1 Introduction
Goffery ("we," "us," or "our") operates an online offers platform in the Sultanate of Oman connecting buyers with merchants and service providers. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Platform.
Your Trust Matters
We are committed to transparency about our data practices. By using the Platform you consent to the practices described in this Policy. If you do not agree, please do not use our Services.
2 Data We Collect
Information You Provide
- Account Data: Name, email address, phone number, and password
- Profile Data: Profile photo, location, bio, and other optional fields
- Payment Data: Billing address and payment method details (processed securely by our payment providers — we do not store full card numbers)
- Offer & Booking Data: Details of offers you browse, book, or purchase
- Communications: Messages between users, support inquiries, and feedback
- Seller Data: Business documents, tax information, and bank account details for verified sellers
Data Collected Automatically
- Device & Browser: Device type, operating system, browser, and IP address
- Usage Data: Pages visited, search queries, click patterns, and time on page
- Location Data: Approximate location from IP address; precise location only with your explicit consent
- Transaction Logs: Payment records, booking history, and delivery confirmations
Data from Third Parties
- Social login providers (if you connect an account)
- Payment processors for fraud prevention and transaction verification
- Identity verification services for seller onboarding
3 How We Use It
Platform Operations
- Creating and managing your account
- Processing payments, bookings, and purchases
- Facilitating communication between buyers and sellers
- Verifying seller identity and maintaining offer quality
- Providing customer support
Improvement & Personalisation
- Recommending relevant offers based on your activity
- Analysing usage patterns to improve the Platform
- Developing new features and services
Safety & Legal Compliance
- Detecting and preventing fraud, spam, and abuse
- Enforcing our Terms of Service and platform policies
- Complying with Omani laws, regulations, and lawful authority requests
Marketing Communications
We send marketing emails only with your consent. You may opt out at any time via the unsubscribe link or your account notification settings.
4 Information Sharing
We do not sell, rent, or trade your personal information. We share data only in these circumstances:
- Between Users: Transaction-necessary details shared between buyer and seller (name, contact info, delivery address)
- Payment Processors: Encrypted payment data to complete transactions
- Cloud & Infrastructure: Trusted providers who store and process data on our behalf under strict data processing agreements
- Legal Obligations: When required by Omani law, court order, or competent authority
- Business Transfers: In the event of a merger or acquisition; you will be notified before your data is subject to a new privacy policy
5 AI Studio & Automated Processing
Goffery AI Studio is an optional set of tools available to sellers for analysing offers, generating marketing plans, and creating ad images, video, and social media content. Using these tools involves sharing certain data with third-party AI providers, strictly for the purpose of generating the requested output:
- Google Gemini: Listing details (title, description, price, category, terms), your store profile (business name, description, category, city/country), and offer/listing photos you upload or select, for offer analysis, marketing-plan generation, ad image creation, and marketing copy.
- Runway ML: Product and character images, for AI-generated video ad creation.
- Groq: Listing details and competitor search results, for AI-written market analysis.
- Google Places API: Product name and location (city/country), for competitor discovery — no personal data is sent.
If you choose to connect a social media account to publish campaigns, you will also share data with:
- Zernio: Our social publishing partner, which brokers the connection to your social accounts and holds the resulting access tokens on our behalf — Goffery does not store your social media login credentials or access tokens.
- The social platform you connect (e.g. Facebook, Instagram, TikTok, X, LinkedIn): You authorise this connection directly on that platform's own consent screen, and published content (captions, images, video) is sent to that platform to complete the post.
AI-generated content is provided as a starting point and may not always be accurate — you are responsible for reviewing it before publishing. You can stop using AI Studio, and disconnect any connected social account, at any time from your seller dashboard.
6 Booking Data
When you use the 10% booking deposit feature, we collect and process additional data to manage the booking lifecycle:
- Booking Reference: Unique identifier linking the deposit to the offer and both parties
- Deposit Amount & Status: Amount paid, confirmation status, and refund eligibility
- Timestamps: When the booking was initiated, when the seller confirmed or declined, and any cancellation events
- Administrative Fees: Records of any fees deducted on pre-confirmation cancellations
This data is retained for a minimum of 5 years for financial audit and dispute resolution purposes, in compliance with Omani commercial regulations.
7 Data Security
- Encryption: All data encrypted in transit (TLS) and at rest
- Access Controls: Role-based access — only authorised staff can view personal data
- Regular Audits: Periodic security assessments and penetration testing
- Incident Response: Defined procedure to detect, contain, and notify affected users of any breach within 72 hours
While we apply industry-standard measures, no system is completely secure. You are responsible for keeping your account credentials confidential.
8 Types We Use
- Essential: Required for login, cart, and core functionality — cannot be disabled
- Performance: Help us understand page load times and usage patterns
- Functional: Remember your preferences and language settings
- Marketing: Deliver relevant promotions (only with your consent)
Manage your cookie preferences through your browser settings or our cookie consent banner.
9 Your Rights
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing for direct marketing at any time
To exercise these rights, email support@goffery.com. We will respond within 30 days.
10 Data Retention
- Active account data: retained while your account is active
- Transaction and booking records: minimum 5 years per Omani commercial law
- Support communications: 2 years
- Marketing data: until you withdraw consent
Upon account deletion, personal data is anonymised or erased within 30 days, except where retention is required by law.
11 Children's Privacy
The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will delete it promptly. Contact us at support@goffery.com if you have concerns.
12 Policy Changes
We may update this Privacy Policy from time to time. Material changes will be notified by email or a prominent notice on the Platform at least 14 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
