Privacy Policy

DRAFT — for owner/lawyer review. This text is not final and is not legal advice. Effective date: [OWNER: date] Who we are: [OWNER: legal name] ("eRevola", "we"), Hargeisa, Somaliland. Contact: [OWNER: support email], +252 63 9340000. This policy explains what personal data the eRevola website and app collect, why, who receives it, how long we keep it and how you can delete it. 1. Data we collect • Account: your name, phone number, country and city, an optional email address and your password (stored only as a secure hash). Optional: profile photo. • Orders: delivery address, recipient name and phone number, delivery notes, the items you buy, the payment method and currency. • Payments: the transaction reference you enter and, if you upload one, a photo of the payment receipt. We do not process or store card numbers. • Saved details (optional): addresses, mobile money / bank account numbers for faster checkout, your wishlist. • Returns, warranty claims and reviews: your description and any photos you upload. • Support: messages and files you send to our support team. If you contact us without an account, your name and phone number are stored encrypted. • Share & Earn (optional): your referral code, links you share, your payout account and withdrawal requests. • Security and device data: IP address, browser / app version, a random device identifier, approximate country and city worked out from the IP address on our own server, and sign-in history. • App only: a push notification token if you allow notifications. We do not collect your precise location, contacts or photos from your phone, and we do not use advertising or analytics trackers. 2. Why we use it • To create your account, sign you in and keep it secure (including verification codes sent by WhatsApp or SMS). • To take, pay for, prepare and deliver your orders, and to handle returns, refunds and warranty claims. • To check payments and prevent fraud (for example duplicate receipts, self-referral or multiple accounts). • To answer support requests. • To run Share & Earn and pay your earnings. • To meet accounting and legal obligations. [OWNER/LAWYER: legal basis for each purpose under the applicable law] 3. Who receives your data • Stores (vendors): see the items, the delivery city and an anonymous buyer label only — never your name, phone number or address. • Delivery: our team and the courier delivering your order receive the name, phone number and address needed to deliver it. • Payment providers: you pay through Zaad, eDahab, Somtel, Waafi or the bank; they process your payment under their own terms. We see only the reference and receipt you give us. • Service providers that run our service: hosting of our servers [OWNER: hosting provider and country], Meta (WhatsApp Business Cloud) for verification codes, Expo for app push notifications, encrypted backups stored with Google Drive. • Authorities, when the law requires it. We do not sell your personal data. 4. How long we keep it • Account data: while your account is open. • Deleted accounts: closed at once and erased after 30 days (see section 6). Orders, invoices and earnings are kept without your name or phone for accounting for 7 years; after that the remaining personal details (payment receipts, claim photos and texts) are removed. Orders themselves stay anonymous. • Sign-in log: the phone number or email you signed in with is removed after 12 months. • Support messages: the text is kept for our records; when you delete your account it is no longer linked to you. Blocked contact-sharing messages are removed after 90 days. • Backups: up to 30 days. 5. Security Passwords are hashed, two-factor authentication is available (and required for withdrawals), sensitive fields and backups are encrypted, and staff access is logged. 6. Your choices and rights • See and change your details in My Account. • Delete your account: My Account → Account settings → Delete account, or without the app at https://www.erevola.com/account/delete. Signing in within 30 days cancels the deletion. • Contact us at [OWNER: support email] for any request about your data. [OWNER/LAWYER: rights under the applicable law and how to complain] 7. Children eRevola is not meant for children. [OWNER: minimum age] 8. Cookies See the Cookie Policy. 9. Changes We will show the date of the latest version on this page.