Privacy Policy

2. Who This Policy Applies To

This Privacy Policy applies to:

• Anyone who creates a Revyn account or uses the Platform as a buyer or seller.
• Anyone who visits the Revyn website or downloads the Revyn app, even without registering.
• Anyone who contacts our support team or interacts with us through email, in-app chat, or social channels.

Revyn is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has shared personal data with us, please contact us at privacy@revyn.ae and we will take steps to delete it.

3. Information We Collect

We only collect the data we need to operate the Platform, keep it safe, and improve your experience. The categories below describe the types of information we may collect from you.

Account information

• Identity details — your name, username, profile photo, and date of birth where required.
• Contact details — your email address, mobile number, and country of residence.
• Login credentials — your password (stored in encrypted form) and authentication tokens.

Listing and transaction information

• Listings you create — item details, photos, descriptions, categories, condition, and pricing.
• Purchase and sale history — items bought and sold, order status, fees paid, refunds, and disputes.
• Offers and negotiation — offer amounts, counter-offers, and acceptance status exchanged through the Platform.
• Reviews and ratings — feedback you give or receive after a transaction.

Payment information

• Payment processing — all card and payment data is collected and processed directly by our payment provider, Stripe. Revyn does not store your full card number, CVV, or bank details on our own servers.
• Seller payout details — if you sell on Revyn, you provide bank account information through Stripe Connect so that we can transfer your earnings.
• Verification information — for sellers, Stripe may collect identity and tax information required under UAE financial regulations and global anti-money-laundering rules.

Delivery information

• Pickup and delivery addresses — the addresses you provide for collection and delivery of items, shared with our logistics partner to fulfil your orders.
• Tracking and status updates — delivery tracking information, attempt history, and proof-of-delivery records returned to us by the courier.

Communications and support

• In-app messages — messages, photos, and offers exchanged with other Users through our messaging feature.
• Support interactions — questions, complaints, and reports you send to our support team, and our responses, including any attachments.
• Reports and disputes — information you submit when reporting a User, listing, or transaction, and any details you provide during a dispute.

Device and technical information

• Device data — device identifiers, model, operating system version, app version, language and time zone settings, and crash logs.
• Usage data — actions you take on the Platform, screens you view, search queries, filters used, and interaction timestamps.
• Network data — IP address, approximate location derived from IP, and connection type.

Optional information

• Precise location — if you grant permission, we may use your device’s location to suggest nearby items or pickup options. You can turn this off at any time in your device settings.
• Push notifications — if you allow notifications, we use push tokens to send you updates about messages, offers, orders, and promotions.
• Marketing preferences — your choices about receiving marketing emails or updates from Revyn.

4. How We Collect Your Information

We collect personal data in three main ways:

• Directly from you — when you create an account, list an item, place an order, message another User, or contact our team.
• Automatically through the Platform — through cookies, mobile SDKs, server logs, and analytics tools when you use Revyn.
• From trusted third parties — such as Stripe (for payment and identity verification), our logistics partner (for delivery status), and analytics or fraud-prevention partners.

5. How We Use Your Information

We use your personal data only for clear, defined purposes:

To operate the Platform

• Creating and managing your Revyn account.
• Publishing your listings and showing them to potential buyers.
• Processing orders, payments, refunds, and seller payouts.
• Coordinating pickup and delivery with our logistics partner.
• Enabling messaging, offers, and reviews between Users.

To keep Revyn safe and trustworthy

• Verifying User identity and seller eligibility.
• Preventing fraud, scams, money laundering, and other prohibited activity.
• Reviewing reports of counterfeit items, harmful content, or User misconduct.
• Enforcing our Terms & Conditions and Seller Guidelines.

To improve and personalise your experience

• Recommending items, sellers, or categories you may like.
• Analysing how features are used so we can improve them.
• Diagnosing crashes, performance issues, and bugs.

To communicate with you

• Sending transactional updates about your orders, payments, deliveries, and account.
• Responding to your questions, reports, and support requests.
• Sending marketing messages where you have agreed, with the option to unsubscribe at any time.

To meet our legal obligations

• Complying with UAE law, including tax, anti-money-laundering, and consumer-protection rules.
• Responding to lawful requests from courts, regulators, or law enforcement authorities.
• Keeping records required by applicable laws.

6. Our Legal Basis for Processing

Under the UAE PDPL, we only process your personal data where we have a valid legal basis. Depending on the activity, our basis may be:

• Performance of a contract — to deliver the services you have signed up for (for example, processing your order or paying out your sales).
• Your consent — for activities such as marketing emails, optional location data, or features that explicitly ask for your permission. You can withdraw consent at any time.
• Legitimate interests — to keep the Platform secure, prevent fraud, protect Users, and improve our services, in a way that is balanced against your rights.
• Compliance with legal obligations — where UAE law requires us to collect or retain certain information.

7. Who We Share Your Information With

We do not sell your personal data. We share it only with parties that help us operate Revyn or where we are legally required to do so.

Other Users

When you list an item, certain information — such as your username, profile photo, item photos, descriptions, ratings, and approximate location where relevant — is visible to other Users. Buyers and sellers also see each other’s first name and delivery details to the extent needed to complete a transaction.

