1Who handles your data
Mercatren LLC, a company registered in the United States, operating under the Mercatren brand. For any privacy matter, write to us at hola@mercatren.com.
2What data we collect
| Data | Where it comes from | What it's for |
|---|---|---|
| Name and email | You enter it when creating your account | Identifying you, verifying your payments, and notifying you about orders |
| Password | You choose it | Signing in. Stored encrypted: not even we can read it |
| Phone and delivery address | You enter it when placing an order | So the merchant can deliver the product |
| Your orders | Generated when you buy | Fulfilling them, reconciling payment, and keeping the books |
| Payment receipts | You upload them | Verifying payment against the bank before approving it |
| Technical data | Your browser, when you visit | Keeping your session open and detecting unusual use |
3Payment receipts
The screenshot you upload is the most sensitive data we handle: it usually shows the account holder's name, the bank, and the last digits of the account. That's why it has its own rules.
Only you and the Mercatren team can see it: no other customer can open it, not even with the direct link. Anyone it doesn't belong to gets told it doesn't exist.
The merchant doesn't see it: the merchant is told their sale was verified and credited, not shown your receipt image.
It's stored in our own storage: under an unguessable name, not in a public folder.
It's used only to verify: it isn't published, isn't shared, and isn't used for anything else.
4What we use your data for
Running the service: creating your account, processing your orders, verifying payments, and keeping you posted at every step.
Meeting our obligations: verifying the buyer's identity, screening against sanctions lists, detecting unusual transactions, and retaining the file for each operation.
Improving the service: understanding what people search for and what breaks, in aggregate, not by looking at individual cases.
5Who we share it with
The merchant you buy from: only what's needed to deliver: recipient name, address, phone, and what was ordered. We don't give them your receipt or your banking details.
The providers that keep the site running: whoever hosts the platform and whoever delivers the emails. They act on our instructions and can't use your data for anything else.
Banks and authorities: when the law requires it, or when a specific transaction needs to be evidenced to someone entitled to ask.
6How long we keep it
Transaction records: five years: that's the retention period we apply to orders, payments, and receipts. A reviewer must be able to reconstruct any operation.
Your account: as long as it's open: if you close it, we delete what we aren't required to retain.
Technical data: a few months: just enough to detect problems and unusual use.
7Your rights
By writing to hola@mercatren.com from your account email, you can ask us to:
Send you a copy of the data we hold about you.
Correct anything that's wrong.
Delete your account and anything we aren't required to retain.
Stop sending you non-essential notices.
We answer within 30 days. If we can't delete something because the law requires us to keep it, we'll tell you what and why.
9Security
The whole site is encrypted (HTTPS), including forms and receipt images.
Passwords are stored one-way encrypted: no one on the team can read them.
Inside the panel, each supplier sees only their own transactions and what was purchased from them. This is enforced and covered by automated tests.
Access to payment data is limited to the team that verifies.
10Minors, changes, and contact
Minors: the service is for people 18 and over. We don't knowingly collect data from minors.
Changes: if we change this policy, we update the date above and tell you when the change is significant.
Contact: hola@mercatren.com. It's a real inbox and we answer.
Mercatren is a brand of Mercatren LLC, a company registered in the United States.