Privacy and data handling

What this feature does

Mallello collects only the account, transaction, fulfillment, communication, and attribution data needed to operate the marketplace and applies access, retention, and deletion controls.

This guide describes the behavior implemented by Mallello, the people allowed to use it, and the operational checks that keep it dependable.

Detailed workflow

1. Disclose data categories and purposes before or when collected.
2. Limit access by role and ownership.
3. Use processors such as Supabase, Stripe, Resend, hosting, and mailbox providers under appropriate terms.
4. Honor supported access, correction, deletion, and marketing opt-out requests.
5. Retain financial, dispute, audit, and legal records only as required.

Rules and permissions

• Deletion can be restricted by legal retention duties and active transactions.
• Analytics and campaign attribution avoid collecting unnecessary full URLs or sensitive content.
• Email suppression records may be retained to ensure no further marketing is sent.
• Cross-border processing and subprocessors require accurate policy disclosure.

Failure handling and edge cases

• Deleting an auth identity before application records are handled can orphan data.
• Exports must authenticate the requester and avoid including other users.
• A breach requires the documented incident and notification process.