Privacy Policy

We do not sell, rent, or trade your personal data. We share information only in the following limited circumstances:

3.1 Between Buyers and Sellers. When an auction is successfully completed, the winning Buyer's contact information (as agreed) and the Seller's contact information are shared between the two parties solely to facilitate item collection and final payment. This sharing is limited to what is necessary for settlement.

3.2 Payment Processor. We share your phone number and transaction amount with Chapa to process deposits and withdrawals. Chapa processes this data subject to their own privacy policy and the National Bank of Ethiopia's licensing requirements.

3.3 Service Providers. We use Supabase (database and authentication infrastructure), Vercel (hosting), and Vercel Analytics for platform operations. These providers process data on our behalf and are contractually bound to protect it. All data is stored on servers that are geographically closest to our operations.

3.4 Legal Requirements. We may disclose your information to law enforcement authorities, courts, or regulatory bodies in Ethiopia if required to do so by law, court order, or government directive. We will notify affected Users where we are legally permitted to do so.

3.5 Business Continuity. In the event of a merger, acquisition, or sale of assets, User data may be transferred to the successor entity, subject to the same privacy protections outlined in this policy. Users will be notified of any such transfer.

3.6 Safety. We may share information without consent if we believe in good faith that it is necessary to prevent imminent harm, fraud, or criminal activity.

4.1 Your data is stored in a secured, access-controlled database hosted on Supabase infrastructure. All data is encrypted at rest and in transit using industry-standard TLS/SSL protocols.

4.2 Access to personal data within Yebirr is restricted on a strict need-to-know basis. Staff access is logged and auditable.

4.3 Wallet and financial data are subject to additional security controls including row-level security and administrative separation of duties.

4.4 Despite our security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for immediately reporting any unauthorised access to privacy@yebirr.com or @yebirr_support.

4.5 In the event of a data breach that materially affects your personal data or financial security, we will notify affected Users as soon as reasonably possible and take all steps required under applicable Ethiopian law.

5.1 We retain your account information and transaction records for as long as your account is active and for a minimum of five (5) years after account closure, as required for financial record-keeping under Ethiopian tax and commercial law.

5.2 Runner verification photographs and condition reports are retained for three (3) years following the completion or expiry of the relevant auction, to support dispute resolution.

5.3 Communication records with support are retained for two (2) years.

5.4 Anonymised, aggregated usage analytics data may be retained indefinitely for platform improvement purposes.

5.5 If you request account deletion, we will delete or anonymise your personal data within thirty (30) business days, except for records we are legally required to retain.

As a User of Yebirr Bid, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Deletion: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to Object: You may object to the processing of your data for marketing or analytics purposes at any time.
• Right to Data Portability: You may request a copy of your transaction and account data in a machine-readable format.

To exercise any of these rights, contact us at privacy@yebirr.com. We will respond within thirty (30) business days. We may require identity verification before processing certain requests.

8.1 We use browser cookies and local storage for the following purposes:

• Session cookies: Required to keep you logged in during a browsing session. These expire when you close your browser.
• Authentication tokens: Stored as HTTP-only secure cookies to maintain your authenticated session. These expire after 30 days of inactivity.
• Theme preference: Stored in local storage to remember your dark/light mode preference across visits.
• PWA installation state: Stored in local storage to manage the install prompt display.
• Analytics: Vercel Analytics uses lightweight, cookieless measurement techniques to analyse page traffic. No personally identifiable data is shared with Vercel for analytics purposes.

8.2 We do not use advertising cookies, tracking pixels, or third-party marketing cookies. You can clear all cookies and local storage data by clearing your browser's site data for yebirr.com at any time, though this will log you out of your account.

9.1 Yebirr Bid is deeply integrated with Telegram for notifications, authentication, and the mini app. When you use our Telegram bot or mini app, Telegram's own Privacy Policy and Terms of Service apply to the data processed by Telegram.

9.2 Yebirr receives only the minimum data shared by Telegram (user ID, name, username) to link your Telegram account to your Yebirr account and to send you notifications.

9.3 Yebirr notifications sent via Telegram (outbid alerts, win notifications, settlement reminders) are sent by our automated bot. We do not store the content of messages you send to our bot beyond what is necessary for support purposes.

9.4 You can stop receiving Telegram notifications at any time by blocking or muting the Yebirr bot in Telegram, or by adjusting notification settings in your Yebirr account profile.

We process your personal data on the following legal bases under applicable Ethiopian law:

• Contractual necessity: Processing required to provide the auction services you have signed up for.
• Legal obligation: Processing required to comply with Ethiopian financial regulations, tax law, and anti-money laundering requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and platform improvement, balanced against your privacy interests.
• Consent: For optional communications or analytics beyond what is strictly necessary.

12.1 We may update this Privacy Policy from time to time. Material changes will be communicated to registered Users via Telegram notification and/or email at least seven (7) days before they take effect.

12.2 The current version of this policy is always available at https://yebirr.com/privacy.

12.3 Your continued use of the Platform after the effective date of any updated policy constitutes acceptance of the changes.

For all privacy-related questions, requests, or concerns, please contact our Privacy Officer: