Your privacy, in plain English

Most privacy policies are written to never be read. We'd rather just tell you what we collect, why, and what we don't do. Anything unclear? Email hello@asianmall.com and a real person will explain it.

What we collect

Only what we actually need:

Your email, when you make an account. That's the starting point.

Whatever you put in a review or photo: your display name, your words, your pictures. Reviews are public; that's the whole point of them.

Your name and email, when you suggest a business, so we can confirm your email and review your suggestion. If you submit as a business representative or claim a listing, we also collect the contact details you provide, including your phone if supplied, to verify your authority to manage that business. If you ask us to email you about adding or managing a business, we also keep the consent wording, request time, confirmation time, and page where you asked so we can prove what you agreed to. For guest suggestions, the private consent record includes the agreement wording and the accepted Terms version and content fingerprint.

Business correspondence, if you ask about advertising, sponsorship, creator work, support, or another partnership. Those records may not be connected to your consumer account because you can contact us while signed out.

If you sign in with Google, Google confirms your identity to us and shares your name and email, the same basics as an email signup. We never see your Google password.

Payment details are not collected during Early Access. AsianMall is free during Early Access. If we introduce optional paid features later, payment details will go straight to our payment processor. We will not see or store your full card number.

Your location for nearby results. When you tap "Near me" and allow location access, distance sorting sends your coordinates to AsianMall and our database provider to find nearby businesses. We do not add those coordinates to your account profile or shareable page link. Request information may also be processed by our hosting and diagnostic providers. Closing the tab clears the location held in that tab.

Usage and diagnostics. We measure visits and broad product actions using Vercel Analytics and Google Analytics 4 so we can understand how people find AsianMall and whether the directory works. The events sent to Google Analytics do not include email addresses, names, review text, photo filenames, search terms, precise location, or our account and listing identifiers. We also keep limited first-party events such as listing views, referral source, and saved or visited actions. Signed-in first-party events may be linked to your account until you delete it; account deletion removes that link. If something errors, our error-monitoring tool (Sentry) records diagnostic details about that session to help us fix bugs. Session Replay is disabled. We remove query strings and URL fragments from captured request URLs and navigation breadcrumbs.

What we don't do

We don't sell your data. We don't run ad networks that follow you around the internet. And we don't email you marketing you didn't ask for. Every marketing or engagement email has an unsubscribe link, and we honor it.

Who else touches it

A few trusted services keep the lights on, and we only ever hand each the bare minimum it needs: Supabase (our database and sign-in), Vercel (hosting and cookieless page analytics), Resend (the emails), Stripe (payment processing if optional paid features are introduced), Google ("Continue with Google" sign-in, business location info for a listing, and Google Analytics 4), OpenRouter (the AI behind "Ask AI", business-submission screening, review summaries, and admin-requested feedback summaries: the relevant question, submission, public review, or feedback text is passed through no-collection/zero-retention routing to generate a response, and we also redact common contact details before review and feedback summaries), Anthropic (a fallback for staff-created listing drafts based on public catalog facts),Sentry (error monitoring), Cloudflare (the bot check on sign-up, business submissions, and owner email requests, which sees your IP address), and Upstash (rate limiting to prevent abuse, which also sees your IP address). Each keeps your data only to provide its part of the service.

Cookies

We use an essential cookie that keeps you signed in. Google Analytics may also set analytics cookies to distinguish visits and measure aggregate usage. We do not currently enable Google advertising personalization or use ad-network trackers. We do not load Google Analytics when your browser sends Global Privacy Control or Do Not Track. Content blockers may also limit analytics collection. The bot check on sign-up and business submissions may set a short-lived Cloudflare cookie to confirm you're human.

Your choices

You can download a copy of your account data or delete your account yourself from your dashboard. Deletion removes your profile, reviews and photos, saved lists, account-linked submissions, listing-owner contact details, mailing history, and consent record, and removes your account identifier from aggregate analytics. We retain only narrow records needed for safety, fraud/security, and legal compliance: reports you filed about abuse or illegal content, the history of a privacy request, privileged-action audit records, and the minimum email-suppression entry needed to make sure we do not market to the deleted address again. If paid features are introduced later, legally required transaction records may also be retained. Records you submitted while signed out or as part of a separate sponsor, creator, or business relationship may not be linked automatically; email hello@asianmall.com so we can locate them. You can also unsubscribe from any marketing or engagement email using the link at the bottom of it, and ask us for help editing or removing a review.

How long we keep it

Public contributions and account data stay until you remove them, delete your account, or we remove them under our rules. Newsletter and delivery history stays until you unsubscribe or delete your account; a minimal suppression entry remains so the preference keeps working. Unconfirmed owner email requests expire after 48 hours and are deleted within 30 days. Confirmed request details are kept for up to 400 days as consent evidence, while a compact consent record stays with the outreach history. Short-lived security and diagnostic data is kept only as long as it remains useful for abuse prevention and reliability. The narrow safety, audit, privacy-request, suppression, and any future legally required transaction records described above may be kept as long as reasonably necessary for those purposes. Deleted data may remain temporarily in restricted disaster-recovery backups and ages out under our infrastructure providers' backup schedules; it isn't used for ordinary product activity.

For guest business suggestions, we keep your name, email, verification record and review correspondence private. We use them to verify your email, review your suggestion and send updates about that suggestion. This does not create an account, business claim or marketing subscription. Confirmation links expire after 24 hours. We delete unconfirmed suggestions after 30 days and other private guest suggestion records after 400 days through scheduled cleanup. Deleting a private suggestion record does not automatically delete an independently maintained directory listing or change an authorized owner's access. To request access, correction or deletion of guest contact details, email hello@asianmall.com.

Your California privacy rights

We don't sell or share your personal information, and we never have. If you're a California resident, you still have the right to know what we hold about you, to get a copy, and to have it deleted. Use the in-app deletion above, or email hello@asianmall.com, and we'll honor it within the timeframes the law requires, without treating you differently for asking.

Kids

You need to be 18 to create an account or suggest a business (see our Terms). AsianMall isn't built for children, and we don't knowingly collect information from anyone under 13.

If this changes

We'll update the date below when we tweak this, and flag anything significant.

Last updated October 15, 2026 · hello@asianmall.com