Privacy Policy

Last updated: 2026-08-15

This Privacy Policy explains how OSTA ("OSTA", "we", "us") collects, uses, and shares information when you use the OSTA mobile application (the "Service").

1. Information we collect

1.1 Account information

When you create an account we collect:

• Your email address
• Your display name and username
• An optional profile photo and bio
• Your country (used for storefront default language and currency)

1.2 Content you create

We store the videos, live broadcasts, product listings, comments, reviews, and messages you create through the Service.

1.3 Usage information

We collect basic device and usage information such as:

• Device model and operating system version
• App version
• Crash reports and uncaught exceptions (via Firebase Crashlytics)
• Aggregated analytics about how features are used

1.4 Payment information

Payments are processed by Stripe. OSTA never stores your full card number. We store only the last four digits, the card brand, and the Stripe payment reference for the order.

Cash-on-delivery orders store only your delivery address and contact phone number.

2. How we use information

We use the information we collect to:

• Operate, maintain, and improve the Service
• Authenticate you and protect your account
• Process orders and pay sellers
• Send you notifications about orders, follows, likes, and comments
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Sharing

We do not sell your personal information. We share information only:

• With service providers that help us operate the Service (Supabase for data and storage, Cloudflare for video delivery, Stripe for payments, Firebase for crash reporting). Each provider is contractually required to protect your information.
• With other users, as needed to operate the Service (for example, your display name appears next to your comments and orders).
• When required by law or to protect the rights, property, or safety of OSTA, our users, or others.

4. Your rights

You can:

• Access and update your profile information from the in-app profile editor.
• Delete your account at any time from Settings → Delete account. Deletion is permanent and removes your profile, content, and order history.
• Request a copy of your personal data by emailing marketing@mtadv.com.

5. Data retention

We retain your account data while your account is active. When you delete your account we delete your personal data within 30 days, except where retention is required for legal, tax, or accounting purposes (for example, completed order records).

6. Children

The Service is not directed at children under 13 (or the age of digital consent in your country). We do not knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.

7. International transfers

OSTA uses service providers in multiple countries. By using the Service you understand that your information may be transferred to and processed in countries other than your own.

8. Security

We use industry-standard safeguards (HTTPS in transit, encryption at rest where supported, row-level security in our database) to protect your information. No system is perfectly secure; if you suspect a breach, please contact us immediately.

9. Changes

We may update this Privacy Policy from time to time. The "Last updated" date above will reflect any changes. Continued use of the Service after a change constitutes acceptance.

10. Contact

Questions? Email marketing@mtadv.com.