1. Information We Collect: We collect information you voluntarily provide when creating an account, listing a property, or contacting support. This includes your full name, phone number, email address, government-issued identification documents (for KYC verification), property details, photographs, and financial information necessary for payment processing. We also automatically collect certain technical data such as device type, IP address, operating system, and usage patterns to improve our service. Payment card and banking details are processed directly by Chapa (our payment gateway) and never stored on our servers.
2. How We Use Your Information: We use your personal information for the following purposes: (a) to create and maintain your account; (b) to facilitate property listings, inquiries, and transactions between buyers and sellers; (c) to process payments through our third-party payment processor, Chapa; (d) to communicate with you about your account, listings, and transactions; (e) to provide customer support and resolve disputes; (f) to detect, prevent, and address fraud, security incidents, and illegal activity; (g) to comply with legal obligations, including anti-money laundering and know-your-customer regulations; and (h) to improve our platform through analytics and usage data. We do not use your data for automated profiling or decision-making that produces legal effects.
3. Information Sharing and Disclosure: We share your personal information only in the following circumstances: (a) with your explicit consent; (b) with service providers who act on our behalf, including Chapa (payment processing), Firebase (push notifications), Jitsi (video calls), and GitHub Actions (video processing) — each bound by contractual data processing agreements; (c) when required by law, legal process, or governmental request from Ethiopian authorities or other applicable jurisdictions; (d) to protect our rights, property, or safety, or those of our users; and (e) in connection with a business transfer, merger, or acquisition. We do not sell your personal information to third parties for marketing or advertising purposes.
4. Data Security and Storage: We implement industry-standard technical and organizational security measures to protect your personal information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls based on the principle of least privilege, regular security audits, and incident response procedures. Our servers are located in secure data centers. Despite these measures, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. We will notify you and relevant authorities within 72 hours if we become aware of a data breach affecting your personal information, as required by applicable law.
5. Your Rights and Choices: Depending on your jurisdiction, you may have the following rights regarding your personal information: (a) the right to access and obtain a copy of your data; (b) the right to rectify inaccurate or incomplete data; (c) the right to erasure (deletion) of your data, subject to legal retention requirements; (d) the right to restrict processing in certain circumstances; (e) the right to data portability in a structured, commonly used format; (f) the right to object to processing based on legitimate interests; and (g) the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise these rights, contact us at support@wavemart.et. We will respond within 30 days.
6. Changes to This Privacy Policy: We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated through prominent notice on our platform and/or via email at least 14 days before they take effect. Your continued use of WaveMart after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically. The "Last Updated" date at the top of this page indicates when the policy was last revised.