Privacy policy

1. Scope

YallaBuy provides tools to create and manage stores, products, orders, inventory and teams. This policy covers platform operations, the website, authentication and support. Each merchant is responsible for how they collect and use customer information and for their own store policies.

2. Information we process

• Account information: email address, account identifier and profile details you provide or that are supplied during sign-in.
• If you choose Google or Facebook: we may receive your provider identifier, name, email and profile picture, depending on your consent and what the provider makes available. We do not ask you to enter your Google or Facebook password into YallaBuy.
• Store operations: store and branch details, products, orders, customers, delivery addresses, team details, sales and expenses entered by an authorized user.
• Subscriptions and payments: plan, duration, payment status, transaction references and redeemed activation codes. Payment providers process information entered into their payment interfaces under their own policies.
• Contact requests: the name, phone, email and message you send using our contact form or support channels.
• Technical information: authentication sessions, cookies, language and appearance preferences, security and usage logs, and device push subscription details if you enable notifications.

3. Why we use information

• Create accounts, authenticate users and enforce owner and team permissions.
• Operate stores, orders, inventory, reporting, subscriptions and the features you use.
• Answer support and privacy requests, send service communications and deliver notifications you enable.
• Protect accounts, prevent abuse, diagnose failures and keep transaction records needed to operate the service.

4. Access and service providers

Owners and team members access store information according to their permissions. Store and product information you publish becomes visible to storefront visitors.

We use authentication, database, storage, hosting, security and payment providers, including Supabase, Google Cloud, Cloudflare and enabled sign-in and payment providers. Information needed for these functions may be processed outside your country. Each provider handles information according to its role and policies.

External integrations enabled by a merchant, such as Webhooks, API clients or n8n, may receive data allowed by their permissions and configuration. Merchants are responsible for the services they connect. We may also disclose information when legally required or necessary to protect the service and its users.

5. Cookies and device preferences

We use cookies for sign-in sessions and cookies or local storage to remember choices such as language and appearance. Blocking session cookies may prevent sign-in or session persistence.

Device push notifications require browser permission. You can disable them in YallaBuy notification settings or your browser and operating system. Turning off notifications does not delete an account or store information.

6. Retention and deletion

We retain information needed to operate accounts and stores, handle support and maintain transactions. On a deletion request, we verify identity and scope, remove the requested information or explain any information that must be retained for a specific legal obligation.

Deleting a team member account does not erase the store’s transaction history. Deleting a store does not automatically delete its owner’s account or other stores. Platform receipts and certain administrative and transaction records are separate from sign-in data; deleting Facebook or Google data is not conditional on deleting independent business records.

Any exceptional retention of personal information after a deletion request requires a specific legal basis or necessity that we explain when handling the request. Backups and technical logs may require a separate processing cycle from active data; deletion is not represented as instantaneous across all copies.

7. Your choices and requests

Contact [email protected] to request access, correction or deletion of your account information. We verify account ownership before sensitive changes. Our Data deletion page provides instructions for account deletion and Facebook or Google data requests.

If you are a store customer, contact the merchant about order information first. Contact YallaBuy support for platform account requests or assistance identifying the responsible party.

8. Contact and policy updates

For privacy and data requests: [email protected]. For general inquiries: [email protected]. We update this page when service practices change; its latest revision date appears above.