Privacy Policy

1Overview

YallaStarter ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our crowdfunding platform, website, and associated services.

By using YallaStarter, you agree to the collection and use of information in accordance with this policy. This policy complies with the Saudi Personal Data Protection Law (PDPL) and applicable international data protection standards.

2Data We Collect

We collect data you provide directly and data collected automatically through your use of our platform:

Category	Examples	Source
Account Data	Name, email address, username, password (hashed)	You provide directly
Profile Data	Profile photo, bio, location, preferences	You provide directly
Project Data	Project title, description, images, funding goal, category	You provide directly
Financial Data	Coin purchase history, transaction records, bank info for cashouts	Automatically recorded
Usage Data	Pages visited, time on platform, features used, search queries	Automatically collected
Device Data	IP address, browser type, device type, OS	Automatically collected
Communication Data	Support tickets, messages, feedback forms	You provide directly

3How We Use Your Data

We use your personal data for the following purposes:

Account Management: Creating, maintaining, and securing your account
Platform Services: Processing transactions, managing projects, connecting creators with backers
Communications: Sending you notifications, updates, security alerts, and support responses
Marketing (with consent): Newsletters, platform updates, and promotional offers (you can opt out at any time)
Analytics: Understanding how users interact with the platform to improve our services
Compliance: Fulfilling legal obligations, resolving disputes, and enforcing our Terms of Service
Fraud Prevention: Detecting and preventing fraudulent activity, abuse, and security threats

4Data Sharing

We do not sell your personal data. We may share it only in these limited circumstances:

Service Providers: Trusted third parties who help us operate the platform (e.g., cloud hosting, payment processors, email services) — bound by strict confidentiality agreements
Legal Obligations: When required by law, court order, or government authority
Safety: To protect the safety and rights of our users or the public
Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred — we will notify you in advance
With Your Consent: Any other sharing will only occur with your explicit permission

                 Public project data:
                Your project title, description, images, and creator name are publicly visible once a project is
                approved and published. Your email address is never shown publicly.
            

5Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform. Types of cookies we use:

Essential Cookies: Required for the platform to function (authentication, security). Cannot be disabled.
Preference Cookies: Remember your settings (language, region preferences)
Analytics Cookies: Help us understand how users interact with the platform (e.g., pages visited, session duration)
Marketing Cookies: Used to show relevant content and promotions (only with consent)

You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

6Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

Account data is kept while your account is active and for 2 years after deletion (for legal/fraud purposes)
Transaction records are kept for 7 years to comply with financial regulations
Communication logs are retained for 1 year after support case closure
Analytics data is retained in anonymized form indefinitely

You may request deletion of your account and data at any time (subject to legal retention obligations). See Your Rights below.

7Security

We implement industry-standard security measures to protect your personal data:

All passwords are hashed using bcrypt (never stored in plain text)
HTTPS/TLS encryption for all data in transit
Secure database access with role-based permissions
Regular security audits and vulnerability assessments
JWT (JSON Web Token) based authentication with expiration

Despite our best efforts, no system is completely secure. Please use strong passwords and notify us immediately if you suspect unauthorized access to your account.

8Your Rights

Depending on your location, you have the following rights regarding your personal data:

Right to Access

Request a copy of all personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete personal data

Right to Erasure

Request deletion of your personal data ("right to be forgotten")

Right to Object

Object to processing of your data for marketing purposes

Data Portability

Receive your data in a machine-readable format

Restriction of Processing

Request that we limit how we process your data

To exercise any of these rights, contact us at privacy@yallastarter.com. We will respond within 30 days.

9Children's Privacy

YallaStarter is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@yallastarter.com.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

Post the updated policy on this page with a revised "Last Updated" date
Notify registered users via email for material changes
Display a prominent notice on the platform

We encourage you to review this policy periodically. Continued use of the platform after changes are posted constitutes your acceptance of the revised policy.

11Contact Us

For any privacy-related questions, requests, or concerns, please contact our Privacy team:

Table of Contents