Privacy policy
Last updated: October 8, 2026
RaphiMarket respects your privacy, wherever you are. This policy explains what personal information we collect, why, with whom it is shared, how long it is kept and how to exercise your rights. It applies to the RaphiMarket mobile app and website, in compliance with the privacy laws that apply where you use the service.
1. Person in charge of the protection of personal information
RaphiMarket’s person in charge of the protection of personal information can be reached at any time through the “Contact us” page of the app or website (topic “General question”). This person handles access and correction requests and complaints, and responds within 30 days.
2. Information we collect
- Account: first name, last name, email address, phone number (optional), password (stored only in irreversibly encrypted form) and preferred language.
- Orders: products, quantities, amounts, taxes, fulfillment method, delivery address (recipient name and phone, address, instructions), promo codes used, history, invoices and the photo of the order taken by the store (order ready for pickup, order left at the address for delivery).
- Sellers: store information (name, address, email, phone, products, photos). The identity and banking information required to receive payments is provided directly to our payment provider and is not kept by RaphiMarket.
- Reviews, favourites, reports (of products and reviews) and blocked stores you publish or save. The store or person concerned by a report or a block does not see who made it.
- Location: only if you allow it, to show nearby stores. It is not saved in your account.
- Technical data: device notification tokens and login sessions.
- Messages sent through the “Contact us” page: emailed to our team and not stored in our databases.
2.1 Merchant management tools (RaphiMarket Gestion)
A store subscribed to RaphiMarket Gestion may record:
- Its employees: first name, last name, employee number, job title, hire and end dates, status and, if needed, email, phone and linked RaphiMarket account. The time clock PIN is only stored in irreversible encrypted form.
- Time clock data: clock-in, clock-out and break times, device used, corrections made by a manager (with author and reason) and mistake reports sent by the employee.
- Schedules: planned shifts (day, hours, break, position), their publication and change history; time-off requests (dates, type and optional reason — no medical details are asked) and the manager’s answer; availability entered by the employee; and, if the store enters it, an hourly rate only visible to people with the “Employees” permission.
- Counter sales: products, quantities, prices, taxes and the payment method noted. An email address entered to send a receipt is only used for that sending and is not kept.
- Its suppliers: company name, contact person, email, phone and address, as well as purchase orders and purchase costs.
The store is responsible for this information and must only collect what is needed to manage hours and purchasing; RaphiMarket processes it on the store’s behalf, solely to provide these tools. An employee can see their hours and schedule in the app if their account is linked, and may send any access or correction request to the store or to us. This information is kept as long as the store needs it for its obligations (payroll, taxes) and deleted when the store closes, unless the law requires keeping it. The subscription payment is processed by our payment provider: RaphiMarket only keeps the subscription status.
3. Why we use it
Only to: create and secure your account; process your orders, payments, cancellations and refunds; allow the store to prepare your order; send you emails and notifications about your account and orders; answer your requests; prevent fraud and abuse; and meet our legal and tax obligations. RaphiMarket does not sell your personal information and does not use it for targeted advertising.
4. Consent
You consent to this policy by creating your account. Location and notifications are only used with your permission, which you can withdraw at any time in your device settings. No commercial email is sent to you without your consent, and each one includes a way to unsubscribe. You can withdraw your consent by deleting your account.
5. Who we share it with
- The store you order from receives the information needed to prepare your order (your name and the order details; for a delivery, the address, name and phone number you entered).
- Our technical service providers, only for the service they provide to us and only as needed: payment processing and seller verification, hosting of servers and database (in Canada), sending notifications, locating store addresses, storing photos (products, stores and orders), sending emails and the sellers’ artificial intelligence assistant (customer names are replaced with pseudonyms). The list of our providers is available on request through the “Contact us” page.
- Authorities, when required by law.
6. International transfers
Our servers are hosted in Canada. Some providers (in particular for payments, notifications, photo storage and the artificial intelligence assistant) may process information in other countries, including the United States. Before entrusting them with information, we assess their protection and limit what is transmitted to what is strictly necessary, under contractual confidentiality and security commitments.
7. Retention
Your information is kept as long as your account is active. When you delete your account, your identifying information is erased or anonymized immediately. Orders and invoices are kept in anonymized form for the period required by applicable tax laws. Verification codes and sessions expire automatically.
8. Security
Encrypted communications (HTTPS), irreversibly encrypted passwords, limits on login attempts, data access restricted to authorized people and hosting in Canada. RaphiMarket never stores payment card numbers: they are processed only by our certified payment provider.
9. Your rights
At any time, you can:
- view and correct your information in your profile;
- receive a copy of your data by email (Account → Security → Email me my data);
- delete your account (Account → Security → Delete my account);
- withdraw a consent or ask how your information is used, through the “Contact us” page.
We answer every request within 30 days, free of charge.
10. Complaints
If you are not satisfied with our answer, you can file a complaint with the competent data protection authority in your country or region.
11. Minors
RaphiMarket is intended for people aged 14 and over, or the minimum age set by the law of their country if higher. We do not knowingly collect information about younger children. If you believe a child has provided us with information, write to us so that we can delete it.
12. Cookies and on-device storage
The app and website store on your device only what they need to work: your login session, your language and your preferences. RaphiMarket uses no advertising cookies and no third-party tracking tools.
13. Confidentiality incidents
If an incident presents a risk of serious harm, we promptly notify the competent authorities and the people concerned, and take the necessary measures to limit the consequences.
14. Changes
We will inform you in the app of any significant change to this policy. Where required by law, we will ask for your consent again.