Useful data, collected with restraint.

Information we collect

We process account details such as name, email, sign-in provider, verification status and security sessions; profile details you choose to provide; listings, photos, approximate marketplace location and preferences; offers, bids, giveaway requests, adoption applications, exchange records, reviews, reports and support messages.

We also process consent records and limited security information such as IP address and user agent for authentication and abuse prevention. Public page analytics uses a random tab-session identifier and page context. It does not intentionally include your account ID, email or exact address and respects supported Do Not Track signals.

How we use information

We use information to create and secure accounts, publish requested content, match and complete exchanges, deliver notifications, provide support, prevent fraud, enforce rules, investigate safety issues, understand service reliability and comply with lawful obligations. We do not sell identity documents, private messages, private contact details or exact locations.

AI-assisted listing help

If you choose AI listing help, a reduced copy of the selected photo and the minimum related context is sent to our AI provider to suggest a title, category, description and listing type. You review and can change every suggestion. Do not submit images containing people, identity documents, contact details or exact addresses. The feature is optional.

Advertising and measurement

Ads are selected using placement and broad marketplace context such as category or country. Impression and click events are deduplicated with a session identifier. Campaign enquiry contact details are used only to review and respond to that enquiry and are not included in campaign-performance exports. We do not provide advertisers with private messages, exact locations, identity documents or raw individual behaviour histories. Any future personalised advertising or marketing will require the applicable notice and choice.

Service providers and international processing

We use carefully selected providers for hosting, email delivery, Google sign-in, bot protection, image processing and optional AI assistance. They receive only the information needed for their service and may process it outside Nepal under their terms and safeguards. We may disclose information when required by valid law or when necessary to protect users, rights and safety.

Public and private information

Active listings, listing photos, display name, approximate city or area and selected trust signals may be public and searchable. Exact addresses, private application answers, account email, private messages and unpublished drafts are not made public. Avoid placing contact details or sensitive information in public text or photos.

Retention

Raw first-party page analytics is automatically deleted after 90 days. Expired sessions, verification records, administrative privilege grants, temporary consent handoffs, idempotency records and stale rate-limit records are removed by scheduled maintenance after they are no longer operationally needed.

Account and active marketplace content remains while the account or feature is in use. When you delete an account, private profile data and stored media are deleted and durable exchange history is anonymised where necessary for other participants, fraud prevention, disputes, safety, audit and legal obligations. Backup copies expire through the documented backup cycle. Safety, transaction and audit records are retained only for the approved legal or operational period and access is restricted.

Your choices and rights

Account settings provide profile correction, data export, consent controls, session revocation and account deletion. You may decline optional analytics or AI help and may withdraw optional consent without affecting earlier lawful processing. To request access, correction, restriction, deletion or help with a privacy concern, contact support@sattapatta.com. We may verify the request before acting.

Security and changes

We use access controls, encrypted transport, password hashing, multi-factor protection for administrators, rate limits, audit records, limited data exposure, backups and recovery testing. No online service can promise absolute security; report suspected compromise promptly. Material policy changes will be dated and communicated through the service or account email where appropriate.

Controller contact

Sattapatta's platform operator in Nepal is responsible for this processing. Privacy questions and complaints can be sent to support@sattapatta.com.