Privacy Policy

Pato Market · Last updated July 18, 2026

This Privacy Policy explains what information Pato Market (patomarket.net) collects, why we collect it, and how it is used. It applies to both Creators (sellers) and Buyers using the platform.

1. Information we collect

From Creators (sellers):

• Name, email address, and store username, provided at signup
• Password, stored as a salted hash, never in plain text
• Product files, cover images, titles, descriptions, and prices you upload
• Payout account details (mobile money or bank account) for receiving sales

From Buyers:

• Name, email address, and phone number, provided at checkout
• Purchase history (which products you bought, and when)

We do not collect or store card numbers or M-Pesa PINs. All payment details are handled directly by Paystack, our payment processor.

2. How we use this information

• To create and manage your account and store
• To process purchases and deliver digital products to Buyers
• To send transactional emails, such as download links and purchase confirmations
• To calculate and send Creator payouts
• To detect and prevent fraud or misuse of the platform

We do not sell your personal information to third parties, and we do not use your data for advertising.

3. Third-party services we use

• Paystack — processes all payments (cards and M-Pesa). Paystack has its own privacy policy governing how it handles payment data.
• Resend — sends transactional emails, such as download links, on our behalf.
• Cloudflare — hosts our website, database, and file storage.

These providers only receive the information necessary to perform their specific function (for example, Resend only receives the email address and content needed to send you a specific message).

4. Cookies and sessions

Pato Market uses a session cookie to keep Creators logged in after signing in. We do not use tracking or advertising cookies.

5. Download links

When a purchase is completed, we generate a temporary download link that expires 24 hours after it is created. This link is sent to the Buyer's email and is not shared with anyone else.

6. Data retention

We keep account and order information for as long as your account is active, and as needed to meet our legal and accounting obligations. If you close your Creator account, contact hello@patomarket.net to request deletion of your personal data, subject to any records we are legally required to keep.

7. Data security

Passwords are hashed using PBKDF2 and never stored in plain text. Product files are stored in access-controlled cloud storage. Download links are single-purpose and time-limited. No system is completely immune to risk, but we take reasonable steps to protect your information.

8. Your rights

You can request a copy of the personal data we hold about you, or ask us to correct or delete it, by emailing hello@patomarket.net.

9. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of Pato Market after changes are posted means you accept the updated policy.