Privacy policy

Who to contact

Dastak is the marketplace responsible for the account, order, seller and support records described here. For privacy questions, access, corrections or deletion requests, email Rightfoodmart@gmail.com. Include “Dastak privacy” in your subject. Never send a password, one-time code or full payment-card details.

Information we handle

• Account details: the identifier, name and email supplied by sign-in, plus the phone number, city and profile details you provide.
• Shopping and delivery: items, quantities, prices, order history, recipient name, phone, delivery address, tracking, cancellation reasons and delivery confirmations.
• Selling: store and business details, seller identity information such as CNIC, activation-payment references, shipping settings, inventory, listing text and photos. Published listing and store information is visible to shoppers.
• Driver applications: name, email, phone, city, approval status, assignments and delivery updates.
• Support: messages, account-deletion requests, ticket details, responses and resolution records. Signed-in chat is saved with your account for support follow-up. Guest chat is not saved as a Dastak conversation by the current chat feature.
• Other features you use: bids, seller-course progress and quiz results, where those features save activity.
• Technical information: our hosting and sign-in providers process connection information such as IP address, browser/device details, request times and security logs to operate and protect the service.

Why we use it

We use information to sign you in, maintain your account, review sellers and drivers, publish listings, manage orders and delivery, provide support, prevent fraud, investigate disputes and meet applicable recordkeeping requirements. Support ticket counts and categories help us understand service problems. We do not sell personal information or use this chat to build advertising profiles.

Who receives information

Relevant sellers receive the information needed to fulfil their orders. Assigned, approved drivers receive the delivery details needed for their assignments. Dastak administrators handle approvals, support and disputes. These roles do not give unrestricted access to every customer’s data.

We use OpenAI’s Sites hosting and ChatGPT sign-in services and Cloudflare infrastructure for website delivery, database records and uploaded files. External product-image hosts receive normal connection information when your browser loads their images. If you email support, Google’s Gmail service processes that correspondence. Sellers may provide necessary delivery information to the courier you select. These providers may process information outside Pakistan under their own service terms and privacy practices.

We may also disclose information when required by applicable law, to respond to a lawful request, or when reasonably necessary to protect people, investigate fraud or resolve a transaction dispute.

Search, permissions and your device

Voice search starts only when you choose it and allow microphone access. Your browser’s speech provider may process audio to produce text; Dastak searches the resulting text and does not store the voice recording in its application database. Image search reads English or Urdu label text and supported barcodes on your device, then searches the words or code you review. It does not upload your search photo or perform visual product matching. Text-reading tools are downloaded from Dastak when needed; the photo is not saved by the search feature. Seller photo uploads are different: selected listing images are uploaded and may become public when published.

You can deny or revoke camera and microphone access in your browser or device settings and continue using text search. The current app does not request background location or contacts access. Sign-in uses session information; your cart and some interface preferences are stored on your device. The offline feature caches a reconnect page, not private order or account responses. Clearing browser/app storage can remove the local cart and sign you out.

Automated help and optional AI

Dastak Dost currently provides guided automated answers and signed-in order lookup. It is not a person and cannot approve refunds, move money or cancel an order for you.

If optional AI assistance is enabled, the chat will disclose it and ask you to opt in before sending an unclear question to OpenAI to identify its help topic. We do not include your account details, order records or chat history in that AI request. Free text may contain information you type, so omit personal details. Obvious identifiers and sensitive-looking questions use guided help instead; detection cannot identify every kind of personal information.

The optional integration requests that responses are not stored as retrievable API responses. OpenAI may still retain security or abuse-monitoring records under its API data controls. This is not a promise of zero retention. You can leave AI off and still receive guided help and contact support.

Retention and deletion

Account, listing, order and signed-in support records remain in our systems while needed to provide the service and until reviewed for deletion. We do not currently operate an automatic age-based purge. We review account and data deletion requests manually. Order, payment-reference, dispute or fraud records may need to be retained for a legitimate transaction, security or applicable legal requirement; support will explain any retained categories and the reason when handling your request.

Request deletion from Help & account requests, or email a Dastak account and data deletion request from the email associated with your account. You can make an email request without installing the app. We may ask you to verify account ownership using an appropriate method; we will not ask for your password or OTP. Submitting a request is not confirmation that deletion has completed.

Deleting a Dastak account does not delete your ChatGPT account, copies independently held by a seller or courier, or messages in your own email. We will identify any separate provider you need to contact. Uninstalling the app alone does not remove server records.

Your choices and security

You can review orders in your account, update available profile settings, request access or corrections by email, decline optional permissions, and request deletion. We use HTTPS and server-side account and role checks. No service can guarantee absolute security; report suspected unauthorised access promptly and avoid sharing sensitive information in listing text or chat.

If a child has provided personal information without appropriate permission, a parent or guardian can contact us for review and removal. This statement does not replace the marketplace’s eligibility terms.

Policy changes

We will update this page and its effective date when our data practices change. Where a change needs a separate notice or permission, we will provide it before applying that change.