Privacy Policy

1. Introduction

Yemma Labs LLC ("we", "us", or "our") operates The Souq. This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Information you provide

• Account information (email address, display name, username)
• Profile information (avatar, bio)
• Content you post (listings, comments, votes, reviews)
• Claim verification data (business email, evidence notes)
• Contact form submissions

Information collected automatically

• IP address and approximate location (for nearby search features)
• Browser type and device information
• Pages visited and actions taken within the Service
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process account registration and authentication
• Enable features like nearby search and personalized content
• Moderate content and enforce our policies
• Respond to your inquiries and support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers: third parties that help us operate the Service (hosting, authentication, analytics)
• Legal requirements: when required by law, subpoena, or to protect our rights
• Business transfers: in connection with a merger, acquisition, or sale of assets

Your public profile information (username, display name, avatar) and content you post (listings, comments, votes) are visible to other users of the Service.

5. Third-Party Services

We use the following third-party services:

• Supabase: authentication and database hosting
• Mapbox: map display and geocoding (location search)
• Cloudflare: CDN, security, and performance

Each third party has its own privacy policy governing how they handle your data.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes (e.g., fraud prevention, moderation logs).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at privacy@yemmalabs.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will promptly delete it.

10. Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS), row-level security on our database, and secure authentication. However, no method of transmission or storage is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy with a new effective date. Continued use of the Service constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, contact us at privacy@yemmalabs.com.