megazon will not use personal information for a materially incompatible purpose without appropriate notice or permission.
13
Notifications and Communications
With applicable permission, Megazon may send notifications concerning account security, OTP codes, verification, orders, delivery, seller activation, product review, returns, disputes, support, and important service changes.
Optional promotional notifications may be disabled through app or device settings. Some essential operational messages cannot be disabled while the relevant account or order remains active.
14
Information Shared Between Customers and Sellers
When necessary to fulfil an order, the relevant seller may receive the customer’s name, order details, delivery address, nearby reference point, delivery note, and a suitable contact method.
Customers may see the seller’s public store details, products, rating, verification status, fulfilment information, and support details. Neither party may use transaction information for unrelated marketing, harassment, or unauthorized disclosure.
15
Service Providers
Megazon may share only the information reasonably required with providers supporting:
- cloud hosting and databases;
- OTP and communications;
- push notifications;
- maps and location selection;
- analytics and crash reporting;
- application security and fraud prevention;
- customer support;
- delivery coordination; and
- payment processing if electronic payments are later introduced.
Providers must handle the information for authorized purposes and provide appropriate protection. Before publication, Megazon must maintain an internal list of every production SDK and provider and make disclosures that accurately reflect their practices.
16
Legal, Safety, and Enforcement Sharing
Megazon may disclose information when reasonably necessary to comply with applicable law or valid legal process; investigate fraud, security incidents, prohibited goods, or abuse; protect users or the public; enforce agreements; resolve disputes; or protect the rights and safety of Megazon and others.
17
Business Transfers
If Megazon undergoes a merger, acquisition, financing, restructuring, or sale of assets, relevant information may be transferred as part of that transaction. Users will receive notice where required if responsibility for their information or its use materially changes.
18
No Sale of Personal Information
Megazon does not sell personal information for money. Sellers and service providers are not authorized to use information received through Megazon for unrelated advertising, independent profiling, or unrelated marketing.
If Megazon later introduces advertising technologies that legally qualify as selling or sharing personal information, this Policy and the required user controls must be updated before that processing begins.
19
Permissions and Consent
Megazon requests device access only when relevant to a feature. Permission prompts should clearly explain their purpose. Examples may include:
- Location: selecting or confirming a delivery or store location;
- Camera or photographs: uploading a store logo, product image, or support evidence; and
- Notifications: receiving order, account, security, and seller updates.
A user may refuse or later withdraw an optional permission through device settings. Refusal may disable the related feature but should not block unrelated functionality.
20
Data Minimization
Megazon aims to collect only information reasonably necessary for the requested feature, marketplace operation, safety, support, and legal obligations. Where practical, users should be allowed to select a specific photo or manually enter an address instead of granting broader device access.
21
Security
Megazon uses reasonable technical and organizational safeguards designed to prevent unauthorized access, misuse, loss, alteration, or disclosure. Measures may include encrypted transmission, password protection, access controls, least-privilege administration, monitoring, backups, and incident response.
No service can guarantee absolute security. Users should protect passwords and OTP codes and promptly report suspected unauthorized access.
22
Retention
Megazon retains information only for as long as reasonably necessary for the purposes described in this Policy and applicable legal obligations.
- Information
- General retention approach
- Active account and profile
- While the account is active and for a limited period needed to complete deletion or resolve open matters
- Saved addresses
- Until deleted by the user, the account is deleted, or retention is otherwise required
- Cart and temporary session data
- Until cleared, expired, no longer operationally needed, or the account is deleted
- Orders, returns, refunds, and seller settlements
- For the period needed for fulfilment, accounting, disputes, fraud prevention, and applicable legal requirements
- Seller verification and moderation
- While the seller is active and afterward where needed for safety, repeat-abuse prevention, disputes, or law
- Support records
- For a reasonable period needed to resolve the request, improve support, and establish relevant records
- Security logs and diagnostics
- For a limited operational period unless needed for an active investigation or legal obligation
- Marketing preferences
- Until consent is withdrawn or the record is no longer required to respect the user’s choice
When retention is no longer necessary, information is deleted, anonymized, or securely isolated until deletion from backups according to the applicable backup cycle. Exact internal periods must be documented by Megazon before launch.
23
Account and Data Deletion
Customers and sellers may request permanent account deletion through:
- In the app: Profile > Account Settings > Delete Account; and
- On the public website: https://mega-zon.com/delete-account.
The web page must permit a request without requiring the user to reinstall the app. Megazon may confirm the request with the account phone number, password, OTP, or another reasonable identity check.
Deletion means removing the account and associated personal information, not merely disabling login. Megazon will tell the user if processing requires additional time.
24
Information That May Be Retained After Deletion
Limited information may remain where reasonably required for completed orders, seller settlements, accounting or tax records, fraud and abuse prevention, legal claims, disputes, safety, enforcement, or another applicable legal obligation.
Retained information will be restricted to the relevant purpose and will not be used for unrelated marketing. Public seller listings should be removed or unpublished when the seller account is deleted, subject to necessary transaction and legal records.
25
User Rights and Choices
Subject to applicable law and reasonable identity verification, users may:
- access or request a copy of relevant account information;
- correct inaccurate profile information;
- edit or delete saved addresses;
- change language and notification preferences;
- withdraw optional permissions or consent;
- object to or ask questions about a processing activity;
- request account and associated-data deletion; and
- submit a privacy complaint.
Requests can be submitted through in-app support or [email protected]. Megazon will respond within a reasonable period and explain any lawful limitation.
26
Guest Users
Guests may generate limited technical, security, usage, search, and cart information. If a guest places an order, saves information, or contacts support, Megazon will collect the information necessary to perform that action.
27
Children’s Privacy
Megazon is not directed to children who cannot legally enter marketplace transactions. Megazon does not knowingly collect children’s personal information in violation of applicable law. A parent or guardian who believes a child submitted information may contact support to request review and deletion.
28
International Processing
Some infrastructure or service providers may process information outside the user’s region. Megazon will use reasonable contractual, organizational, and technical safeguards intended to protect transferred information according to this Policy and applicable requirements.
29
Third-Party Links and Independent Services
The app may open a map, messaging application, website, or other third-party service. Information submitted directly to that independent service is governed by its own terms and privacy policy. Users should review those policies before providing information.
30
Privacy Incidents
If Megazon discovers a security incident affecting personal information, it will investigate, contain, document, and remediate the incident and notify affected users or authorities when legally required or reasonably appropriate.
31
Changes to This Privacy Policy
Megazon may update this Policy for legal, security, operational, or feature changes. The revised Policy will display a new effective date. Material changes may be communicated through the application or another suitable channel, and consent will be requested where required.
32
Privacy Contact
For access, correction, permission, complaint, or deletion requests:
- Service operator
- Megazon
- Privacy contact
- [email protected]
- Service region
- Kurdistan Region, Iraq
- Contact method
- Email: [email protected]
- Account-deletion page
- https://mega-zon.com/delete-account
