رازداری کی پالیسی

Mukhtasar: Hum sirf wo maloomat lete hain jo account, ads, chat aur safety ke liye zaroori hain. Aap ka phone number public page par nahi chhapta. Staff private chat sirf report ya safety ki wajah likh kar hi parh sakta hai, aur har dafa record banta hai. Aap apna data export ya account delete karne ki request account settings se kar sakte hain.

This policy explains what personal information BUY.net.pk collects, why we collect it, who can see it and what choices you have. It applies to the website, the app version of the site, and our email, WhatsApp and phone support. "We" means the operator of BUY.net.pk. If you do not agree with this policy, please do not use the service.

Information we collect

Information you give us

• Account details: your name, mobile number, email address, password (stored only as a one-way hash), city and area, and optional profile details such as a photo and a short bio.
• Ads and store content: titles, descriptions, prices, photos, the area of the item and the contact options you choose. Location data hidden inside photo files is removed when photos are processed.
• Messages: chats with other users, photos sent in chat, offers, quotation requests and quotations.
• Verification documents: if you apply for ID, business or provider verification, the documents you upload, such as a CNIC image or business registration. See "Verification documents" below.
• Service requests and bookings: the job details, preferred time and the address you give for a visit.
• Payments: what you bought, the amount, the method and, for manual payments, the proof you upload. We do not store card numbers; card payments, where offered, are handled by the payment company.
• Support: messages you send to us and reports you file.

Information collected automatically

• Device and log data: IP address, browser and device type, pages viewed, searches, the time of each request and the page that referred you.
• Security records: login history, active sessions and one-time code requests.
• Activity on ads: views, saves and contact clicks, used for the statistics shown to sellers and to detect abuse.
• Cookies: see our cookie notice.

Why we use it

• To create and secure your account and confirm your phone number or email with a one-time code.
• To publish your ads, store or provider profile and connect you with other users.
• To moderate content, prevent fraud and spam, enforce the marketplace rules and keep the service safe.
• To send service messages: codes, ad status, chat and offer notifications, booking updates and receipts.
• To process payments for promotions and packages and keep the records the law requires.
• To understand how the site is used and improve it.
• To send news and tips, only if you have agreed. You can unsubscribe at any time.
• To answer your questions and resolve disputes and reports.
• To comply with the law and lawful requests.

What other people can see

• Public: your ads, your display name, the area and city of an ad, your verification badges, how long you have been a member, and approved reviews. Store and provider pages show the business details you enter.
• Phone number: never printed on the public ad page. It is shown only to a logged-in user who asks for it, and only if you allowed calls or WhatsApp on that ad.
• Location: ads show the area, with the map point rounded to roughly one kilometre, unless you choose to show the exact location. Your street address is never shown on an ad.
• Service address: shared only with the provider whose quotation you accept.
• Never public: your email address, password, verification documents, payment proofs and private chats.

Chats and moderation

Chats are private between the people in them. To protect users, messages pass through automatic checks for scam phrases, phone numbers and suspicious links, and you can report any conversation.

Our staff do not browse private chats. A member of the moderation team may open a private conversation only when there is a reason, such as a report, a fraud alert or a legal request, and only after recording a written justification. Each access is logged with the staff member, the conversation and the time, and only staff with a specific permission can do it.

Verification documents

Documents sent for verification are stored in private storage that is not reachable from the public internet. They are opened only by authorised staff to decide on your request. We keep the result of the check, the name and the last four digits of the ID number. Your full ID number and documents are not shown to other users. Verification badges say what was checked; see verification explained.

AI processing of ad photos and text

If you use the AI ad creator, the photos and text you submit for that draft are sent to our configured AI provider, at present OpenAI, to suggest a title, category, description and details. We send only the content needed for the draft, not your name, phone number or account details. The provider processes it on its own servers, which may be outside Pakistan, under its own terms. We record that an AI request was made, when, and what it cost, so that we can manage limits and misuse. The AI does not decide whether your ad is approved, and it is not used to verify identity. If you prefer, write the ad yourself; the AI is optional. More detail is on the AI ad creator page.

Who we share information with

• Other users, as described above, so that deals and bookings can happen.
• Service companies that work for us: hosting and file storage, email and WhatsApp message delivery, the AI provider, payment companies, spam protection and, with your consent, analytics and advertising tools. They may use the data only to provide their service to us.
• Authorities: when a law, court order or lawful request requires it, or when it is needed to prevent fraud or serious harm.
• A new owner, if the service is ever transferred, under the same commitments.

We do not sell your personal information. Our sister site Car.net.pk has separate accounts; we do not pass your account, ads or chats to it. Links from BUY.net.pk to Car.net.pk carry only a tag saying the visit came from us.

Cookies, analytics and advertising

We use necessary cookies to keep you logged in and the site secure. Analytics and advertising scripts load only after you accept them in the cookie banner. Details and your choices are in the cookie notice.

How long we keep it

• Account and ads: while your account is open. Expired and removed ads are kept for a period for fraud prevention and disputes.
• One-time codes: about one day.
• Login history and notification records: about six months.
• Staff activity records: about twelve months.
• Orders, invoices and payment proofs: as long as tax and accounting rules require.
• Verification documents: for as long as the badge is active and for a limited period afterwards in case of disputes.
• Records of bans and fraud: kept so that a blocked user cannot simply return.

Your choices and rights

• See and correct: edit your profile, ads and contact options in your account at any time.
• Export: ask for a copy of your data from the privacy section of your account. We prepare a file and notify you when it is ready.
• Delete or deactivate: request deletion or temporary deactivation from the same place. After deletion your ads are removed from the site and your personal details are erased or made anonymous, normally within 30 days. Some records must be kept, as listed above.
• Marketing: unsubscribe using the link in any newsletter or in your notification settings.
• Cookies: change your choice from the cookie notice page.

We may ask you to confirm your identity before acting on a request. If you cannot log in, write to contact@buy.net.pk.

Security

The site uses encrypted connections. Passwords are hashed, sensitive settings are encrypted, verification documents sit in private storage, and staff access is limited by role and logged. You can add two-factor authentication and review your active sessions in your security settings. No system is perfectly secure, so please use a strong, unique password and never share a one-time code.

Children

BUY.net.pk is for adults. You must be 18 or older to open an account. We do not knowingly collect information from children; if you believe a child has registered, tell us and we will remove the account.

Where data is processed

Some of the companies that work for us store or process data on servers outside Pakistan. By using the service you understand that your information may be processed there for the purposes described here.

Changes and contact

We will update this policy when our practices or the law change, and show the date at the top. For significant changes we will tell you on the site or by message. This policy is governed by the laws of Pakistan. Questions and requests: contact@buy.net.pk, 0321 4850003, or the contact form.