Privacy Policy

This page says exactly what we hold about you, who can see it, and how long we keep it.

Last updated 2 September 2026

1. Who holds your data

Pay It Now PNG Limited, of Section 38 Lot 36, Dakota Place, Jacksons Airport, National Capital District, Papua New Guinea, decides how your data is used and is responsible for it. Write to support@pin-mart.com about anything on this page.

2. What we store, and why

What	Why we hold it	How long
Your name, username, email address and phone number	To run your account, let the other side of a trade know who they are dealing with, and contact you about an order.	While your account is open
Your password	To sign you in. We never see it — it is stored scrambled (hashed) by our login provider.	While your account is open
Your PIN app wallet address	To pay your withdrawals to the right wallet.	While your account is open
Your listings, photos and any digital file you sell	To show your listing and to deliver a digital product to the buyer.	While the listing exists; a digital file stays while an order for it exists
Your bids, orders, feedback and receipts	To run auctions and trades, and because a receipt is a tax record.	Kept — see "Records we must keep" below
Messages you send through PINMart	To let you talk to the other side of a trade, and as evidence if there is a dispute.	While your account is open
Your money movements (the ledger)	Every top-up, purchase, release, refund and payout. This is our permanent, unchangeable record that the money adds up.	Kept — see "Records we must keep" below
Reports you make about a listing or a member	To act on scams and unsafe listings.	Kept while needed for safety
Notifications we send you	To show your notification list and to send the matching email.	180 days after you have read it or we have emailed it
Which pages were viewed, and roughly from where	To count views on a listing and to spot abuse. Not linked to advertising.	90 days, then deleted automatically
Admin actions taken on your account	So every staff decision about money or moderation can be checked later.	Kept — see "Records we must keep" below

We do not sell your personal information. We do not use it for advertising and we do not share it with advertisers.

We never hold your PIN app PIN, your PIN app password, or any card or bank account number. Payments happen inside the PIN app, not here.

3. Who can see your data

Who	What they can see
Anyone on the internet	Your username, your display name, your listings, and your feedback score.
The other side of a trade	The same public details, plus the messages you send them about that listing.
PINMart staff	Only what their role allows. Finance staff see payouts and top-ups; moderators see listings and reports. Every action is written to an audit log.
Nobody else	Your phone number, your email address, your PIN wallet address, your balance, your reserve price on an auction, and whether your account is suspended are never shown to other members.

4. Companies that process data for us

Company	What they do	Where
Supabase	Stores the database, your login and your uploaded files.	Sydney, Australia
Vercel	Runs the website itself.	Global
Resend	Sends the emails we send you.	Global
Pay It Now (PIN)	Moves the actual money. They see the payment and the wallet addresses. They do not get your PINMart messages, listings or browsing.	Papua New Guinea

These companies work for us and may only use your data to do the job above. Because some of them are outside Papua New Guinea, your data is stored overseas.

5. Records we must keep

Some records cannot be deleted on request, because they are the proof that money moved correctly and because tax law requires them.

The ledger — every movement of money. It is append-only: nothing in it can be changed or removed, by us or by anyone.
Receipts and commission invoices for completed sales.
Orders, and the record that a trade happened between two accounts.
The admin audit log of staff actions.

We keep financial and transaction records for 7 years, as PNG tax and company law require.

When an account closes we remove your personal details from these records where we can, so what is left is the money trail and not your identity.

6. Your rights

Get a copy of what we hold about you.
Fix anything that is wrong. Most of it you can edit yourself on your account page.
Ask us to delete data we do not have to keep.
Close your account.
Complain about how we handled your data.

To use any of these, email support@pin-mart.com. We answer within 30 days. We may ask you to confirm who you are first — otherwise anyone could ask for your data.

7. Closing your account

You can close your account yourself from your account page. If you cannot get in, email support@pin-mart.com and we will do it for you.

Five things must be settled first. Your account page tells you which ones are stopping you, and it will not let you close while any of them is true:

Your PINMart balance is K0.00. Withdraw what is left first — see Getting paid out.
You have no open orders, as buyer or as seller.
You have no open dispute.
You have no withdrawal still being paid.
No live listing of yours has a bid on it. Listings with no bids are fine — we withdraw those for you.

When it closes, this is exactly what happens:

Your display name becomes "Deleted user" and your username is replaced, so you can no longer be identified from a page you appear on.
Your phone number, profile photo, PIN wallet address and province are erased from your profile.
Your verified, dealer and agency badges are removed, along with any admin role you held.
Your live listings are withdrawn.
Your watchlist and your saved favourites are deleted.
The account is locked. You cannot sign in and trade with it again.

And this is what stays, because it has to:

Your ledger entries, orders and receipts — with your name no longer attached. See "Records we must keep" above.
Messages you sent, attached to the anonymised account rather than to your name. Deleting them would delete the other person’s side of the conversation too.
Feedback you left about other members, because removing it would rewrite their history.
Your sign-in email address, until you ask us to remove that as well. Email support@pin-mart.com and we will.

Closing an account cannot be undone. You would need to sign up again.

8. Keeping it safe

Every page is served over an encrypted connection.
The database refuses to hand one member another member’s private rows, not just the website — the rule is enforced in the database itself.
Staff access is by role, and every money or moderation action is written to an audit log.
Digital product files are private. Only the buyer of that order gets a short-lived download link.
A new or changed payout address is held for 24 hours before any money can be sent to it.

If you think your account has been taken over, email safety@pin-mart.com straight away and change your password.

9. Children

PINMart is not for children. We do not knowingly collect data about a child. If you think we have, email support@pin-mart.com and we will remove it.

10. Changes to this policy

If we change this page we update the date at the top. If the change is important we will also tell you by email.

Related pages: Terms of Service · Refund and dispute policy · Trust & safety.

Loading…