Your trust. Handled with care.

Creating an account can involve an email address, sign-in details and profile information. Seller applications can include business details, verification documents and catalogue content. Use accurate information and avoid submitting another person’s private data without permission.

Optional reviews and uploaded photos are intended for public display when enabled. Do not include faces, addresses, invoices, identity documents or other personal information in public review content. Review submission is currently awaiting backend setup; labelled sample reviews are fictional.

The guest cart, wishlist and appearance preference are saved in browser storage. Clearing that storage can remove those selections. Sign-in state can also be maintained by browser storage; use the account sign-out action on shared devices.

Checkout form details are kept in tab-session storage while testing checkout and cleared when the flow finishes or is discarded. Saving an address is a separate opt-in action that stores it with your account. Clearing device storage does not delete records already held by connected services.

The preview uses Supabase-backed services for working accounts and selected stored records, and Cloudflare for website hosting. Service providers may process operational information such as network requests, IP addresses and logs. A complete inventory of providers, regions and their retention practices is still being prepared.

Catalog Bridge sends the file you select to Google Gemini after the upload consent. Dervoy’s current import flow does not save that source file in its own catalogue storage; extracted drafts can be saved separately. Google’s free-tier processing may use submitted content to improve its products. Do not upload confidential or personal information.

Dovi sends conversation context to an AI gateway to answer bag and preview questions. Dervoy’s chat interface keeps the conversation in memory rather than saving a chat history. That does not mean the AI provider or hosting services retain no request data. Avoid sharing passwords, OTPs or private documents.

Working features use submitted information to sign you in, keep chosen account records, prepare seller applications and product drafts, and provide AI-assisted responses. Access controls restrict account and private seller records to their intended users and authorised reviewers.

This draft does not assert that Dervoy sells no data, uses no analytics or retains information for a specific period. Those statements need a completed technical and provider review before they can be published as commitments.

You can edit your profile name, change appearance preferences and choose whether to use optional AI imports. You can clear browser data through your browser settings. That affects local selections and sessions, not server-side account or seller records.

An online privacy-request service is not connected yet. Access, correction, deletion and other requests will need a verified contact channel and identity checks where appropriate. This guide does not submit requests. Operator identity, request handling, legal grounds and applicable rights require review before live launch.

Retention periods for accounts, seller verification, product records, logs and AI-provider processing are still to be finalised and documented. Some records may need to be retained for applicable obligations. No deletion deadline is promised by this draft.

Please protect your account and do not send passwords, payment credentials or OTPs in messages. The final notice will identify the responsible operator, contact details and effective date, and explain how material changes are communicated. This draft’s date is not an effective date for final legal terms.