Privacy Policy

Last updated: September 15, 2026

For controller contact details, please see our Legal Notice & Contact page.

1. 01 Controller Information
2. 02 Data Collection Overview
3. 03 Legal Basis for Processing
4. 04 Platform & Account Data
5. 05 AI Processing (OpenAI)
6. 06 Payment Processing
7. 07 WhatsApp Integration
8. 08 Tracking & Analytics
9. 09 Hosting & Infrastructure
10. 10 Cookies & Local Storage
11. 11 Data Retention Periods
12. 12 Your Rights
13. 13 International Data Transfers
14. 14 Children's Privacy
15. 15 Changes to This Privacy Policy
16. 16 Data Protection Contact

01

Controller Information

The controller responsible for data processing on this website and the Bazaar platform is Bazaar Analytics Inc. For our contact details, please refer to our Legal Notice & Contact page.

If you have any questions about data protection, you can reach us at: contact@bzaar.ca

02

Data Collection Overview

Automatically Collected Data

When you visit our website, the following data is automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent

Voluntarily Provided Data

We collect data that you actively provide to us:

• Email address (registration, login, communication)
• Name and organization details
• Subscription and payment information
• Support requests and communications
• WhatsApp phone number (if connecting the bot/alert feature)

03

Legal Basis for Processing

• Contract Performance: for providing our services, managing subscriptions, and account operations
• Consent: for optional communications and analytics cookies
• Legitimate Interest: for security, fraud prevention, and platform improvement
• Legal Obligation: for data retention required by tax or commercial law

04

Platform & Account Data

We store the following in our systems:

• User profiles, organization details, and team member permissions
• Search histories and saved filters
• Subscription status information
• Structured listing data derived from dealer WhatsApp groups (brand, model, reference, price, condition)

05

AI Processing (OpenAI)

AI-Powered Data Processing

We use OpenAI's models to parse and structure unstructured listing data from WhatsApp messages into searchable fields such as brand, model, price, condition, and specifications. Submitted data is processed under OpenAI's API terms.

06

Payment Processing

Stripe

Subscription payments are processed by Stripe, Inc. Stripe may process your name, email, payment method details, and transaction data. We do not store credit card numbers on our own servers. Stripe's privacy policy: stripe.com/privacy

07

WhatsApp Integration

We use a WhatsApp integration provider to structure listing data from dealer WhatsApp groups into your searchable Bazaar account.

Listing Structuring (Dealer Groups)

Listing data is automatically extracted from WhatsApp dealer groups your organization participates in and structured into brand, model, reference, price, and condition fields.

WhatsApp Bot (User Interaction)

If you connect your WhatsApp number to your Bazaar account, the following data is processed:

• Your WhatsApp phone number
• Messages you send to our bot
• Search queries and alert configurations
• Connection status and session data

You can disconnect your WhatsApp number at any time through your account settings or by contacting us.

08

Tracking & Analytics

Google Analytics

We use Google Analytics to understand website usage. You can opt out using the Google Analytics Opt-out Browser Add-on.

09

Hosting & Infrastructure

Amazon Web Services (AWS RDS): Our primary database is hosted on AWS RDS (PostgreSQL). Application Hosting: Web and background services also run on AWS infrastructure.

10

Cookies & Local Storage

Essential Cookies Required for the Platform to function. Include session cookies, authentication tokens, and CSRF protection. Cannot be disabled.

Analytics Cookies Used by Google Analytics to understand visitor behavior. Set only with your consent.

Local Storage Used to store user preferences and authentication state.

11

Data Retention Periods

12

Your Rights

As a Canadian company, Bazaar's handling of your personal data is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access: request information about what personal data we hold about you
• Rectification: request correction of inaccurate personal data
• Withdraw Consent: where processing is based on consent
• Erasure: request deletion of your personal data, subject to legal and contractual retention requirements
• Object: object to processing based on legitimate interest or for direct marketing

To exercise any of these rights, contact us at contact@bzaar.ca. We will respond within 30 days.

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

13

International Data Transfers

Some of the services we use (OpenAI, Stripe, AWS) may transfer data to servers located outside Canada, including the United States. These transfers are safeguarded through standard contractual protections and the data processing terms of each provider.

14

Children's Privacy

Our Platform is a B2B service intended for trade professionals and is not directed at children. We do not knowingly collect personal data from individuals under the age of 18.

15

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by email or through a notice on the Platform. The "Last updated" date above indicates when it was last revised.

16

Data Protection Contact

For any questions or concerns regarding data protection or to exercise your rights, please contact:

Email: contact@bzaar.ca Subject: Data Protection Request

For our full company details, please see our Legal Notice & Contact page.