Flexsell Privacy Policy

Version: 2026-08-16 · Last updated: August 16, 2026

1. CONTROLLER AND SCOPE

FLEXSELL INTERNATIONAL W.L.L, CR 149517-1, Flat 115, Building 1527, Road 2004, Block 2123, Hidd, Kingdom of Bahrain ("FlexSell", "we", "us", or "our") is the controller of personal data described in this Policy. Contact info@flexsell.net for privacy requests.

This Policy applies to FlexSell's app, website, guest and registered accounts, social-commerce marketplace, profiles, physical-product listings, reels, live streams, chat, comments, orders, payment support, delivery, and related services. FlexSell currently offers commerce and Seller operations in Bahrain. This Policy is intended to reflect Bahrain Law No. 30 of 2018 with Respect to Personal Data Protection ("PDPL").

2. DATA WE PROCESS

Depending on how you use FlexSell, we process:

• account and verification data, including a generated guest identifier and username, registered username, phone number, email or name where supplied, OTP transaction records, account role, Seller tier, subscription dates, and legal-acceptance records;
• profile and social data, including profile image, biography, follows, blocks, comments, likes, favourites, shares, reports, and public activity;
• Seller and store data, including business contact details, business address, map coordinates, store information, products, stock, pricing, Seller-application status, approved tier, and service dates;
• transaction data, including cart, order lines, selected variants, amounts, currency, delivery address, status, cancellation reason, payment and refund references, processor fees, and settlement information;
• User Content and communications, including listings, images, video, audio, reels, live-stream metadata, chat, comments, support messages, and moderation evidence;
• location and delivery data selected or permitted by you, including addresses, coordinates, and delivery instructions;
• device, security, and technical data, including platform, app version, device and network information, IP address where received by providers, installation or notification identifiers, App Check signals, logs, errors, stack traces, breadcrumbs, and sampled performance data;
• analytics data, including screen views, product and reel views, watch activity, searches, engagement, feature use, approximate location derived by providers, and aggregated Seller performance; and
• attribution data, including app activity or purchase-event information and, on iOS only with Apple's tracking permission, the advertising identifier used to measure whether advertising led to an install or purchase.

FlexSell does not collect full payment-card numbers in ordinary app operation. Tap Payments processes card and payment credentials. FlexSell does not collect Seller bank details, identity-document images, or Seller-agreement signatures through the current app. Paper due-diligence and subscription records are maintained separately under physical access and retention controls.

Do not send identity documents, payment credentials, sensitive personal data, or confidential third-party information through public content or chat. FlexSell will identify an approved channel if additional verification is required.

3. SOURCES

We receive data directly from you; automatically from your account, device, browser, and use of the Service; from buyers and Sellers involved in a transaction; from users who report content; and from service providers such as Tap Payments, delivery providers, app stores, Firebase, attribution providers, and communications providers.

4. PURPOSES AND LAWFUL BASES

We process personal data to:

• create guest and registered accounts, authenticate users, record legal acceptance, and secure the Service;
• publish profiles, stores, physical-product listings, reels, live streams, comments, and social interactions at your direction;
• create, verify, fulfil, cancel, refund, and keep records of physical-product orders;
• provide chat, notifications, maps, delivery, customer support, and safety features;
• assess Seller applications, administer Seller access and off-app business subscriptions, and enforce marketplace rules;
• prevent fraud, abuse, security incidents, illegal products, and rights violations;
• diagnose faults, measure performance and engagement, understand feature use, and improve the Service;
• measure advertising attribution and purchase conversions, subject to platform permission and applicable consent requirements;
• establish, exercise, or defend legal claims and comply with legal, regulatory, accounting, payment, and consumer obligations; and
• send optional promotional communications where you have not opted out and consent is obtained where required.

The applicable basis is performance of or steps toward a contract, compliance with law, protection of vital interests, a legitimate interest that does not override your rights, your direction to publish content, or specific consent where the PDPL or platform rules require it. Acceptance of the Terms is not consent to optional marketing, advertising identifiers, or other processing that requires separate consent.

Where data is mandatory for an account, order, payment, Seller approval, security, or legal obligation, failure to provide it may prevent the relevant feature. Profile biography, social links, promotional notifications, saved preferences, and device permissions are generally optional.

5. PUBLIC DATA AND OTHER USERS

Generated guest usernames, registered usernames, profile images, biographies, stores, listings, public reels and streams, comments, follower relationships, and public engagement may be visible to other users and may be copied or shared outside FlexSell. Buyers and relevant Sellers receive information needed to complete and support their transaction. Do not publish information that you do not want others to see or copy.

6. RECIPIENTS AND PROCESSORS

We disclose data only as needed to:

• other users involved in public interactions or transactions;
• Amazon Web Services for APIs, media, chat, email, hosting, logs, and infrastructure operations;
• Google and Firebase for database, messaging, maps, analytics, crash reporting, performance, and app protection;
• Sentry for error and sampled performance monitoring;
• LiveKit and FlexSell-hosted infrastructure for real-time audio, video, room data, and processing;
• Tap Payments, banks, card networks, Benefit, wallets, and payment-authentication partners;
• Meta for limited app-event and purchase-conversion measurement, including server-side events using hashed contact information where available;
• Branch and app-platform services for deep-link and install-attribution functions;
• contracted SMS, email, support, moderation, and Bahrain delivery providers;
• professional advisers, auditors, insurers, corporate transaction parties, or service successors under confidentiality and legal safeguards; and
• regulators, courts, rights holders, payment providers, and law-enforcement authorities where disclosure is required or lawfully necessary.

