Who handles your information
Mercato Commerce is a multi-store client. When you connect to or buy from a store, that merchant determines how customer, order, delivery and payment information is processed for its business. The merchant is responsible for its lawful basis, retention schedule, processors, international transfers and published privacy notice.
The Mercato app provides technical controls and secure client storage. Those controls do not replace a merchant’s legal obligations. Review the store documents shown in Settings → Privacy before transacting.
Information the app may handle
- Contact information: name, email address and telephone number.
- Delivery and billing information: physical address and selected delivery method.
- Commerce information: cart, purchase history, order, fulfilment, cancellation, return and quote-request details.
- Account and device identifiers needed to authenticate an account, retain signed guest access or register transaction notifications.
- Other information you deliberately submit to a merchant, such as support, return or quote-request text.
- Product interactions and search history only when a compatible merchant offers analytics and you explicitly opt in.
The app’s Apple privacy manifest declares these categories for app functionality or optional analytics. It declares that the app does not track users across other companies’ apps or websites.
How information is used
Information is used to connect to a selected store, display its catalog, keep a cart, create authoritative checkout quotes, complete the payment method you select, provide orders and fulfilment, maintain an account, respond to requests and deliver opted-in transactional notifications. The app does not calculate authoritative prices, tax or delivery charges itself.
When information leaves the device
The app sends commerce requests to the HTTPS origin of the store you explicitly connect. Depending on that store’s configuration and your actions, the merchant may send required information to payment, delivery, email or notification providers disclosed by that merchant. Card entry is handled by the configured payment provider; Mercato does not store full card numbers.
Apple may process device and notification data under Apple’s terms when you install the app or enable notifications. The website is a static informational site and does not use advertising cookies or third-party analytics.
Storage and retention
Account and signed order credentials are stored in the iOS Keychain. Store-scoped cart, account, order, favorites, market and notification state are isolated from other connected stores. Exiting a store preserves that local state for reconnection; removing a store clears that store’s local namespace.
Merchant-side retention is controlled by the connected merchant and may include records that must be retained for tax, fraud prevention, dispute or accounting duties. Account deletion may therefore anonymize legally retained records rather than erase required transaction evidence.
Your controls and rights
- Enable or disable optional analytics in Settings → Privacy.
- Export authenticated customer data from the Privacy Center when the store supports accounts.
- Initiate account deletion in the app when account creation is available.
- Disable notifications in the app or iOS Settings.
- Remove a saved store and its local device data.
- Contact the merchant for access, correction, objection, restriction, portability or deletion requests concerning merchant-held data.
Instructions for deletion are also available on the Account Deletion page.
Security
Mercato requires HTTPS, rejects credentials embedded in store URLs, verifies store identity before loading saved secrets, uses same-origin API links and keeps bearer credentials in Keychain. See the Security page for reporting guidance and scope.
Changes
Material changes will be reflected here with a revised effective date. A connected merchant may update its own policy independently.
Contact
For an order, account, payment, delivery or merchant privacy request, use that store’s support and privacy links in the app. For an issue with the shared Mercato iOS client or this policy, use the public project support channel listed on the Support page.