Privacy Policy

Privacy & Data Protection

This Privacy Policy explains how Euro Habesha ("we," "us," "our," or "Company") collects, uses, stores, and protects your personal information when you use our mobile application and website (collectively, the "Service"). We are committed to protecting your privacy and ensuring transparency about our data practices.

1. Information We Collect

1.1 Information You Provide Directly

• Account Registration Data: Name, email address, phone number, date of birth, and profile picture
• Profile Information: Bio, professional details, skills, languages, location, and verification documents
• Communications: Messages, chat content, and conversations with other users
• Content You Create: Listings, posts, comments, reviews, and media uploads
• Payment Information: Billing address, payment method details (processed securely via third-party providers)
• Support Communications: Emails, support tickets, and feedback you send us

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: Features accessed, time spent, actions performed, and interaction patterns
• Location Data: GPS coordinates and city/country information (only when you enable location access)
• Analytics Data: App crashes, performance metrics, and error logs
• Cookies & Similar Technologies: Session data, user preferences, and authentication tokens

1.3 Information From Third Parties

• Social Media: If you sign in with Google or other providers, we receive your public profile information
• Service Providers: Verification services, payment processors, and analytics platforms
• Other Users: Information shared about you in conversations, reviews, or reports

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Creating accounts, delivering features, processing transactions, and customer support
• Communication: Sending transactional emails, notifications, updates, and user support
• Verification: Confirming identity, verifying professional credentials, and preventing fraud
• Personalization: Customizing content, recommendations, and user experience based on preferences
• Safety & Security: Protecting against unauthorized access, malware, and maintaining system integrity
• Legal Compliance: Meeting regulatory requirements, responding to legal requests, and enforcing terms
• Analytics & Improvement: Analyzing usage patterns to improve Service quality and user experience
• Advertising & Marketing: Sending promotional content and personalized marketing (with your consent)

3. Data Sharing & Third Parties

3.1 Who We Share Your Data With

• Other Users: Public profile information visible to other community members as per your privacy settings
• Service Providers: Cloud hosting (Firebase), payment processors, analytics platforms, and authentication services
• Business Partners: Integrated platforms and services (only with your explicit consent)
• Legal Authorities: If required by law, court order, or government request

3.2 What We Do NOT Do

• ✗ Sell Personal Data: We do NOT sell, rent, or trade your personal information to third parties for marketing
• ✗ Unauthorized Sharing: We do NOT share sensitive information without your consent or legal necessity
• ✗ Data Brokers: We do NOT work with data brokers or third-party data sellers

4. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Database Security: Firestore databases use Google Cloud's security infrastructure and encryption at rest
• Access Controls: Only authorized personnel can access personal information, with role-based permissions
• Regular Audits: We conduct regular security assessments and penetration testing
• Incident Response: We have procedures to detect, respond to, and report data breaches

5. Data Retention

We retain your personal information only as long as necessary to provide the Service and fulfill the purposes outlined in this policy:

• Active Accounts: Retained while your account is active
• After Deletion: Some data may be retained for 30-90 days in backup systems
• Legal Requirements: Retained as required by applicable laws and regulations
• Aggregated Data: Anonymous and aggregated data may be retained indefinitely for analytics

6. Your Privacy Rights & Choices

6.1 Your Rights

• Access: Right to request and receive a copy of your personal data
• Correction: Right to request corrections of inaccurate or incomplete data
• Deletion: Right to request deletion of your account and associated personal data
• Opt-Out: Right to opt-out of marketing communications and non-essential cookies
• Data Portability: Right to receive your data in a structured, standard format

6.2 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at support@EuroHabesha.eu with:

• Your full name and registered email address
• Specific right you are requesting (Access, Correction, Deletion, etc.)
• Proof of identity (copy of ID or passport)

We will respond to your request within 30 days as required by GDPR and other data protection laws.

7. Account Deletion & Data Removal

7.1 Self-Service Deletion (In-App)

You can delete your account directly through the Euro Habesha mobile app:

1. Open the app and log in
2. Navigate to Profile Settings
3. Scroll to the bottom and tap "Delete Account"
4. Read the warning and confirm the deletion
5. Your account and data will be permanently removed

7.2 Email-Based Deletion Request

If you cannot access the app, you can request account deletion by email:

1. Send an email to support@EuroHabesha.eu
2. Subject line: "Account Deletion Request"
3. Include your registered email address
4. Attach a proof of identity (copy of ID or passport)
5. We will process your request within 14 business days

7.3 What Gets Deleted

• ✓ Your account profile and personal information
• ✓ Authentication records and login credentials
• ✓ Preference settings and notification settings
• ✓ All associated user data from our primary database

7.4 What May Be Retained

• Messages and conversations (for community history)
• Published listings or posts (if community value is maintained)
• Aggregated, anonymized data for analytics
• Records kept for legal, tax, or fraud prevention purposes

8. Children's Privacy

Euro Habesha is not intended for children under the age of 13. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete such information immediately. Parents or guardians who believe a child's information has been collected should contact us at support@EuroHabesha.eu.

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using Euro Habesha, you consent to the transfer of your information to countries outside your country of residence.

For users in the European Union, we comply with GDPR requirements for international data transfers through Standard Contractual Clauses (SCCs).

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Performance Cookies: Help us understand how you use the Service
• Marketing Cookies: Used to deliver personalized advertising (with consent)

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect Service functionality.

11. Third-Party Links & Services

Euro Habesha may contain links to third-party websites and services. This Privacy Policy applies only to our Service. We are not responsible for the privacy practices of third-party services. We recommend reviewing their privacy policies before providing your information.

12. Data Protection Compliance

GDPR Compliance (EU Users)

We comply with the General Data Protection Regulation (GDPR). You have the right to:

• Access, correct, and delete your personal data
• Object to data processing and profiling
• Lodge complaints with your local data protection authority

CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.

Other Regional Laws

We comply with applicable privacy laws in all jurisdictions where we operate, including LGPD (Brazil), PIPEDA (Canada), and others.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending a notification to your registered email address (for significant changes)
• Requesting your explicit consent (where required by law)

Your continued use of the Service after changes means you accept the updated Privacy Policy.

14. Contact Us