Privacy

Dolobo is the controller for account, platform-administration, security, and support information processed through the service. The independent seller named on a storefront is the merchant and is separately responsible for customer information it receives to accept, fulfil, deliver, return, or support an order. Privacy questions and rights requests can be sent to the support address below.

We collect account email addresses, seller store and contact details, product information, customer names, phone numbers, delivery addresses, order details, and payment-proof files customers choose to upload. We also process essential session identifiers and limited security and diagnostic information, such as request timestamps, device or browser details, and error logs.

We process information as necessary to provide the service requested by a seller or customer, meet legal obligations, and pursue legitimate interests in securing the platform, preventing fraud, supporting users, and improving reliability. We rely on consent where the law requires it. We do not sell personal information. We use limited order details, shared only as one-way hashed identifiers, to measure the results of Dolobo's own advertising, and never for unrelated advertising or profiling.

An email address is required for account access and order tracking. The name, primary phone number, delivery address, delivery option, and payment method requested at checkout are required to place and fulfil an order. Secondary contact, recipient, delivery-note, and payment-proof fields are optional unless the selected seller or payment method reasonably requires them. Without required information, we cannot provide the relevant account or order service.

Order information is shared with the seller responsible for that order. Service providers process limited information on our behalf, including Supabase for authentication, database, and storage; Vercel for hosting; Resend for transactional email; FAL for seller-requested image generation; OpenRouter for seller-requested prompt refinement and dashboard chat; Sentry for application error and performance diagnostics; and Meta, which receives hashed customer identifiers and order values to measure Dolobo's own advertising campaigns. Sellers remain responsible for their own use of customer information after receiving an order.

When a seller requests an AI image, product titles, categories, descriptions, selected image mode, and generated prompts may be sent to FAL for image generation and to OpenRouter for optional prompt refinement. When a seller uses dashboard chat, their message, recent chat history, store settings, and a bounded summary of recent product information are sent to OpenRouter to produce the reply. Customer order information and payment proofs are not included in these AI requests. Sellers should not include personal or confidential information in product descriptions, AI prompts, or chat messages.

Some providers process information outside Mauritius. We assess those transfers, limit them to information needed for the service, and use contractual, security, and organisational safeguards where appropriate. A transfer may also be necessary to perform a requested service or transaction. Information about the safeguards relevant to a request is available from the support address below.

Account and store information is kept while the account is active and for a limited period after closure to complete deletion, resolve disputes, and protect the service. Order and transaction records may be retained for up to seven years where needed for legal, accounting, fraud-prevention, or dispute purposes. Payment proofs are kept only while reasonably needed to verify or dispute payment. Security logs and support records are periodically reviewed and deleted or de-identified when no longer needed. Backups expire on their normal rotation.

We use access controls, encrypted transport, private storage for payment proofs, and activity logging. No online service can promise absolute security. Customers should never upload passwords, PINs, one-time codes, or unrelated financial information.

Subject to applicable limits, you may request access to, correction of, restriction of, portability of, objection to processing of, or deletion of personal information. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may ask for information needed to verify your identity. You may also lodge a complaint with the Mauritius Data Protection Commissioner.

Dolobo uses essential browser storage and session cookies for sign-in, security, shopping-bag continuity, and core preferences. We do not currently use third-party advertising cookies.

When Dolobo runs its own advertising, we send a limited record of a completed order — such as a one-way hashed email address or phone number and the order value — from our servers to the advertising platform to measure whether a campaign led to a sale. This uses no browser cookies and no tracking scripts, is used only to measure Dolobo's own campaigns, and is never used to advertise on a seller's behalf or shared for unrelated advertising. Where the law requires consent for this measurement, we rely on it.

Dolobo is not intended for children under 16 to operate seller accounts or place orders without a parent or legal guardian's involvement.

We may update this notice when the service or applicable requirements change. Material changes will be presented through the service or account email where practical. The effective date above identifies the current version.