Privacy Policy

Baghza is a neighborhood produce-sharing platform operated by GSB Team, based in Salt Lake City, Utah. We are the data controller for all personal information collected through the Baghza platform.

Questions about your data? Email us: hello@baghza.com

We collect the following categories of information:

Account Information

• Your full name and email address
• Your neighborhood or general location name
• Account status and role (e.g., approved, pending)

Location Data

• Precise GPS coordinates when you use the map view or post a listing. We treat this as sensitive personal information.
• Approximate neighborhood location displayed to other users on the map.

Photos You Upload

• Photos of your produce, garden, or profile. These are stored in Supabase storage and are publicly accessible via URL once uploaded.
• We strip GPS metadata (EXIF data) from photos before storage. However, photos may still reveal your approximate location visually — do not upload images that show your exact address or identifiable home exterior without understanding this risk.

Trade and Messaging History

• Records of trades you have initiated or received
• Messages you send to other users through the platform
• Listings you have posted or claimed

Garden Tracking

• Plants and produce you add to your personal garden tracker within Baghza

Technical and Device Information

• IP address, browser type, and device type
• Error logs and crash reports (via Sentry)
• Page view analytics (via Vercel Analytics) — no cookies, no cross-site tracking

We do not sell your personal data. We share data only with service providers necessary to operate Baghza. Here is every third-party service we use and what data they receive:

When you use the map view or post a listing, Baghza collects your precise GPS coordinates. We treat this as sensitive personal information.

Here is how we handle it:

• What we store: Your exact coordinates when you post a listing or use the map. We show only an approximate location pin to other users.
• What we share: Approximate (not exact) location is shown on the public map. Exact coordinates are sent to Mapbox for map rendering.
• Your control: You can deny location permission in your browser or device settings at any time. Doing so will limit map and posting features.

Photos you upload to Baghza are stored in Supabase storage with a publicly accessible URL. Anyone with the URL can view your photo.

We strip GPS metadata (EXIF location data) from your photos before storing them. However, photos themselves may visually reveal your approximate location (e.g., street signs, house features). Please be mindful of what appears in your photos.

When you post a photo, it is also sent to OpenAI’s API for AI produce identification. Please see OpenAI’s privacy policy at openai.com.

We keep your data for as long as your account is active. If you close your account from your profile settings, we remove or anonymize your personal profile information, hide your listings, delete garden tracking data, and disable your login. We keep only limited anonymized safety records where needed to resolve disputes, protect neighbors, or meet legal obligations.

You can delete your account from Profile Settings. You can also contact us at hello@baghza.com for help with a data request.

You have the right to:

• ✓Access the personal data we hold about you
• ✓Correct inaccurate or incomplete data
• ✓Delete your account and personal profile data
• ✓Object to or restrict certain uses of your data
• ✓Receive a copy of your data in a portable format

You can delete your account from Profile Settings. To exercise any other rights, email us at hello@baghza.com. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• ✓The right to know what personal information we collect, use, and disclose
• ✓The right to delete your personal information
• ✓The right to opt out of the sale of your personal information
• ✓The right not to be discriminated against for exercising your CCPA rights

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

To exercise your California rights, contact us at hello@baghza.com.

Baghza is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a user under 18, we will delete it promptly. If you believe a minor has created an account, please notify us at hello@baghza.com.

We review and update this Privacy Policy at least once per year. When we make changes, we’ll update the “Last updated” date at the top. If changes are material (e.g., new data sharing arrangements), we’ll notify you by email or in-app notice.

Your continued use of Baghza after any update constitutes acceptance of the revised policy.