Privacy policy

Browsing needs no account and we do not ask for one. Signing in uses Telegram, so we never see or hold a password. Selling means your listing and your Telegram handle are public, because that is how a buyer reaches you. We take no payment, so we hold nothing financial. We do not sell data and we run no advertising or tracking networks.

Bazio hosts many community marketplaces. Each one is run by its own community, and this policy covers the platform underneath all of them.

Signing in is handled by Telegram. We ask Telegram only for your basic profile, which is your numeric user id, your handle, your display name and your profile photo. We deliberately do not ask for your phone number, so we never receive one this way, and we never ask Telegram for permission to act on your behalf. Bazio does not post as you and cannot read your private chats.

Because Telegram does not give us an email address, an internal placeholder address is generated for your account record. It is not a real mailbox, nothing is ever sent to it, and it is not shown to anyone.

Where a marketplace requires membership of its Telegram group, we ask the community bot whether you are currently in that group and remember the answer for a few hours so we are not asking constantly. We do not read the group on your behalf, and we see nothing about your other groups.

• Your numeric Telegram user id, which is the permanent identifier for your account because a Telegram handle can be changed or reused
• Your Telegram handle, display name and profile photo, refreshed when you sign in unless you have set your own
• Whether you are currently a member of the Telegram group a marketplace requires, re-checked from time to time through the community bot
• Anything you write on your own profile: display name, profile address, short bio, country, a website link and a social link
• A phone number, an email address or business details, only if you choose to give them for a verification check
• The listings you publish, and their moderation history including approvals, refusals and the reason given

The numeric Telegram id is what keeps a reputation attached to the right person even after a handle changes hands. A phone number, an email address and anything you submit for a verification check are never published and are visible only to administrators.

This is the part worth reading even if you have never used this website. When a community connects its Telegram group to Bazio, posts in that group that read as something being offered are turned into listings on that community marketplace. That can include your post, whether or not you have an account here.

• The Telegram user id, handle and display name shown on the message
• The text or caption of the message, and any photos attached to it
• The identifiers of the group and the message, so the same post is never turned into two listings
• Which community marketplace received it, and what the message was judged to be

The original Telegram message is discarded once it has been read. We do not keep who forwarded it, reply chains, contact cards, location pins or anything else in the wider message. Posts that are not an offer of something are ignored, and anything that is not published is not visible to the public.

If a listing was made from your post and you do not want it there, ask the owner of that marketplace or write to us at legal@bazio.app and we will take it down.

Photos you upload, and photos pulled from a group post, are stored on the content network that serves this site. They are held under an unguessable address, but they are not access-controlled: anyone holding the exact link can open the image. Do not put anything in a photo you would not want seen publicly, such as a document, a plate, an address or a screen showing personal details.

Removing a listing takes its photos off the site immediately. The stored copy may persist on the content network for a period afterwards, and we remove it on request.

You can browse the entire platform, open any listing and message a seller without creating anything. We record a small amount of usage data so administrators and community owners can see what is working.

• Which listings, categories and seller profiles are opened, and which searches are run
• When somebody taps through to a seller on Telegram, so a marketplace can see how its listings perform
• Whether a visit arrived from Telegram, from a search engine, or directly, recorded only as one of those buckets and never as the full address you came from
• A short one-way fingerprint of the visitor address, used to tell one visit from another

None of this identifies you by name. We do not store your visitor address itself: it is turned into a one-way fingerprint with a secret value before it is written, so it cannot be turned back into an address. We set no analytics cookies, and we use no third-party analytics service. The cookies on this site are the ones that keep you signed in, which exist only if you sign in, and one more for Telegram community owners: opening an invitation link from Bazio, or pressing Connect on a directory group, sets a cookie for up to 30 days that only records which invitation or group you came from, so a marketplace application can be matched to it. It does not identify you and grants nothing.

Saving a listing to your favourites stores a random identifier that your own browser creates. It is turned into a one-way fingerprint before it reaches us, so we can count saves without knowing who saved anything, and only the total is ever public.

If you publish a listing, or a listing is made from your group post, the following becomes visible to anyone, including search engines.

• Your display name, profile photo, Telegram handle and anything you wrote on your own profile
• Your verification badges and business status
• The month and year you joined
• Your live listings, how many you have completed, and the full contents of anything you publish
• How many people have viewed or saved each of your listings, as a total only

A report on a listing records the listing, the reason chosen, anything you wrote, a contact detail if you chose to leave one, and a one-way fingerprint of your visitor address so that repeated abuse of the report form can be spotted. Your raw address is not stored.

Every moderation decision is written to an internal record with who made it, when, and why. Where the decision was assisted by an automated check, the model verdict and its confidence are stored alongside it. Reasons written for moderators are internal and are not shown to the seller.

