Privacy

What we store

• Account: name, email, optional phone, hashed password.
• Shipping addresses: only if you choose to save them; an address snapshot travels with each order.
• Seller KYC: legal name, ID number, and verification files — never shown on storefronts or public APIs.
• Guest checkout: your contact email and a local access token on your device; the server stores the email so code + email tracking still works.

What we never touch

• Payment card data never touches Rimba servers — authorization happens at the gateway (PCI SAQ-A model).
• No third-party ad trackers, no cross-site profiling.

Retention & your rights

Orders are kept as long as bookkeeping requires; KYC files are kept while the seller account is active plus 90 days. Request a copy, correction, or deletion at halo@rimba.id — we respond within 14 days. Deleting your account does not erase transaction records required by law, but your identity is separated from them.