Privacy policy

StallPoint gives home-based South African sellers a simple public page for their products, with orders placed directly over WhatsApp. This policy explains what personal information we collect, why we collect it, and the choices you have — as required by the Protection of Personal Information Act (POPIA).

For anything in this policy, contact us at hello@stallpoint.co.za.

If you sign up to open a stall, we collect:

• Your email address and password (the password is stored only in encrypted form — we can never read it).
• Your display name, if you set one.
• Your stall details: stall name, description, city, category, and any photos you upload.
• Your WhatsApp number. This is shown to customers by design — it's how they order from you. Only share a number you're comfortable making public.
• Sales numbers you choose to report on your dashboard (how many orders sold or didn't convert each week). These are counts you enter yourself and are visible only to you.

You don't need an account to browse stalls or place an order, and we don't ask visitors for names, emails, or phone numbers. We collect:

• A random anonymous identifier stored in your browser, used only to count unique taps on the "Order on WhatsApp" button so sellers can see how many different people showed interest. It is not linked to your name, number, or any account — we couldn't identify you from it if we tried.
• A simple count of visits to each stall page. This is a number, not a record of who visited.

When you tap "Order on WhatsApp", the conversation happens on WhatsApp between you and the seller. We never see, store, or take part in those messages — WhatsApp's own privacy policy applies there.

• To run your stall page and let customers find it.
• To send account emails — confirming your signup, resetting your password, confirming an email change. We don't send marketing email.
• To show sellers their own private stats (page visits, WhatsApp taps, and the sales counts they reported).
• To review new stalls before they go live.

We don't sell personal information, show ads, or share your information with anyone for marketing.

StallPoint runs on Supabase (our database and file storage) and Vercel (our hosting). Both are established providers that may store data on servers outside South Africa. Where personal information leaves the country, it is protected by these providers' contractual and security commitments, as POPIA requires for cross-border transfers.

• Seller accounts and stall details: kept while your account is active. If you delete your account, your stall, products, and photos are removed.
• Anonymous click records: kept so sellers' stats stay accurate. They contain no personal details, and they are deleted automatically when the product they belong to is deleted.
• Seller-reported sales counts: kept as part of the seller's own history, and deleted with the product they belong to.

You can ask us at any time to:

• Tell you what personal information we hold about you.
• Correct information that's wrong or out of date.
• Delete your personal information — including closing your seller account entirely.
• Object to how we're processing your information.

Email hello@stallpoint.co.za and we'll respond as soon as we reasonably can. Sellers can also change their name, email, and password directly in their dashboard settings.

If you're not satisfied with how we handle a request, you have the right to complain to the Information Regulator (South Africa) at inforegulator.org.za.

If this policy changes, we'll update this page and the date at the top. Significant changes that affect sellers will also be mentioned by email.