We do not sell personal data as a standalone product. We do not authorize third parties to use personal data for their own unrelated advertising. Provider processing remains subject to applicable contracts, settings, permissions, and law.

7. INTERNATIONAL TRANSFERS

Providers may process data outside Bahrain, including in the United States and other provider locations. FlexSell assesses international transfers under Articles 12 and 13 of the PDPL and uses an applicable adequate destination, Authority authorization, contractual and organizational safeguards, explicit transfer consent, or another statutory condition where required. Provider locations and subprocessors may change; contact us for current recipient categories and transfer information relevant to your data.

8. RETENTION

We retain identifiable data only while needed for its purpose and applicable legal, accounting, consumer, fraud, payment-dispute, security, or evidentiary obligations. Account and public content are retained while active and then removed, anonymized, blocked, or reviewed after deactivation or a valid request. Order, payment, refund, tax, dispute, moderation, and legal-claim records may be retained for the period required to protect users and comply with law.

OTP and temporary technical data should be short-lived. Device and notification identifiers are removed, disabled, or replaced on logout, invalidation, transfer, or deactivation where supported. Error, analytics, attribution, processor, and backup data follow configured provider and restoration cycles. When retention expires, data is deleted, anonymized, or irreversibly aggregated.

9. SECURITY

We use measures intended to protect data from unauthorized access, alteration, disclosure, loss, or destruction, including encrypted transport, platform attestation, access restrictions, database rules, upload controls, processor controls, monitoring, backups, and incident handling. Sentry default PII, screenshots, and session replay are disabled. Operational errors, stack traces, bounded breadcrumbs, device and app metadata, ANRs, and sampled performance traces remain enabled.

No service can guarantee absolute security. Protect your device and OTP, and report suspected compromise to info@flexsell.net.

10. YOUR PDPL RIGHTS

Subject to the PDPL and identity verification, you may request:

• confirmation and access to data, purposes, sources, logic where applicable, and recipient categories;
• correction of inaccurate or incomplete data;
• blocking or erasure of unlawfully processed or no-longer-required data;
• objection to direct marketing and certain processing causing substantial and unwarranted damage;
• withdrawal of consent for future consent-based processing; and
• review of a qualifying solely automated decision.

FlexSell generally responds to an access request within 15 working days and to a marketing objection, substantial-damage objection, or rectification, blocking, or erasure request within 10 working days after sufficient verification, subject to the PDPL. Where Article 23 requires it, relevant recipients are notified of rectification, blocking, or erasure within the applicable period.

Withdrawal does not invalidate prior lawful processing or require deletion of records retained under another lawful basis. You may complain to Bahrain's competent Personal Data Protection Authority.

11. ACCOUNT DEACTIVATION AND ERASURE

The supported in-app account action anonymizes specified profile and contact fields, records the deletion request, deactivates active products, removes comments and the current notification token, and clears the local session. It does not automatically erase all orders, payment references, disputes, chat, media objects, backups, security logs, analytics, attribution, or processor records.

Submit a verified request through https://flexsell.net/delete-account.html for a cross-system access, correction, blocking, or erasure review. Data required by law or reasonably needed for accounting, transactions, disputes, fraud prevention, security, evidence, or third-party rights may be retained with restricted processing.

12. LOCATION, CAMERA, MICROPHONE, PHOTOS, NOTIFICATIONS, AND TRACKING

Device permissions are requested for related features such as choosing an address location, creating media, hosting a live stream, selecting an image, receiving notifications, or measuring advertising attribution. You can change permissions in device settings, although the related feature may stop working. FlexSell does not use live camera, microphone, or precise location access for surveillance or background location tracking.

On iOS, FlexSell asks for App Tracking Transparency permission. If you allow it, the advertising identifier may be used for attribution measurement. If you deny it, FlexSell keeps advertiser-ID collection disabled. Firebase Analytics, operational analytics, crash reporting, and server-side purchase measurement may use identifiers that are not the iOS advertising identifier, subject to provider controls and applicable law.

The Cookie and Tracking Notice explains browser cookies, local storage, SDK identifiers, essential media access, analytics, and available controls.

13. CHILDREN

FlexSell accounts, including guest profiles, and all publishing, communication, transactional, Seller, and live-streaming features are restricted to persons aged 18 or older. FlexSell does not knowingly offer accounts to children. If we learn that an ineligible minor created or used an account, we may restrict it and take appropriate verification and deletion steps consistent with law.

14. AUTOMATED TOOLS AND RANKING

Feeds, search, moderation signals, fraud controls, and analytics may use automated rules and signals such as relevance, recency, category, availability, engagement, relationships, quality, safety, device, and performance. These tools can be incomplete or mistaken. FlexSell does not currently intend them to make a solely automated decision producing legal or similarly significant effects without safeguards required by law. Contact us to contest a material moderation or account decision.

15. CHANGES TO THIS POLICY

We may update this Policy for legal, processor, feature, security, or operational changes. We will publish the current version and effective date, provide appropriate notice of material changes, and obtain new consent where required. Prior processing remains governed by the notice and lawful basis applicable at that time.

16. CONTACT

FLEXSELL INTERNATIONAL W.L.L CR 149517-1 Flat 115, Building 1527, Road 2004, Block 2123 Hidd, Kingdom of Bahrain Email: info@flexsell.net Website: https://flexsell.net