The Telegram group directory lists public Telegram groups and channels that our team has checked. It records each group’s public name, public link, the place and languages it serves, and, when we have read it ourselves, its public member count and the date we read it. It never lists a private group or a private invite link.

Suggesting a group records the group’s public link, the country, whether you said you run it, a contact detail and a note if you chose to leave them, your seller account if you were signed in, and a one-way fingerprint of your visitor address so that repeated abuse of the form can be spotted. Your raw address is not stored, and nothing you suggest is published until our team has checked it.

Our team also keeps a private list of public Telegram communities we may invite to run a marketplace on Bazio. It holds the same public facts as the directory, plus, where a community published one, the public Telegram username it gave as a contact, and a record of when a member of our team messaged that contact and how the invitation went. Messages are written and sent by a person, never automatically, and the text of any conversation is not stored. We never collect member lists or read group messages for this. If you would rather not be contacted, tell us and we will record that and not contact you again.

A small language model is used in three places: to work out whether a group post is an offer at all, to check a listing against the marketplace rules, and to sort it into a category and prepare its appearance. It is sent the listing content only, meaning the text and up to three photos, and it is given no account record, no identifiers and no contact details. Our team can also use it, on request, to suggest web searches for public Telegram communities and to reword Bazio’s own invitation messages; for that it is given only a country, a city, a category, a language, a community’s public name and our message text, never anything from a Telegram conversation.

No automated decision permanently closes an account. A listing the check is unsure about is held for a person in that community to look at, with the reason attached, and a refusal can be appealed to that community or to us.

• Telegram — sign-in, the community bot that reads group posts, and publishing back to a community channel. Telegram is the identity provider and the messaging layer, and their own privacy policy applies to everything that happens inside Telegram.
• OpenAI — a small model that reads listing text and photos to sort a listing into a category and check it against the rules. It is sent the content only, never your account, your ids or your contact details, and it is not used to identify anyone.
• Our hosting and file storage provider — runs the database and holds uploaded photos on the content network that serves this site.

That is the complete list. There is no payment processor, no email marketing platform, no advertising network and no data broker involved anywhere on this platform.

A marketplace owner and the moderators they appoint can see, for their own community only: the listings it received, the display name, handle and photo of the people who posted them, the Telegram handle a buyer would use to make contact, reports made about those listings, and a record of what their own team did.

They cannot see your email address, your phone number, anything you submitted for a verification check, your numeric Telegram id, or any activity in another community. Running one marketplace grants nothing in anyone else's.

• We do not sell or rent personal data to anyone, ever.
• We run no advertising network, no advertising pixel and no cross-site tracking.
• We use no third-party analytics service. The usage statistics on this site are our own and use no cookies.
• We take no payment on this platform, so we hold no card details, no bank details and no wallet.
• We have no access to conversations between a buyer and a seller, because those happen inside Telegram.

Listings and their moderation history are kept while your account exists, because together they are the seller record a marketplace relies on. Removing a listing yourself takes it off the marketplace but keeps the record of it.

Messages waiting to be turned into listings are deleted automatically two days after they have been dealt with. Sign-in sessions expire after seven days, expired ones are cleared automatically, and if you leave a Telegram group a marketplace requires, your sessions for it are ended.

Usage statistics, the moderation record and reports are currently kept for as long as the marketplace they belong to exists, because they are what allows a dispute or a repeat offender to be dealt with later. We do not yet delete them on a fixed schedule, and we would rather say so than imply a retention period we do not enforce. When a marketplace is closed, its listings, reports, statistics and verification records are deleted with it, while accounts and the moderation record are kept.

You can ask us what we hold about you, ask for a correction, ask for a copy, ask for a listing or your whole seller account to be removed, or object to something we do. You can also ask a community owner to take down a listing made from your post.

There is no self-service delete or export button on this platform yet, so these are handled by a person. Write to legal@bazio.app from an address or Telegram account we can match to you, and we will act on it. We will tell you what we did.

Some records are kept even after a removal request where there is a legitimate reason to keep them, for example a fraud report or a ban that exists to protect other members. We will tell you if that applies to you.

Credentials and API keys are stored encrypted and are only ever read on the server. Where a community connected a bot of its own before Bazio ran a shared one, that token is sealed and is never shown again, not even to its owner. Administrator passwords are stored as salted hashes and never in readable form.

Sessions are held in cookies that JavaScript cannot read, and the session token itself is stored hashed, so a copy of our database does not hand anyone a working login. Sign-in sessions record the address and browser they were created from, so an unfamiliar session can be recognised.

No system is perfect. If you believe you have found a security problem, contact us before disclosing it publicly.

Privacy questions and data requests: legal@bazio.app. The operating entity and its place of establishment have not been stated yet and are to be completed by the operator.

If you want to understand what the platform does before reading the detail, the how Bazio works page explains it in plain language, and the terms and conditions set out the rules.