Privacy Policy

Last updated: September 25, 2026

This Privacy Policy explains how Jamyaa Technologies ("we," "us," or "our"), the operator of Jamyaa, collects, uses, shares, protects, and retains information when you use Jamyaa websites, applications, stores, ordering tools, forms, advertising tools, and related services.

Information we collect

  • Account information: your name, username, email address, phone number, account identifiers, verification status, roles, and security records.
  • Business and storefront information: profiles, stores, products, services, menus, forms, advertisements, employees, locations, operating details, and content you provide.
  • Transactions and communications: carts, orders, bookings, payment status, fulfilment activity, inquiries, support messages, and form submissions. Payment providers may process payment credentials directly; Jamyaa stores records needed to operate and account for the transaction.
  • Usage and device information: pages and features used, referrals, approximate location derived from network or country selection, browser and device information, IP address, cookies, security events, and diagnostic records.

Meta advertising connections

When an authorized user connects a Meta advertising account, Jamyaa requests the permissions needed to read eligible advertising accounts and create or manage advertising campaigns. The current integration may request ads_management, ads_read, and business_management permissions.

For a connected Meta account, Jamyaa may process and store:

  • the Meta user identifier and display name returned for the connection;
  • the selected Meta advertising account identifier, account name, currency, and time zone;
  • the permissions granted, token expiration time, and the Jamyaa user who made the connection;
  • an OAuth access token, encrypted at rest using the application's data-protection system; and
  • campaign workflow information, including the provider, objective, budget, currency, selected account, submission status, provider campaign identifiers, errors, and timestamps.

A Meta connection belongs to either a particular Jamyaa store or the applicable package-level store context; it is not a platform-wide credential. Jamyaa uses the token only for authorized Meta API requests. The Meta App Secret is configuration data and is not stored in connection records. Jamyaa does not intentionally log OAuth access tokens or application secrets.

How we use information

We use information to provide and secure accounts; operate storefronts, forms, orders, bookings, payments, fulfilment, and advertising workflows; communicate with users; provide support; measure and improve Jamyaa; detect abuse and fraud; comply with law; and enforce our agreements.

When information is shared

Information may be shared with the stores or professionals involved in a transaction, service providers that operate Jamyaa, payment and communications providers, advertising platforms you direct us to use, and public authorities when legally required. Public storefront content is visible according to its publication and privacy settings. We do not sell OAuth access tokens.

Security and retention

We use administrative and technical safeguards appropriate to the information, including access controls and encryption of stored Meta OAuth access tokens. No system is completely secure. We keep information only for as long as reasonably necessary for the purposes described here, including legal, security, accounting, dispute, fraud-prevention, and regulatory obligations.

Your choices and deletion

You may update available account and business information through Jamyaa. An authorized user may disconnect a Meta connection in Jamyaa, which removes the locally stored connection and encrypted access token. You may also revoke Jamyaa in Meta's settings. Disconnecting does not automatically delete campaigns already created in Meta. See our Meta Data Deletion Instructions for details.

Account deletion uses a protected confirmation process. Some records may be retained or de-identified where needed for legitimate legal, security, accounting, fraud-prevention, or regulatory purposes.

Children

Jamyaa is not directed to children who cannot legally consent to the processing of their personal information. Do not submit a child's personal information without appropriate authority.

Changes and contact

We may update this policy as Jamyaa changes. The date above identifies the latest revision.

Questions or privacy and deletion requests may be sent to [email protected].