Privacy Policy

Mezad is an online auction marketplace for electronics, operated from the Kurdistan Region of Iraq and reachable at https://mezad.krdcode.com. This policy covers the Mezad website and the Mezad iOS and Android apps.

• Account details — name, email address, phone number and the sign-in method you choose.
• Profile details — city, country and delivery address you enter during onboarding, so won lots can be shipped.
• Bidding activity — the lots you view, watch, search for and bid on, plus resulting orders, payments and receipts.
• Identity documents — only if you choose to complete identity verification in order to bid above our verification threshold.
• Device data — push notification token, app version, platform and language, so alerts reach the right device.

• Run auctions: accept bids, apply increments, decide winners and create orders.
• Send you alerts you have enabled — outbid, bid accepted, auction ended, saved-search matches and announcements.
• Verify identity and prevent fraud, shill bidding and payment abuse.
• Handle payments, refunds, disputes and seller payouts.
• Meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

We share only what is necessary with the providers that make the service work: our cloud database and authentication host, Firebase Cloud Messaging for push notifications, and the payment providers you choose at checkout. Sellers see the delivery details required to ship a lot you have won. We may disclose data where the law requires it.

Account and profile data is kept while your account is open. Bids, orders, payments and receipts are retained after account closure, in anonymised form, because auction and financial records must be kept for legal and accounting purposes. Identity documents are deleted when your account is deleted.

You can delete your account at any time, without contacting us: open the Mezad app and go to Profile → Delete my account. Deletion is immediate and permanent.

We remove your name, email, phone number, address, saved searches, watchlist, alerts, registered devices and any identity documents. Past bids and orders remain in the auction record but are detached from you and shown as "Deleted user". If you cannot access the app, email privacy@krdcode.com and we will delete the account for you.

You may request a copy of your data, correct it, restrict how it is used, or object to processing. Contact privacy@krdcode.com and we will respond within 30 days.

Mezad is not intended for anyone under 18. We do not knowingly collect data from children; if we learn that we have, we delete it.

Data is transmitted over encrypted connections and stored with access rules that limit each account to its own records. Identity documents are held in private storage reachable only by reviewers.

We will update this page when our practices change and revise the date above. Questions or requests: privacy@krdcode.com.