Privacy Policy

BataIt is a barter marketplace that lets individuals and businesses exchange durable goods and surplus inventory using a credit-based system instead of money. Businesses can trade excess stock, equipment, and assets with other businesses or individuals, reducing waste and unlocking value tied up in idle inventory. We act as the data controller for the personal data you submit on this platform.

If you have questions about your data, contact us through the in-app Privacy Center or at the support address listed in your account.

• Account data: email address, name, role.
• Listing data: item titles, descriptions, photos, location, estimated value.
• Transaction data: exchange history, Bata Credit balance, Bata Score, fee records.
• Identity verification: government ID images and a selfie — only if you choose to verify.
• Payment data: processed by our payment provider (Wix Payments / Base44 Payments). We do not store card numbers.
• Usage data: IP address, device type, and interaction logs collected automatically.

• Contract (Art. 6(1)(b)): creating an account and executing exchanges.
• Legal obligation (Art. 6(1)(c)): retaining transaction and payment records where required.
• Consent (Art. 6(1)(a)): identity verification documents and optional analytics cookies.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, trust scoring, and platform security.

• To facilitate item exchanges and credit transfers between users.
• To verify identity for trust and safety purposes.
• To calculate your Bata Score and apply transaction fees.
• To process premium membership subscriptions.
• To prevent fraud, disputes, and policy violations.

We keep your data only as long as necessary:

• Identity documents: deleted within 30 days after review completion, whether approved or rejected.
• Exchange records: retained for the duration of your account plus the period required to resolve disputes.
• Payment records: retained as required by tax and financial regulations.
• Account data: deleted when you request account deletion via the Privacy Center.

• Right of access (Art. 15): download a copy of your data from the Privacy Center.
• Right to erasure (Art. 17): delete your account and associated data from the Privacy Center.
• Right to rectification (Art. 16): correct inaccurate data by editing your profile.
• Right to object (Art. 21): opt out of non-essential processing at any time.
• Right to data portability (Art. 20): export your data in a machine-readable JSON format.

To exercise these rights, use the Privacy Center or contact support.

We share data only with processors who help operate the platform:

• Base44 / Wix — hosting, authentication, and payment infrastructure.
• Email provider — for transactional and shipping notifications.

We never sell your personal data to third parties.

Some processors may operate outside the EU/EEA. Where this occurs, we rely on Standard Contractual Clauses or an adequacy decision to ensure your data receives equivalent protection.

We use only essential cookies for authentication and session management. Optional analytics cookies, if present, require your explicit consent via the cookie banner. You can withdraw consent at any time from the Privacy Center.

We apply industry-standard measures: encrypted authentication, row-level access control on all sensitive data, and restricted admin review for identity documents. No method of transmission or storage is 100% secure, but we work to protect your data rigorously.

BataIt is not intended for users under 16. We do not knowingly collect data from children. If you believe a minor has registered, contact us and we will delete the account.

We may update this policy. Material changes will be communicated through the app or by email. The "last updated" date below reflects the most recent revision.