Service providers we work with

• Stripe — for payment processing, payout management, and identity / tax verification. Stripe processes data under its own privacy policy.
• Our logistics partner — for pickup, delivery, and tracking of items. They receive only the information needed to fulfil the delivery, including names, contact details, and addresses.
• Cloud and infrastructure providers — who host our Platform, store data securely, and deliver our app and website.
• Analytics and crash-reporting tools — to help us understand how the Platform is used and to fix bugs.
• Customer support and communications tools — to manage tickets, emails, and notifications sent to you.
• Fraud-prevention and verification partners — to help us detect suspicious activity and protect Users.

All service providers are contractually required to handle your data only on our instructions and to keep it secure.

Authorities and legal requests

We may share information with UAE authorities, regulators, courts, or law-enforcement agencies where this is required by law, where we have a legal obligation, or where it is necessary to protect Revyn, our Users, or the public.

Business changes

If Revyn is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred to the new entity. We will notify you and ensure your rights continue to be protected.

8. International Data Transfers

Some of our service providers (for example, payment processors, analytics tools, and cloud hosting providers) operate outside the United Arab Emirates. When we transfer your personal data outside the UAE, we do so only in line with the UAE PDPL — for example, where the receiving country offers an adequate level of protection, or where we have suitable contractual safeguards in place to ensure your data remains protected.

9. How Long We Keep Your Information

We keep your personal data only for as long as we need it for the purposes set out in this Privacy Policy, or for as long as we are required to keep it under UAE law.

Typical retention periods include:

• Active accounts — we keep your data for as long as your account is active and you continue to use Revyn.
• Transaction records — we keep order, payment, and tax-related records for the period required by UAE financial and tax regulations.
• Closed accounts — after your account is deleted, we keep limited records (such as transaction history and dispute records) for compliance and fraud-prevention purposes, and then delete or anonymise the data.
• Communications and reports — support tickets, reports, and dispute records are retained for a reasonable period so we can respond to follow-up issues and protect Users.

10. Your Rights

Under the UAE PDPL, you have a number of rights over your personal data. Subject to legal exceptions, you have the right to:

• Access your data — request a copy of the personal information we hold about you.
• Correct your data — ask us to fix information that is inaccurate or out of date.
• Delete your data — ask us to delete your account and associated personal data, subject to records we are required to keep.
• Restrict or object to processing — ask us to limit how we use your data, or object to certain types of processing.
• Withdraw consent — where we rely on consent (for example, marketing or optional location data), you can withdraw it at any time.
• Data portability — request your data in a structured, commonly used format where this is technically feasible.
• Lodge a complaint — with the UAE Data Office if you believe we have not handled your data correctly.

You can exercise most of these rights directly in the Revyn app, including updating your profile, managing notifications, and deleting your account. For anything else, you can email us at privacy@revyn.ae and we will respond within the timeframes required by law.

11. How We Protect Your Information

We take the security of your data seriously and use a combination of technical, organisational, and operational measures to protect it. These include:

• Encryption of data in transit using HTTPS / TLS.
• Encryption of sensitive data at rest, including passwords.
• Strict access controls so that only authorised team members can access User data.
• Use of trusted, certified providers (such as Stripe) for payment processing.
• Regular monitoring for suspicious activity, fraud, and security threats.

No system can ever be completely secure. If we become aware of a security incident affecting your personal data, we will notify you and the relevant authorities as required by UAE law.

12. Cookies and Similar Technologies

When you use the Revyn website or app, we use cookies, mobile SDKs, and similar technologies to keep you logged in, remember your preferences, measure performance, prevent fraud, and improve the Platform.

These technologies generally fall into the following categories:

• Strictly necessary — needed for the Platform to function (for example, login and security).
• Performance and analytics — help us understand how Users interact with Revyn.
• Functional — remember your preferences, such as language and recently viewed items.
• Marketing — help us measure the performance of our campaigns and reach the right audiences.

You can control cookies through your browser settings and manage app permissions through your device settings. Disabling certain cookies may affect how the Platform works.

13. Third-Party Links and Services

The Platform may contain links to third-party websites, apps, or services (for example, social media or payment partners). This Privacy Policy does not apply to those third parties. We encourage you to read their own privacy policies before sharing personal information with them.

14. Children’s Privacy

Revyn is not intended for use by anyone under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected information from a minor without appropriate consent, we will delete that information without delay. If you believe a minor has provided us with personal data, please contact us at privacy@revyn.ae.

15. Changes to This Policy

We may update this Privacy Policy from time to time as Revyn grows, our services evolve, or laws change. When we do, we will update the “Effective date” at the top of this page and, where the changes are material, notify you through the Platform, by email, or by an in-app notification. We encourage you to review this Privacy Policy regularly so that you are aware of how we protect your information.

16. Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or believe your personal data has been handled incorrectly, please reach out to us:

• Email — privacy@revyn.ae
• General support — support@revyn.ae
• Registered office — Revyn FZ-LLC, Dubai, United Arab Emirates

We aim to respond to all privacy-related queries promptly and within the timeframes set by UAE law.