UBS GLOBAL IMPORTING & EXPORTING - PRIVACY POLICY
Last Updated: June 2025
1. INTRODUCTION
Welcome to UBS Global, a premier multivendor eCommerce mobile application operated by UBS Global Importing & Exporting ("Company", "we", "us", or "our"). This Privacy Policy describes how we collect, store, use, share, and protect your personal information when you access or use our mobile application (the "App") and related services (collectively, the "Services"). The Services include our multi-vendor marketplace, real estate listings, job portal, service hiring portal, and AI chat assistant.
By downloading, registering with, or using the App, you agree to the collection, processing, and disclosure of your personal data as outlined in this Privacy Policy. If you do not agree with any terms of this policy, you must immediately cease all access and use of the App and delete your account.
2. INFORMATION WE COLLECT
To provide a secure and comprehensive marketplace experience, we collect the following categories of information:
• Personal Identification Information: Full name, primary email address, verified phone number, physical shipping and billing addresses, profile photos, and account credentials.
• Precise Location Data: Real-time geographical coordinates of your mobile device. This is used to calculate international shipping fees, local tariffs, applicable taxes, and to filter local real estate, service, or job listings.
• Device and Log Information: Device hardware model, operating system version, unique device identifiers (e.g., IMEI, MAC address, advertising IDs), IP address, mobile network provider, crash reports, and system performance logs.
• Payment Transaction Information: Transaction metadata, order details, and billing history. All payments are processed securely via our payment gateway partner, Razorpay. We do not store raw credit card numbers or sensitive payment credentials on our servers.
• Usage Data and Platform Analytics: Details of your interactions with the App, including search queries, viewed listings, duration of visits, referral sources, and navigation patterns.
• User-Generated Photos and Media: Access to your device's camera and photo library, granted with your permission, to enable uploading photos for product listings, real estate properties, service advertisements, and seller identity verification documents.
• Communication Logs: Peer-to-peer chat messages exchanged between buyers and sellers within the platform (utilizing Socket.io), and user input prompts submitted to our AI chat assistant.
3. HOW WE USE YOUR INFORMATION
We process your personal data under lawful bases (including contract performance, legal compliance, and legitimate interests) for the following purposes:
• Delivering Core Services: To facilitate buyer-seller interactions, order placement, real estate listings, job postings, and service bookings.
• Processing Secure Payments: To transmit transaction details to Razorpay to verify and authorize international payments in USD. This includes calculating and deducting the 3% platform commission on successful vendor sales.
• User Verification: To send secure One-Time Passwords (OTPs) via Twilio to verify phone numbers and maintain account security.
• Personalization: To display customized product recommendations, location-relevant listings, and personalized content.
• AI Chatbot Responses: To analyze chat input data processed by the Anthropic Claude AI framework to deliver intelligent automated assistance and support responses.
• Platform Notifications: To dispatch real-time push alerts regarding order status updates, delivery updates, and inbox notifications.
• Security and Fraud Prevention: To monitor user transactions, analyze device identifiers, prevent chargeback abuse, and audit marketplace listing integrity.
• Regulatory and Legal Compliance: To comply with international export controls, financial audit standards, anti-money laundering (AML) laws, and judicial directives.
4. INFORMATION SHARING AND DISCLOSURE
We do not sell, rent, or trade your personal data with third-party marketers. We share data only as necessary to perform transactions or as legally required:
• Buyer-Seller Sharing: When a buyer completes a purchase, their name, shipping address, and phone number are shared with the seller to facilitate delivery.
• Public Shop Profiles: Seller business details, shop names, locations, and ratings are displayed publicly to all users.
• Third-Party Payment Partners: Order data and payment tokens are shared with Razorpay for secure credit card and local payment processing.
• Core Infrastructure Providers: Data is stored securely on MongoDB Atlas (encrypted database), and media assets (images, certificates) are uploaded to Cloudinary. App servers are hosted securely on Railway.
• Artificial Intelligence Integrations: Chat queries are sent to Anthropic's Claude AI for natural language processing and chatbot support. Submitted messages are anonymized to protect user identity.
