Marketplace listings and purchases
Listing photos, seller-approved contact details and aggregate sold counts are public. Marketplace orders contain buyer and seller contact details, written delivery information and order history. These are available only to that buyer, that seller and authorized administrators, not other customers or restaurant staff. Marketplace orders do not use live courier GPS. Optional manual seller Mobile Money transfers occur outside LufShop; LufShop does not process those transfers automatically.
Private payment information
Seller payment numbers, account names and QR images are available only through the purchasing workflow, not on public storefronts. Buyer screenshots, payer names and references are private to the order participants through authenticated server access. Verification-renewal proof is private to the applicant and Super Admin. Files use the dedicated private evidence bucket with no public download links. Unrelated balances or transactions should be hidden before uploading.
A bounded daily cleanup removes payment evidence after at least 90 days following a closed marketplace order or reviewed verification renewal. Active submissions are retained. Cleanup may take additional time as it scans batches or retries failures. Account deletion removes private evidence and redacts personal payment details, while minimal restricted transaction and moderation audit records can remain for operational review. Contact support for earlier removal requests.
Services, jobs and followed stores
Service and job titles, descriptions, portfolio photos, provider names and city or area are public when published. Contacting a provider creates a private conversation; contact records are limited to the participants. Store follow relationships and alert preferences are private to the follower. Stores may display an aggregate follower count, not a public follower list. Account deletion removes your follow relationships and contact records and hides your opportunities.
Optional email and browser alerts
Marketplace email notifications and store alerts are opt-in. When enabled, a transactional email provider processes your verified account email and a generic update; private message contents and payment evidence are not placed in email previews. Chat email reminders are batched and rechecked for unread messages. Browser push needs your permission and can be disabled in the browser or device settings. Notification preferences are available in your account. Delivery job records are cleaned in bounded batches after at least 30 days.
Marketplace reports, chat and retention
Private chats are available to their participants. A participant may submit selected messages as report evidence for authorized moderators; administrators do not have general access to private conversations. Reports and operational audit records are restricted. Before deleting your account, complete or cancel active marketplace orders. Following account deletion, marketplace cleanup removes your public seller profile and personal notification records, hides your listings and anonymizes public review and chat display names. Order records, report evidence and restricted audit records may remain for dispute handling and platform safety. Cleanup is retried if a service is unavailable; contact support about retention or deletion requests.
Optional seller verification
If you apply for identity, business or restaurant verification, LufShop processes the names, contact details, business information and optional supporting images you submit. These application details and documents are not public. Access is limited to you and authorized verification reviewers through protected server workflows. Super Admin controls approval and revocation; delegated reviewers may request changes or decline an application only when authorized. Public badges describe checked identity or business information and do not guarantee products or transactions. Do not upload unnecessary ID numbers or unrelated personal information.
Supporting documents are retained for verification review and follow-up while the account exists; there is currently no automatic post-decision retention deadline. After account deletion, the cleanup process removes supporting files and private application contents, while retaining restricted, minimal moderation and decision history. Contact support to request earlier evidence removal. Authorized project administrators and service providers can process this information to operate the service.
Marketplace insights and sharing
Seller insights summarize actual listings, orders, completed sales, conversation counts and purchase reviews. Platform analytics use aggregate counts, not private conversation contents. These insights do not currently track product views, response rates or financial referral rewards. Product and store links may be shared using your device share sheet or copied to other services; those services apply their own privacy policies. Seller verification is optional and does not enable automatic subscription charges.
Account data
LufShop uses secure sign in, signup, and email verification. Name, email, phone number, role, and account status may be stored so the app can show the correct customer, restaurant, driver, or staff experience.
Orders and payments
Order items, delivery address, restaurant details, delivery status, payment method, and payment status are stored to process food orders. MTN MoMo credentials are kept on secure backend systems, not inside the mobile app.
Location
Customers may save precise delivery coordinates plus a readable address so restaurants and drivers can deliver accurately. Drivers share live foreground location only while actively working on an assigned delivery.
Notifications
LufShop may store device notification tokens to send order, restaurant, driver assignment, and delivery status updates. Notification tokens are removed when an account is deleted.
Support
Support requests may include account email, order reference, restaurant reference, issue type, and the message the customer submits. Support tickets are removed when an account is deleted.
Data sharing
Delivery information is shared only with the restaurant, assigned driver, LufShop staff, and secure service providers required to operate authentication, database, storage, maps, notifications, and payment confirmation.
Account deletion
Signed-in customers can delete their account from Account → Privacy and data → Delete account, or Account → Delete account. LufShop removes saved addresses, cart data, favorites, support tickets, notification tokens, settings, and account access. Completed order records may be retained only as anonymized restaurant records.
Contact
For privacy questions, contact LufShop at Baffouremma58@gmail.com.