Privacy

Last updated 7 August 2026

This describes what Sawiliy actually collects, why, and who it goes to. It describes the service as it works today — not what it might do later.

If you only browse

Nothing is collected. There is no analytics, no tracking pixel and no advertising network on this site. Our host keeps standard server logs of requests, as every web host does.

If you join the waiting list

We keep the name, phone number, Instagram handle and category you enter, and which form you used. That is so we can contact you when we open in your area.

If you create an account

Your phone number is your account — it is how you sign in and how we reach you. You may add an email address as a second way to sign in; it is optional.

You may also add a name, a photo and a language preference. Nothing else is required.

If you sell

To be approved you give us your shop name, a description, your logo and cover photo, your area, your WhatsApp number, and an identity document. Depending on what you sell we may also need a commercial registration number or a licence.

Your identity document, commercial registration number and commission rate are never shown to buyers. They are visible only to you and to our admin.

What buyers can see about a seller

Your shop name, description, logo, cover photo, area, Instagram handle, listings — and your WhatsApp number.

Your WhatsApp number is public. It is how a buyer asks about a piece, because there is no messaging system on Sawiliy and none is planned before launch. If you do not want your number public, do not list.

Sign-in codes and abuse limits

When you request a sign-in code we record the phone number or email it was sent to, and a one-way hash of your IP address made with a secret key. The address itself is never stored. These records are deleted automatically after 24 hours and exist only to stop someone requesting thousands of codes.

Who else sees your data

Only the companies that run the service for us, and only what they need to do it: Supabase (database, sign-in, file storage), Vercel (hosting), Twilio (sending SMS codes), Resend (sending email), and Cloudflare (domain and email routing).

We do not sell your data, and we do not share it for advertising.

When you tap a WhatsApp link you leave Sawiliy and are messaging on WhatsApp, under Meta’s terms rather than ours.

How long we keep it

Your account and shop data for as long as your account exists. Sign-in abuse records for 24 hours. Waiting-list entries until we open in your area or you ask us to remove them.

Your rights

You can ask to see what we hold about you, to correct it, or to delete it. Email hello@sawiliy.com and we will respond.

Deleting your account removes your profile, your shop and your listings. Some records may be kept where the law requires it.

Children

Sawiliy is not for anyone under 18. We do not knowingly collect data from children.

Changes

If this changes materially we will say so on this page and update the date above.