• Compliance and Legal Process: We may disclose information if required by law, subpoena, or to protect the safety, rights, or property of the Company, our users, or the public.
5. DATA STORAGE, HOSTING, AND SECURITY
We implement industry-standard security protocols to protect your information:
• Transit Encryption: All network communications between the mobile application and our servers are encrypted using Secure Sockets Layer (SSL) and Transport Layer Security (TLS 1.2/1.3) protocols.
• Database Security: All user records are stored in MongoDB Atlas, utilizing advanced security firewalls, access controls, and encryption-at-rest.
• Media Isolation: Uploaded listing and identity verification photos are stored and served securely by Cloudinary using access-restricted keys.
• Server Hosting: Our backend infrastructure is hosted on Railway in secure container environments with automated security patching and firewall protection.
• Data Retention: Profile and account information are retained as long as your account remains active. Transactional history, billing documents, and compliance records are archived for a legally mandated period (up to 7 years) to satisfy international trade, tax, and corporate audit laws.
6. LOCATION DATA GOVERNANCE
• Purpose: We collect precise location data (both when the app is in the foreground and background) to automate international trade logistics, estimate delivery charges, and filter local listings.
• User Control: You can enable or disable location services at any time through your mobile operating system's settings. Disabling location services may limit the availability of certain geographic-dependent features.
• Consent and Sharing: Your location coordinate data is processed locally or sent to our servers to calculate distances. It is never shared with other users or third parties without your explicit, separate authorization.
7. COOKIES, SESSION TOKENS, AND TRACKING
• Session Management: We use persistent authentication tokens and device-based local storage (e.g., AsyncStorage) to keep you securely logged into your account across application sessions.
• Crash and Usage Analytics: We use integrated analytics tools to collect non-identifiable usage statistics, helping our engineering team troubleshoot software errors, page crashes, and optimize device battery utilization.
8. CHILDREN'S PRIVACY
The Services are strictly designed and intended for users who are at least 18 years of age. We do not knowingly collect, request, or maintain personal data from individuals under 18. If we become aware that a minor has registered an account, we will immediately suspend the account and permanently delete all associated personal data from our servers.
9. YOUR RIGHTS (GDPR AND GLOBAL COMPLIANCE)
Depending on your jurisdiction (such as the European Union under GDPR), you possess the following rights regarding your personal data:
• Right of Access: You can request a copy of all personal data we hold about you by selecting "Download My Data" under the Security & Privacy settings in the App.
• Right to Rectification: You can update or correct your profile information, email address, phone number, and physical addresses at any time.
• Right to Erasure (Deletion): You can request the deletion of your account and personal details through the "Delete Account" screen in the Settings page.
• Right to Data Portability: You can export your order records and profile data in a structured, machine-readable JSON format.
• Right to Opt-Out: You can withdraw consent for marketing communications and platform notifications at any time.
10. THIRD-PARTY SERVICES AND POLICIES
Our App integrates with third-party service providers who operate under their respective privacy policies. We encourage you to review their policies:
• Razorpay (Payment Processing): https://razorpay.com/privacy/
• Anthropic Claude (AI Chat Service): https://www.anthropic.com/legal/privacy
• Cloudinary (Image and Asset Hosting): https://cloudinary.com/privacy
• Google OAuth (User Authentication): https://policies.google.com/privacy
• Twilio (SMS Verification and OTPs): https://www.twilio.com/legal/privacy
11. POLICY REVISIONS AND UPDATES
We may modify or update this Privacy Policy from time to time. When updates are published, we will revise the "Last Updated" date at the top of this policy. If we make material changes to how we handle your personal data, we will notify you through an in-app popup notification or a direct email before the changes take effect.
12. CONTACT AND COMPLIANCE SUPPORT
For any inquiries, requests to exercise your rights, or data compliance questions, you may contact our Data Protection Officer:
• Email: privacy@ubsglobal.com
• Mailing Address: UBS Global Importing & Exporting Legal Department
• Response Time: We commit to reviewing and responding to all verified inquiries within thirty (30) days of receipt.