1. Who this policy covers
This policy covers shoppers, sellers, business representatives and visitors using Teyza. In this policy, “Teyza”, “we” and “our” refer to the service operating these apps and website. Contact us at support@teyza.co.za about how your information is handled.
2. Information we collect and why
- Account and sign-in information: name, email address, phone number, account identifiers and authentication/session information, used to create accounts, authenticate access and provide support. Google or Apple sign-in supplies the account information you authorise, such as an identifier, name, email or profile image. Apple may provide a private relay email address. We do not receive your Google or Apple password.
- Seller and business information: shop and owner names, shop category, address, company registration details where applicable, opening hours, offered services, selected products, prices and stock, used to register, operate and publish the shop.
- Private verification evidence: an ID/passport photograph or company registration document, information provided with it, an owner selfie, phone-verification status, consent records and review outcomes. We use this to assess the seller's identity/business, review eligibility and reduce impersonation and fraud. Verification requirements depend on whether you register as an individual or company.
- Shop and product photos: images you choose to capture or upload to identify your shop and display your range to shoppers. These serve a different purpose from private verification evidence.
- Location and addresses: the location you permit the app to access, an area you enter, shop addresses and delivery addresses you submit, used to find nearby shops, show approximate distances, provide directions and arrange a requested delivery. Location access is used while using the relevant feature; it is not continuous background location tracking.
- Marketplace activity: order requests, basket/product selections, collection or delivery choices, order history, favourites where saved, shop messages and support requests, used to provide the requested service and resolve issues. Sellers receive the order and delivery/contact details necessary to handle your request.
- Notifications and technical information: notification preferences, device push tokens, app/device/platform information, timestamps, IP addresses and operational/security logs used for notifications, reliability, authentication, abuse prevention and troubleshooting. Finance or credit enquiry details are collected if you submit an enquiry; an enquiry does not itself create a loan.
3. Camera, photos and phone verification
Camera and photo access allow you to capture or choose documents, selfies, shop-front photos and product images. We access images you select or capture for these features; granting permission does not give us a reason to browse unrelated photos. You can review or retake a captured image before submission. You can manage camera, photo and location permissions in your device settings. Declining a permission can limit the feature that needs it.
Seller phone verification uses Firebase Authentication and SMS. Google processes the phone number and related technical signals to deliver codes, authenticate the request and prevent abuse. Android may complete verification automatically; Teyza does not request access to your general SMS inbox, call history or contacts. See Google's Privacy Policy.
4. Selfies and identity documents
The current seller verification flow uses manual review by authorised administrators. It does not generate facial-recognition templates or perform automated facial matching. Selfies and identity/company evidence are private verification records, not public shop photos. Authorised reviewers may view them for verification, support, security and fraud investigation. Teyza does not publish them to shoppers or use them for advertising.
A submitted selfie, identity photograph or document may contain sensitive personal information. Only provide the required document and avoid including unrelated people or extra information. If we introduce automated biometric processing, we will provide an updated disclosure and any required consent before that processing begins.
5. What shoppers and other users can see
A published shop may show its trading name, category, location/address, opening hours, public shop-front/product photos, services and selected range. Public prices depend on the shop's listing features. Do not put private identity documents, home details you do not wish to publish, or other people's private information into a public listing or product image. Messages and order information are shared with the participants needed to fulfil your request; a recipient may retain their own copy.
6. Service providers and other sharing
We use Google Firebase/Google Cloud for authentication, database, hosting, storage, backend processing and push notifications. Google Places/Maps supports shop discovery and directions. Search terms and relevant location/area information may be processed to provide those results. Apple provides Apple sign-in and Apple Push Notification service on supported devices. Email/support providers process requests you send to us. These providers may receive identifiers and technical data needed to deliver their service.
If you choose an available payment, delivery or connected sales-channel feature, the provider and the shop receive the information needed for that feature. Where the website offers optional Facebook, Instagram or WhatsApp Business connections, it may store connection identifiers, approved business assets and access tokens to operate the connection you authorise. These integrations are not permission to access unrelated accounts. A provider's own terms/privacy policy also apply to its processing.
We may disclose relevant records when required by law, to respond to a valid legal request, protect users, investigate abuse or resolve a dispute. We do not sell your personal information.
7. Security and local storage
We use encrypted network connections, authentication and access controls to protect transmitted information. The seller service applies additional encryption to private verification images and submitted identity details before storage. Reviewer access is restricted. Authentication/session information and private product drafts may also be stored on your device to keep you signed in and preserve setup work. No security measure is absolute; protect your device and keep passwords and OTP codes private.
8. Retention
The current seller service marks submitted verification images and identity evidence to expire 90 days after submission; scheduled cleanup removes expired private evidence. Minimal submission/review metadata and the seller/account record may remain after the original image expires. Expiry does not itself delete your account or all marketplace records.
Other account, shop, message and order records are retained while needed to provide the service and, afterwards, where needed for legal obligations, accounting, disputes, security or fraud prevention. We consider the purpose, sensitivity and applicable requirements when deciding retention. Deletion requests are assessed as described below. Copies in backups may remain until routine replacement; records legitimately retained are restricted to their retention purpose.
9. Your choices, rights and deletion requests
You can manage device permissions and phone alerts in device settings and available app controls. Turning off push alerts does not delete the account or its inbox. You may ask us for access, correction or deletion of your information, object to processing, or withdraw consent where processing depends on consent, subject to applicable legal limits. Withdrawing consent may prevent us from offering a feature that requires that information.
Email support@teyza.co.za with the subject Teyza account deletion and the email/phone number used for the account. We may need to verify account ownership. Do not email passwords, OTP codes or a copy of your ID unless a secure, necessary verification process has been explained. See the deletion page for scope, retained records and request instructions. Uninstalling the app, signing out or disconnecting Google/Apple does not by itself delete your Teyza account.
For concerns under South African privacy law, you may also contact the Information Regulator.
10. International processing
Teyza serves users in South Africa. Its technology providers may store or process information outside South Africa, including in the United States and other countries where they operate. Applicable contractual, technical and legal safeguards govern these transfers. Contact us for questions about a particular provider or processing activity.
11. Children
The seller registration and business platform are intended for adults. Do not submit a child's identity document or selfie for seller registration. If you believe a child has supplied personal information without appropriate authority, contact support@teyza.co.za so we can investigate and address it.
12. Changes and contact
We may update this policy as the service changes. The date at the top identifies this version. We will provide additional notice or request consent where a material change requires it.
Teyza privacy and account-deletion contact: support@teyza.co.za
Website: teyza.co.za