Privacy Policy

1. Who this policy applies to

This policy applies when you visit HabeshaReach, create an account, publish or manage a listing, submit an event, contact another user through available features, send us a message, report content, request verification, or subscribe to communications. HabeshaReach can be contacted at filefdfd34@gmail.com about this policy or the handling of personal data.

2. Information we collect

• Account information such as your name, email address, password credentials in protected form, profile image, email-verification status, and account dates.
• Authentication and session information, which may include session tokens, login dates, IP address, browser or device user-agent information, and password-reset records.
• Business, professional, service, and event information you submit, including names, categories, descriptions, locations, websites, telephone or WhatsApp details, opening hours, prices, organizer details, and event links.
• Images and files you upload, including listing images, logos, cover images, gallery images, profile images, and event images.
• Activity such as saved listings, listing views, reviews, reports, verification requests, moderation status, and account or listing changes.
• Communications including contact-form messages, support requests, report details, and newsletter subscription or withdrawal records.
• Technical information necessary to operate, secure, diagnose, and prevent misuse of the service.

3. Public listing information

Information published in a business, professional, service, or event listing is intended to be public. This can include names, descriptions, images, city, country, contact details, external links, services, hours, reviews, and verification status. Do not publish personal information that you do not want visible publicly.

4. Why we use information

• To create and secure accounts, authenticate users, and provide requested platform features.
• To publish, search, manage, moderate, and improve listings, profiles, events, reviews, and community features.
• To process reports, verification requests, support enquiries, and safety investigations.
• To send service messages, password-reset emails, and newsletters when consent has been provided.
• To protect users, enforce policies, prevent fraud or abuse, diagnose faults, and comply with legal obligations.
• To establish, exercise, or defend legal claims and maintain appropriate business records.

5. Legal bases

Depending on the activity, processing may be necessary to provide the service you request or perform an agreement with you, to comply with law, to pursue legitimate interests such as platform security and moderation, or because you gave consent. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

6. Cookies and similar technologies

HabeshaReach uses essential authentication and session technologies needed for sign-in, security, and core functionality. Browser storage may also remember interface preferences such as language. The current implementation does not confirm optional analytics or advertising cookies. If those technologies are introduced, this policy and the Cookie Policy will be updated and consent will be requested where required.

7. Service providers and sharing

HabeshaReach uses service providers to operate infrastructure, database functions, authentication, file storage, hosting, and email delivery. The current implementation includes PostgreSQL-based storage, Supabase for listing-image storage, and Resend for transactional and newsletter email. Providers process information for their contracted purpose and may apply their own privacy terms. Information may also be disclosed when required by law, to protect rights or safety, during a legitimate business reorganization, or with your direction. HabeshaReach does not state that it sells personal data.

8. International users and transfers

HabeshaReach serves users internationally. Providers or technical systems may process information outside the Netherlands or European Economic Area. Where European data-transfer rules apply, appropriate legal safeguards should be used, such as an adequacy decision or approved contractual protections. Provider locations and safeguards should be reviewed before production launch and whenever providers change.

9. Storage, security, and retention

Reasonable technical and organizational measures are used to protect information, including authenticated access, server-side authorization checks, input validation, controlled image paths, and protected sessions. No internet service can guarantee absolute security.

Information is retained only for as long as reasonably needed for the purposes described, including providing active accounts and listings, resolving reports or disputes, security, backups, and legal obligations. HabeshaReach has not published fixed retention periods for every record type; a documented production retention schedule should be finalized and applied as the platform grows.

10. Your privacy rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent and may complain to the Dutch Data Protection Authority or another competent supervisory authority. Rights can be limited where retention is required by law, necessary for security or legal claims, or affects the rights of others. HabeshaReach may need to verify your identity before completing a request.

11. Account and data deletion

You may request account or personal-data deletion by emailing filefdfd34@gmail.com or using the contact page. Specify the account email and what you want removed. Public listing information may also be edited or unpublished through available account controls. Some records may be retained where reasonably necessary for security, fraud prevention, disputes, backups, or legal obligations.

12. Children’s privacy

HabeshaReach is designed for people who can lawfully create and manage business or professional information. It is not directed to young children. Do not submit a child’s personal information without lawful authority. If you believe a child’s information was submitted improperly, contact HabeshaReach so it can be reviewed and removed where appropriate.

13. Changes to this policy

This policy may change when features, providers, or legal requirements change. The effective date will be updated, and material changes will be communicated where reasonably required.