Back to home

Privacy policy

Effective date: 22 July 2026

This policy explains what personal data Rapid Cart collects, why, and what rights you have. We keep it short and honest — we collect only what the service needs to work.

1. Who we are

Rapid Cart (rapid-cart.com) is operated by BAP Software, the data controller for the personal data described here. Contact: info@bap-software.com.

2. Data we collect

Sellers (registered users):

  • Name and email address (from registration or Google sign-in)
  • Password, stored only as a cryptographic hash
  • Profile data you provide: handle, display name, welcome text

Buyers (visitors placing order requests):

  • Name and email address
  • Phone number and delivery address, if you choose to provide them
  • The content of your order request (item, price offer, wishes)

Technical data: our hosting provider keeps standard server logs (IP address, browser type) for security and abuse prevention. We do not use advertising trackers or profiling.

3. Why we process it

  • To provide the service — deliver order requests from buyers to the seller they chose (performance of a contract)
  • To send transactional emails: order confirmations to buyers and notifications to sellers (performance of a contract)
  • To keep the service secure — rate limiting, spam prevention (legitimate interest)
  • To comply with legal obligations where applicable

4. Who we share it with

When you submit an order request, your details go to the seller whose page you used — the seller then processes them independently to fulfil your request. Beyond that we share data only with the processors that run the service: Vercel (hosting), Neon (database), and our email delivery provider. We never sell personal data.

5. International transfers

Our processors may process data in the EU and the United States under appropriate safeguards such as EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Retention

Seller account data is kept until the account is deleted. Order data is kept while the receiving seller's account exists, so both sides can refer back to it. You can request deletion at any time (see below).

7. Your rights

Under the GDPR (and similar laws), you can request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and a portable copy of data you provided. You can also complain to your local data protection authority. To exercise any right, email info@bap-software.com.

8. Cookies

We use only essential cookies. See the cookie policy for details and settings.

9. Changes

If we change this policy, we'll update this page and the effective date. Significant changes will be announced to registered users by email.