Privacy Policy
1. Introduction
This Privacy Policy describes how PartStop (“we”, “our”, “us”) collects, uses, stores, and shares information when you use the PartStop mobile application and related services (the “Service”). By using the Service you agree to the practices described below.
PartStop is operated by PartStop FZ-LLC, registered in the United Arab Emirates. The Service is provided to users in the UAE and the wider GCC.
2. Information we collect
Information you provide
- Account information: full name, email address, phone number, account password (hashed).
- Profile information: profile photo, default address, default vehicle details (make, model, VIN if you choose to enter it).
- Vendor information: business name, trade licence, bank/Stripe Connect details (held by Stripe, not by us).
- Order and request data: items in your cart, parts requested, messages exchanged with vendors.
- Support correspondence: any message you send via email or in-app support.
Information collected automatically
- Device information: device model, operating system version, locale, app version, time zone.
- Approximate IP address and network metadata.
- App diagnostics: anonymised crash reports and performance signals.
- Authentication tokens: stored locally on your device to keep you signed in.
Information from third parties
- If you sign in with Google or Apple, we receive the email, name, and profile photo that you authorise the provider to share.
- If you make a payment, Stripe shares the transaction status with us (never the card number).
3. How we use your information
- To create and maintain your account.
- To process orders, payments, refunds, and delivery routing.
- To allow vendors to respond to your parts requests.
- To send transactional emails (order confirmations, password resets, security alerts).
- To send push notifications you have opted into (delivery updates, vendor replies).
- To detect, prevent and respond to fraud, abuse, or violations of our Terms.
- To improve product quality through anonymised usage analytics.
- To comply with legal obligations (e.g. UAE consumer-protection law, tax reporting).
4. Sharing with third parties
We share only the minimum information necessary to deliver the Service:
- Vendors: when you place an order or send a request, the relevant vendor receives your name, contact phone, delivery address, and the requested part. Vendors are contractually required to use this only to fulfil your order.
- Delivery partners: independent delivery providers receive your name, contact phone, and delivery address while a delivery is active.
- Stripe (payment processor): handles all card data, Apple Pay, Google Pay, and Stripe Connect payouts to vendors. See Stripe’s privacy policy.
- Firebase / Google Cloud: authentication, push messaging (FCM), and infrastructure. See Google’s privacy policy.
- Resend (transactional email).
- Apple (Sign-In with Apple, App Store services) where you choose to use them.
- Authorities: where required by valid legal request.
We do not sell your personal data, and we do not share it for third-party advertising.
5. Payments & financial data
All card payments are processed by Stripe. We never see or store your full card number, CVC, or full account number. PartStop only receives a tokenised payment reference, the amount, and the transaction status. Refunds and disputes are processed back through Stripe to the original payment method.
6. Location data
The app may request your device location to suggest nearby vendors and to populate delivery addresses. Location is used only while the app is in use; we do not track location in the background. You can disable location permission for the app at any time in your device settings without losing other functionality.
7. Photos, videos & uploads
If you attach a photo or short video to a request (e.g. of the part you need), the file is uploaded to our servers and shared with the vendor you choose. You can delete uploaded media from your profile at any time. Orphaned media (uploads that are no longer linked to any product, order, or request) are automatically quarantined and deleted after 30 days.
8. Push notifications
Push notifications are delivered through Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). You can disable them at any time in the app or in your device settings. We use them only for order updates, vendor replies, and security alerts — never for marketing without your explicit opt-in.
9. Data retention & deletion
Account and order data are retained for as long as your account is active, and for up to 7 years thereafter to comply with UAE tax and consumer-protection record-keeping requirements. Soft-deleted records are removed from active databases immediately and retained only in secure encrypted backups for the retention window before final deletion.
You may request deletion of your account at any time by emailing privacy@partstop.ae. Where retention is legally required, we will anonymise the record after the active deletion.
10. Security
We use industry-standard security controls: TLS in transit, encryption at rest, bcrypt password hashing, scoped API tokens, daily encrypted backups, soft-delete with audit logging, and a least-privilege admin model. No system is perfectly secure; please notify us immediately at security@partstop.ae if you suspect a security issue.
11. Children
The Service is not directed to children under 13, and we do not knowingly collect data from anyone under that age. If you believe a child has provided personal information, please contact us so we can delete it.
12. Your rights
Subject to applicable law (including the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention).
- Withdraw consent for optional processing (e.g. marketing) without affecting service functionality.
- Object to processing or request restriction in specific circumstances.
- Receive a portable copy of your data in a structured machine-readable format.
To exercise any of these rights, email privacy@partstop.ae. We respond within 30 days.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest revision. Substantive changes will be communicated through an in-app notice or email where required by law.
14. Contact
For any privacy-related question or request, contact:
United Arab Emirates
Email: privacy@partstop.ae
General support: support@partstop.ae