Privacy Policy

1. Information we collect

• Account data: name, email address, phone number, password hash (we never store plain-text passwords), optional profile details.
• Authentication data: session tokens, verification codes, OAuth identifiers when you use Google sign-in.
• Order data: cart contents, delivery addresses (including map coordinates when you pick a location), payment method choice, payment reference, uploaded payment proof images, order history and status.
• Seller and shop data: shop name, description, location, product listings, images, inventory, messages with customers.
• Communications: support tickets, in-app messages, and email notifications you receive from us.
• Technical data: device/browser type, IP address, logs needed for security and debugging, and locale or theme preferences stored in your browser.

2. How we use information

• Create and secure your account, verify email or phone, and prevent fraud.
• Process orders, calculate delivery fees, reserve stock, and show order tracking.
• Display merchant payment instructions and review payment proofs submitted by you.
• Send transactional emails (verification, order updates, password reset) via our email provider when configured.
• Send SMS one-time codes when phone sign-in is enabled.
• Operate maps and address search when you use location features (via third-party map providers).
• Improve the Platform, enforce Terms, and comply with law.

3. Legal bases and consent

We process data to perform our contract with you (accounts and orders), for legitimate interests (security, fraud prevention, analytics in aggregated form), and where required, with your consent (for example marketing if we offer it separately).

By using the Platform you agree to this Policy. Where Ethiopian law requires additional consent for specific processing, we will request it.

4. Sharing and processors

We do not sell your personal information. We share data only as needed to run the service:

• Sellers receive information required to fulfill your order (name, phone, delivery address, items purchased).
• Service providers such as email delivery (e.g. Resend), SMS providers (e.g. Twilio or Africa's Talking), cloud hosting, and map APIs process data on our instructions.
• Authorities when required by valid legal process.

5. Cookies and local storage

We use essential cookies or local storage for session authentication, cart state, language, and theme. These are necessary for the site to function. We do not use third-party advertising cookies in the core marketplace experience described here.

6. Data retention

We keep account and order records while your account is active and as needed for legal, tax, and dispute resolution obligations. Unverified accounts may be deleted after the period stated in platform settings. Payment proof images are retained for verification and audit purposes for a reasonable period.

7. Security

We use industry-standard measures such as hashed passwords, signed session cookies, HTTPS in production, and access controls for admin tools. No method is 100% secure; report suspected breaches to support@egogebeya.com.

8. Your rights

You may access and update profile and contact information in account settings. You may request account deletion or correction by contacting us. You may object to certain processing where applicable law allows. We will respond within a reasonable time.

9. Children

The Platform is not directed at children under 16. We do not knowingly collect their data. Contact us if you believe a child has provided personal information.

10. International transfers

Some providers (email, SMS, maps) may process data outside Ethiopia. We use them only with appropriate safeguards and contracts where required.

11. Changes and contact

We may update this Policy with a new "last updated" date. Continued use means you accept the updated Policy.

Privacy questions or requests: support@egogebeya.com. You may also use the in-app Help center for general support.