Your data, plainly explained.

01

Who we are, and what this covers.

Zarii is a product built and operated by EveryTech (everytech.io). We build for sellers and buyers across JAPAC — Japan and the wider Asia-Pacific region — and this policy is written for them. It covers three kinds of person: the sellers who run a shop on Zarii, the buyers who order from those shops, and anyone just visiting this site. If you have a question about your data, or anything on this page, write to support@zarii.store and a person will answer.

02

Your store’s data is yours.

Your products, your photos, your orders and your buyer list belong to you — not to Zarii. We use that data for one thing: running your store. We never sell it, never use it to advertise to anyone, and never contact your buyers for our own reasons — our chat bot only ever replies inside a conversation on your own shop’s channel, on your behalf.

We also never fold your catalogue into a marketplace next to anyone else’s: there is no Zarii storefront where your products sit beside another seller’s. You can reach your catalogue and your orders through your own AI connection, and if you want a copy of what we hold, or want it deleted, write to support@zarii.store.

03

What we collect.

• What you give us

  Your shop name, logo and settings, your product photos, your own payment QR code, and the products and stock you enter — plus, if you’re a buyer, the name, phone number and delivery address you give a seller when you order, and the payment screenshot you upload as proof.

• Collected automatically

  Standard web request logs (like an IP address and the page requested), generated by running the servers — not a tracking profile — and a small number of functional cookies that make the site work (see “Cookies” below).

• What we get from others

  Your account name and email from your sign-in provider when you sign in — including through a Google sign-in, if you use one — and, if you connect a chat app like Messenger, the messages and conversation details it hands us so the bot can reply.

04

How we use it.

To run the order book: place your order, show your seller their payment QR, hold your screenshot until the seller checks it, and move stock once the seller confirms payment. To keep your shop and your buyers’ orders separate from every other shop on Zarii. To sign you in and keep that session secure. To answer support requests. Nothing here is used to build an advertising profile, because we don’t run any advertising.

05

Who we share it with.

We use a small number of categories of outside help to run Zarii. Each one gets only what it needs to do its job for Zarii — we can’t promise you what it does with data on its own account, only what we send it and why.

• Sign-in provider Seller sign-in

  Handles your sign-in and keeps your session secure. Zarii never sees or stores your password itself.

• Hosting and database Singapore

  Runs our servers and database, hosted in Singapore. Your account, shop and order data lives there.

• File storage and delivery Private + public buckets

  Stores files in two separate places: a private one for payment QR codes and buyer payment screenshots, and a public one for product photos and shop logos.

• The chat app you connect e.g. Messenger

  If you connect Zarii’s Messenger bot, the messages are delivered by Meta. We keep just enough to answer accurately — an order code, whether a screenshot came in, the conversation ID Meta assigns to that buyer, and whose turn it is to reply — not a copy of the conversation itself. The conversation runs on Messenger, so it’s also covered by Meta’s own policies.

• The AI assistant you connect If you choose to

  Receives whatever store and order data that connection is allowed to reach — see “AI connections” below for exactly what that is.

Ask us at support@zarii.store and we’ll tell you exactly which providers we use for each of these. Beyond that, we don’t sell data, we don’t buy or trade lists with data brokers, and we don’t run Google Analytics, a Meta pixel, or any other tracking script on this site or the storefronts it powers. Our fonts are self-hosted rather than loaded from a third-party font service, so a page visit doesn’t phone home to anyone but us.

06

Cookies.

Zarii sets a small number of functional cookies — the kind that make the site work, not the kind that track you across the web. Every one below is httpOnly (your browser holds it, but no script on the page can read it), holds an opaque reference rather than your personal details, and expires on its own.

• zari_cart apps/shop · lasts 7 days

  Points at your server-side cart. Holds no prices and no personal details — just an opaque reference.

• zari_buyer_access / zari_buyer_orders apps/shop · lasts 24 hours

  Lets you reopen the order you just placed, and lets your browser find your recent orders, without an account.

• zari_admin_session apps/admin · lasts 8 hours

  Keeps a seller signed in to their own shop’s admin.

• zari_admin_handoff apps/admin · lasts 10 minutes

  A short-lived value used only while a sign-in is being completed, so a stolen link can’t seat a session in someone else’s browser.

This marketing site, zarii.ai, sets none of these itself — they belong to the storefront and admin applications a shop and its buyers actually use. We don’t use any cookie for advertising, and there’s no cookie banner because there’s nothing here that needs your consent to run.

