Privacy Policy

1. Who is responsible

The controller of your personal data is the operator identified at the bottom of this page. You can reach us at support@market-pva.com for any question or request about your data.

2. What we collect

• Account data — the username you choose, your password (stored only as a cryptographic hash, never in readable form) and the contact handle you give us (WhatsApp or Telegram).
• Transaction data — your balance, top-ups, orders, and the ledger of every credit and debit on your account.
• Seller data — for seller accounts, the store name and the listings you publish.
• Support and disputes — the messages you exchange with a seller or with us inside a dispute.
• Technical data — server logs with IP address, date and requested page, kept for security and troubleshooting.

We do not ask for your legal name, your address or any government document to open a buyer account, and we do not collect card numbers: payment data is handled entirely by the payment provider and never reaches our servers.

3. Why we use it

To operate your account and process your orders (performance of a contract); to keep the balance ledger accurate and to prevent fraud and abuse (legitimate interest); and to comply with legal obligations that apply to us. We do not sell your data and we do not use it for advertising profiling.

4. Who we share it with

Only with parties that make the service work: the payment provider that processes your top-up, and the hosting provider that runs the servers. Sellers see the information necessary to fulfil your order — your username, the order, and anything you write in the order or dispute. We may disclose data when required by a valid legal order.

5. Cookies

We use only strictly necessary cookies: a session cookie that keeps you logged in and a security token that protects forms against cross-site request forgery. There are no advertising or third-party tracking cookies on this website.

6. How long we keep it

Account and transaction records are kept while your account is open and afterwards for as long as needed to resolve disputes and to meet accounting and legal retention duties. Server logs are kept for a short period and then discarded.

7. Security

The website is served exclusively over HTTPS. Passwords are hashed. Content delivered with an order is stored encrypted in our database. Access to production systems is restricted.

8. Your rights

Under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) — and under the GDPR if you are in the European Economic Area — you may ask for confirmation that we process your data, access a copy of it, correct it, ask for deletion of data we no longer need, object to processing based on legitimate interest, and request portability. Write to support@market-pva.com and we will respond within the period the law allows.

Deleting your account does not erase records we are legally required to keep, such as completed transactions.

9. Children

This service is not directed to anyone under 18. We do not knowingly keep accounts for minors.

10. Changes

If this policy changes, the date at the top of the page is updated. Material changes will be announced on the website.