Privacy Policy

This policy applies to Paylo Shop, the customer shopping application; Paylo Seller, the merchant application; Paylo-hosted storefronts; and Paylo's public website and support services. It covers information Paylo processes to provide, secure, support, and improve those services.

A participating merchant is responsible for the products it sells and may independently control customer information it receives to accept, fulfil, deliver, cancel, return, or support an order. Merchants must provide any additional notice required for their own processing. This policy describes Paylo's practices and does not replace a merchant's privacy obligations.

• Account and authentication information supplied when an account is created or updated, including name, email address, phone number, verification status, account role, one-time-code and session records, and security events. Paylo does not ask users to send passwords or verification codes to support.
• Customer profile and preference information entered in Paylo Shop, which may include a profile photo, birthday, gender, clothing or shoe sizes, language, followed stores, saved products, private collection names, notification choices, and marketing preferences.
• Customer activity and shopping information generated through use of the service, including searches submitted to Paylo, product and store interactions, baskets, delivery notes, coupons, order contents, purchase history, fulfilment and payment status, and private order feedback when that feature is available.
• Delivery and contact information supplied for an order, including recipient name, phone number, city, address, apartment or access details, delivery area, and other instructions the customer chooses to provide.
• Store information and seller content, including store name, description, contact details, address, product listings, prices, inventory, variants, images, coupons, and shipping settings.
• Merchant business, operational, and financial information supplied through Paylo Seller, including business contact details, merchant-review records, catalogues, orders, fulfilment, commissions, settlements, payout status, and information needed by an enabled payment provider.
• Device and application information collected automatically when the services communicate with Paylo, including app version, operating system, language, installation identifiers, push-notification tokens, network and security events, crash reports, diagnostics, and performance information. Paylo does not collect the device's advertising identifier for cross-app advertising tracking.
• Support, safety, privacy, and dispute communications, together with the information, attachments, order numbers, storefront links, and other evidence a person chooses to provide.
• Website analytics and consent preferences where permitted by the visitor's cookie choices.

• Create and authenticate customer and merchant accounts, verify phone numbers, maintain sessions, review merchant applications, and protect accounts from unauthorized access.
• Operate Paylo Shop, stores, catalogues, search, followed stores, saved products, private collections, baskets, orders, fulfilment, delivery, notifications, settlements, and payouts.
• Share order information with the merchant and relevant service providers so the order can be accepted, fulfilled, delivered, supported, cancelled, returned, or refunded.
• Remember preferences and provide relevant store, product, availability, price, and order updates requested by the user.
• Provide customer and merchant support, respond to privacy requests, investigate errors and disputes, prevent fraud and abuse, enforce platform rules, and improve security and reliability.
• Meet legal, accounting, tax, dispute-resolution, and regulatory obligations.

Paylo Shop may request camera or photo-library access only when a customer chooses to capture or select a profile image. Paylo Seller may request camera or photo-library access to create store and product images and to scan supported order, product, barcode, or QR codes. The apps do not require microphone access for these features.

Notifications are optional and may provide order, account, store, saved-item, or consented marketing updates. Permission can be declined or changed in device settings, and available notification and marketing preferences can be changed in the app. If device authentication such as Face ID is enabled, matching is performed by the operating system; Paylo does not receive the person's face, fingerprint, or biometric template.

Paylo may use service providers for cloud hosting, storage, content delivery, SMS verification, app delivery and updates, push notifications, diagnostics, customer support, communications, security, and—where enabled—payment processing. Providers may process only the information needed to perform their contracted service and must provide the same or equivalent protection described in this policy and required by applicable law.

Order and delivery information is disclosed to the participating merchant and, where needed, its delivery, support, or payment providers. Paylo may also disclose information when required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a corporate transaction subject to appropriate safeguards.

Paylo does not sell personal information. Paylo Shop and Paylo Seller are not configured to track people across apps and websites owned by other companies for advertising, and Paylo does not use advertising networks in these apps. If these practices change, this policy and the relevant consent and App Store disclosures will be updated before the new processing begins.

Paylo retains account and service information while an account is active and thereafter only for as long as reasonably needed for the purposes described above. Retention depends on the type of record, account status, merchant and customer obligations, security needs, dispute periods, and legal, accounting, tax, or regulatory requirements. Diagnostic and support information is retained only as long as needed to investigate, secure, and improve the service. Backup copies are removed through normal backup rotation.

A Paylo Shop customer can initiate permanent deletion in the app from Account > Account & Privacy > Delete Account and verify the request using the account phone number. A seller can initiate deletion in Paylo Seller from Account > Account Deletion. A verified deletion request revokes active sessions and removes or anonymizes the relevant account, profile, preferences, saved content, and other personal information that Paylo is not required to retain.

Limited order, payment, payout, security, fraud-prevention, tax, or dispute records may be retained when required by law or reasonably necessary to establish, exercise, or defend legal claims. Retained information is restricted, minimized, and de-identified where appropriate and is deleted or anonymized when the applicable need ends.

Depending on applicable law, a person may request access to, correction of, deletion of, restriction of, or a copy of personal information, and may object to or withdraw consent for certain processing. App permissions can be changed in device settings; available profile, language, notification, and marketing choices can be changed inside the relevant app. Withdrawing consent does not affect processing already performed lawfully and may prevent an optional feature from operating when that information is necessary for the feature.

Requests may be submitted through the in-app deletion flow or to support@paylo.co.il. Paylo may need to verify identity and account ownership before fulfilling a request. A user may also contact the participating merchant about information the merchant controls for its own order, delivery, return, or customer-service obligations.

Paylo uses administrative, technical, and organisational safeguards designed to protect information, including access controls, protected authentication tokens, transport security, monitoring, and data minimisation. No storage or transmission system can guarantee absolute security.

Paylo Seller is a business tool for authorised merchant representatives and is not directed to children. Paylo Shop is a general-audience shopping service and is not designed for children who are below the minimum age at which they may provide valid consent under applicable law without a parent or guardian. If Paylo learns that such information was collected without valid authorisation, Paylo will take appropriate steps to delete it.

Service providers may process information outside a person's country. Where required, Paylo uses contractual, technical, and legal safeguards for international transfers.

Questions and requests may be sent to support@paylo.co.il. Please do not email passwords, one-time codes, full payment-card details, or other authentication secrets.

Paylo may update this policy as the service or legal requirements change. The effective date above identifies the current version. Material changes will be communicated in the app, on the website, or through another appropriate channel where required.