One more: signing in to the seller admin runs through our sign-in provider’s own hosted sign-in, which sets its own cookies under its own policy, not ours. The list above only covers the cookies Zarii itself sets.

07

Connecting your own AI assistant.

A seller can connect an AI assistant they already use — Claude, ChatGPT and the like — to their shop through Zarii’s MCP server. There are two ways to connect: signing in with your own Zarii account through the assistant’s own connector (the same sign-in you use everywhere else on Zarii), or creating a revocable API key in the seller admin. Either way, the seller can disconnect it whenever they want.

Once connected, an assistant can manage the catalogue — products, prices, stock, variations, photos, size guides and publishing — create new stores, and update the shop’s name and logo. It can also read orders: every item and amount, both the payment and fulfillment status, and each buyer’s name, phone number and delivery address when the order has one. It can hand the seller a link to the admin page where they upload their own payment QR.

An assistant can also set how a product reaches the buyer — shipped or digital, with unlimited copies or a fixed number — because that is a catalogue change like any other. Marking a digital order’s file as sent is different: it needs an API key the seller has scoped to orders:fulfil. Signing in with a Zarii account does not grant that scope, so an assistant connected that way can set a product to digital but cannot mark an order sent; only a seller-issued API key with that scope ticked can.

It cannot confirm or reject a payment — there is deliberately no tool for that; only the seller does it, in the admin, next to the actual screenshot. And it cannot open a buyer’s payment screenshot or the seller’s QR image itself: the most a connected assistant can learn is whether a proof is waiting for review, never the picture.

Connecting an assistant this way means choosing to share your store’s catalogue and order data — including your buyers’ names, phone numbers and delivery addresses — with that assistant’s provider. What that provider then does with what it reads is governed by its own terms and privacy policy, not Zarii’s.

08

Where your data lives, and transfers.

Our servers and database run in Singapore. Wherever you or your buyers are signing in from, using Zarii means your data is transferred to Singapore to be processed and stored there. We protect it the same way, and hold it to the same standard, no matter where that is. Product photos, shop logos, payment QR codes and payment screenshots are stored in our object storage network.

09

How long we keep it.

We keep your data for as long as your account or shop is active, and delete it on request, except where the law requires us to keep certain records for longer (tax and accounting rules, for example). Some things expire automatically on their own short clock regardless of account status: a signed link to a private file (five minutes to view one, fifteen minutes to upload a new payment QR), an abandoned cart (seven days), a sign-in session (up to eight hours for a seller admin session). There’s no self-serve “delete my account” button yet — write to us at support@zarii.store and we’ll act on the request ourselves.

10

Security, honestly stated.

Traffic to Zarii is encrypted in transit. A seller’s payment QR code and a buyer’s payment screenshot both go into a private storage bucket with no public access, never the public one that serves product photos. They’re never given a permanent public link — instead, the one place that needs to see them gets a short-lived signed link: five minutes to view one, fifteen minutes for a seller to upload their own QR. After that, the link stops working and a new one has to be requested. A buyer’s authorization to view or pay for their own order is a long, random value we never display back to them after it’s issued; we only ever store a hash of it, the same way we’d store a password. No system is unbreakable, and we won’t claim otherwise — if something goes wrong, we’ll tell affected sellers and buyers plainly, the same way we’re writing this page.

11

Your rights.

Wherever you are, you can ask us to let you see what we hold about you, correct it if it’s wrong, delete it, object to how it’s used, or withdraw consent you’ve given us. Write to support@zarii.store and we’ll respond. Because these requests touch personal data, we may need to confirm you’re the person the account or order belongs to — for example, by confirming the email or phone number on file — before we act on it. If you’re a buyer and your question is about how a specific seller uses your order details, the seller you ordered from is also responsible to you for that, as explained above; asking them directly is often the fastest path. See “Wherever you are in JAPAC” below for how to reach your own local authority.

12

Wherever you are in JAPAC.

Zarii is built for sellers and buyers across Japan and the Asia-Pacific region, and local privacy law travels with you wherever you are in it. Whatever rights your own country’s law gives you, we’ll honour them — write to us at support@zarii.store and we’ll help. You can also raise a concern with your local data protection authority at any time.

13

Zarii is for adults running a business.

A Zarii seller account is for people 18 or older running a real business. We don’t knowingly collect account data from anyone younger, and we don’t knowingly market Zarii to minors.

14

If this changes.

If we change how Zarii collects or handles data, we’ll update this page and change the date at the top. We won’t backdate a change or apply it quietly.