Privacy Policy

1. Who we are

The Platform is a marketplace where Advertisers brief Creators, Creators promote with a promo code and a tracking link, and Admin’s Payout Agent may request payment from an Advertiser. The customer site is public. Workspaces at /app, /studio, and /admin require a signed-in session. Shoppers who later follow a tracking link stay anonymous to counterparties.

2. Information we collect

2.1 Information you provide directly

All users. Display name and the sign-in identity you use (TikTok, phone, Gmail, or Instagram; YouTube, Telegram, or Facebook if you pick those extra options). We do not collect a Platform password for ordinary sign-in. If you use a demo account in a non-production environment, that test credential is not your production identity.

Social grants. When you join, you grant access for TikTok, Instagram, YouTube, Telegram, and Facebook (handle and profile URL; Creators also enter follower counts). Connecting a provider may return tokens or profile fields from that provider, limited to what you authorize.

Advertisers (KYC, after join). TIN certificate, national ID, and business license uploads at /app/kyc. Wallet and payment/refill details processed via payment partners. Business profile: name, city, website, bio, and five social links. Marketplace orders (title, description, platforms, categories, KPIs, budget as Money).

Creators (KYC, after join). National ID, a live photo for identity verification, screenshots of page analytics and admin/owner view, at /studio/kyc. Public profile: display name, city, category, bio. Packages (title, platform, deliverable, price as Money) created in the studio at /studio/packages, not on join. Optional page claim for a listed handle. Past-campaign portfolio rows you confirm.

Offer and brief information. Orders posted by Advertisers; briefs, samples, posted video URLs, comments, and release requests between the matched parties.

2.2 Information collected automatically

• Tracking-link and promo-code click data when that feature is live (/r/{code}).
• Performance metrics from tracking (clicks, conversions) and, where obtainable, engagement.
• Device and usage data (IP address, browser, logs, approximate location from IP).
• Session cookies used to keep you signed in and route you to the correct workspace.

2.3 Information from third parties

• Social platforms, to the extent you connect an account or submit analytics screenshots (follower counts, engagement, ownership proof).
• Payment processors for wallet refills, escrow, and payouts (amounts as Money: string amount plus currency, typically ETB).
• Identity-verification providers, if we use one.

3. How we use your information

• Create and manage your account; verify identity; for Creators, verify ownership or control of social accounts and listed-page claims.
• Operate the Marketplace: matching, briefs, packages, public creator pages, and the public order board.
• Process wallet deposits, escrow holds, fee deductions, and payouts. Payout Agent staff may view balances and create payment requests; they cannot review KYC or approve Creators.
• Conduct manual verification of promotional performance, including video analytics review against brief KPIs (views, likes, comments).
• Communicate about your account, orders, briefs, and Platform updates.
• Detect, investigate, and prevent fraud, fake engagement, policy violations, and unauthorized access.
• Comply with legal, tax, and regulatory obligations under Ethiopian law.
• Improve and secure the Platform. Structured audit logs record money, auth, and approval events. We do not log secrets, KYC file URLs, national ID numbers, or TIN values.

We do not use KYC documents (ID, TIN certificate, business license, verification selfie) for any purpose other than verification, fraud prevention, legal compliance, and account security, unless we ask for and receive your separate consent.

4. Legal bases and consent

Where required by applicable law, we process personal data on the basis of: your consent (for example KYC uploads, identity photos, and social-account grants); performance of our contract with you (the Terms of Service); our legitimate interests in operating a trustworthy marketplace and preventing fraud; and compliance with legal obligations (for example tax and business registration verification).

5. How we share information

• Counterparties on the Platform, on a need-to-know basis. An Advertiser may see a Creator’s public profile, social links, packages, past campaigns you publish, and relevant performance metrics for a matched brief. A Creator may see relevant order and brand information. We do not share raw KYC documents between Advertisers and Creators.
• Payment processors and financial partners, to process wallet refills, escrow, and payouts.
• Identity-verification providers, if used, to confirm submitted documents.
• Social platforms you choose to connect, under that platform’s own terms.
• Service providers who host infrastructure (including Firebase, Supabase, or Convex when configured), provide analytics, or support operations, under confidentiality and data-protection obligations. The live data provider is selected per environment; the user interface does not talk to those SDKs directly.
• Regulators, tax authorities, or law enforcement, where required by Ethiopian law, court order, or to protect the rights, property, or safety of Yaltopia Tech, our users, or the public.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Policy or a substantially similar one.

We do not sell your personal data.

6. Manual verification process

Certain performance results (for example video analytics summaries, samples, and posted content) are reviewed by authorized Admin staff as part of verification and dispute resolution. Payout Agents do not perform KYC review. Access to KYC files is limited to the owner and Admin.

7. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterward to comply with legal, tax, accounting, and dispute-resolution requirements. KYC documents are generally retained for the period required under applicable Ethiopian recordkeeping and anti-fraud obligations, after which they are securely deleted or anonymized, unless a longer period is required by law or an ongoing dispute. Unclaimed placeholder pages and labeled demo portfolios are not treated as a Creator’s confirmed paid work until the handle is claimed and the work is confirmed.

8. Data security

We use administrative, technical, and physical safeguards designed to protect personal data, including restricted storage paths for KYC, encryption in transit where applicable, role-based access to workspaces, and access controls for verification staff. No system is completely secure; we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data, subject to legal, tax, and fraud-prevention retention needs;
• Withdraw consent for optional processing (for example optional communications), where consent is the basis;
• Disconnect a social grant, which may limit Marketplace access until required platforms are connected again;
• Object to certain processing, where applicable.

To exercise these rights, contact us using the details in Section 12. We may need to verify your identity before acting on a request.

10. Children

The Platform is not directed to individuals under 18. We do not knowingly collect personal data from minors. If we learn we have collected data from a minor, we will delete it.

11. International transfers

If your data is transferred to or processed in a country other than Ethiopia (for example where a hosting or social-login provider’s servers are located), we take steps to ensure it continues to be protected in a manner consistent with this Policy.

12. Contact us

For privacy questions, requests, or complaints: privacy@yaltopiatech.com. Website contact: https://yaltopiatech.com/contact.

Registered address will be published here when the Ethiopian entity filing is complete.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. The “Last updated” date at the top reflects the most recent revision.