1. What this policy covers
This policy explains what information Vasllink collects, why, who sees it, and the choices you have. Vasllink is operated by Farda Royan (Herat, Afghanistan; licence no. 108705), which is responsible for this information.
2. Information you give us
- Account: your phone number (needed to sign in), your name, and the language you choose.
- Company (if you sell): name, province and city, phone and WhatsApp numbers, slogan, description, logo and photos, branches (address, hours and phone), certificates and the company's own claims, and products with photos and prices.
- Verification documents: for a company — business licence, the owner's tazkira, proof of address and factory photos; for a buyer applying for Silver or Gold — the name and province of the business, a trade document, a shop photo and a tazkira.
- Your activity: order requests (quantity, note and handover choice), requests (title, quantity, budget, province and deadline), quotes, ratings, comments, reports, liked products, followed companies and blocked accounts.
- Messages: the text and photos you send in conversations.
3. Information collected automatically
- IP address and technical logs (the time and type of requests) — for security, to prevent abuse, and to limit how often sign-in codes can be asked for.
- Product views: opening a product counts once. The company sees only the number of views, never who viewed.
- On your phone: sign-in keys, your language, and a copy of recently opened content so the app works on a weak connection. Uninstalling the app removes all of it from the phone.
4. What we do not collect
- We do not collect your location (GPS).
- We have no access to your contacts.
- We access your camera and photos only when you choose a photo to send.
- There are no third-party advertising or analytics trackers in the app.
- We never ask for bank or card details, because no money changes hands in Vasllink.
5. How we use it
- to create your account and sign you in;
- to show companies and products, and deliver order requests, quotes and messages;
- to review company and buyer verification;
- to show trust signals, such as your buyer tier and completed orders, to a seller you ask to order from;
- for security, fraud prevention and handling reports;
- to answer you through support;
- to improve Vasllink using overall statistics;
- to meet legal requirements.
We do not sell your information, and we do not use it to show you advertising.
6. Who sees what
- Everyone, including people not signed in: company pages, products, a company's public claims and certificates, and comments and ratings you post under your name.
- The other party: when you send an order request or a message, the company sees: your name; your business's name and province, if you have given them; your buyer tier at the time of the order; your number of completed orders, overall and with that company; and anything you write in a note or message. Your phone number is not shown to the company.
- Verification documents: seen only by our reviewers. Never made public — only the outcome (the tier, and the "Verified by Vasllink" mark) is shown.
- Telegram: receives your phone number to deliver your sign-in code. Telegram's own privacy policy applies to it.
- Our hosting company: we rent the servers and file storage from a hosting company. It accesses the information only to run Vasllink.
- Competent authorities: when the laws in force require it, or when needed to protect someone's safety or prevent fraud.
- If the business is transferred: the information goes with it, and we will tell you beforehand.
7. Storage and security
Information is stored on the servers we rent and travels encrypted between your phone and those servers. Only staff who need it for their work can reach it, and verification documents are kept in separate, restricted storage. No system is completely safe; if a breach affects you, we will tell you.
Those servers may be outside Afghanistan, and buyers outside Afghanistan use Vasllink too, so your information may be stored, seen or processed in another country.
8. How long we keep it
- Account and company information: while your account is open.
- After you delete your account: account information is removed within 30 days. Records of orders and conversations with others are kept for up to 3 years, because they belong to the other party too and may be needed to settle a dispute or meet a legal requirement; your name is not shown beside them during that time.
- Verification documents: while the tier stands, and for 1 year after a rejection, withdrawal or account deletion, to prevent fraud.
- Technical logs: up to 90 days.
9. Your choices
- view and correct your name, language and company information in the app;
- delete your own comments, and block others in conversations;
- ask for a copy of your information;
- ask for your account to be deleted. Until that option is in the app, ask through support (section 12). We confirm the number is yours before deleting, and reply within 30 days.
10. Children
Vasllink is for people aged 18 or over. If we learn an account belongs to someone younger, we delete it.
11. Changes to this policy
If we change this policy, we will announce material changes in the app before they take effect. If the Dari, Pashto and English versions differ, the Dari version governs.
12. Contact us
- Phone and WhatsApp: +93 79 291 8156
- Email: info@vasllink.com
- Address: Farda Royan, Herat, Afghanistan