Privacy Policy

This Privacy Policy explains how Hadyah ("Hadyah", "we", "us") collects, uses, shares, and protects your information when you use Hadyah.com and related services (the "Service"). By using the Service, you agree to this Policy.

1. Who we are

Hadyah operates a marketplace that connects halal-focused brands ("businesses") with content creators ("creators") for product-gifting collaborations. If you have questions about this Policy, contact us at privacy@hadyah.com.

2. Information we collect

• Account information: name or brand name, email address, password (stored only as a secure hash), role (creator/business), and a key contact detail (phone or email).
• Creator information: connected social accounts and the public statistics we retrieve through them (e.g. follower counts, engagement, recent views), display name, bio, profile photo, category, country, and collaboration terms.
• Business information: company name, Instagram, website, country, and offer/brief details.
• Collaboration data: messages, offers, responses, statuses, and timestamps related to outreach and deliverables.
• Payment information: when paid features are enabled, payments are processed by our payment provider (e.g. Stripe). We do not store full card numbers; we receive limited details such as confirmation and status.
• Technical data: session cookies, IP address, device and browser information, and basic usage and error logs.

3. How we use your information

• Provide, operate, and improve the Service.
• Verify creators and match businesses with relevant creators.
• Facilitate offers, responses, escrow, and payments.
• Send transactional notifications (e.g. new requests, response reminders, payment and dispute updates) by email and, where you provide a number, messaging channels.
• Maintain security, prevent fraud and abuse, and enforce our terms.
• Comply with legal obligations.

4. Legal bases (where applicable)

Where data-protection laws such as the GDPR apply, we process personal data to perform our contract with you, for our legitimate interests in operating and securing the Service, to comply with legal obligations, and, where required, with your consent.

5. How we share information

• Between users: to make a collaboration work, a business and a creator see each other's relevant profile and collaboration details. Public creator link pages are visible to anyone with the link.
• Service providers: hosting and database (e.g. Vercel, Supabase), payment processing (e.g. Stripe), email delivery (e.g. Resend), and authentication (e.g. Google, Meta) that process data on our behalf.
• Legal and safety: where required by law, or to protect the rights, property, or safety of Hadyah, our users, or others.

We do not sell your personal information.

6. Third-party sign-in and connected accounts

If you sign in with Google or connect a social account, we receive limited profile information (such as your email, name, and account statistics) according to the permissions you grant. Your use of those third-party services is also subject to their own privacy policies.

7. Cookies

We use a small number of essential cookies to keep you signed in and to operate core features. We do not use them for advertising.

8. Data retention

We keep personal data for as long as your account is active or as needed to provide the Service, then for any additional period required to meet legal, accounting, or dispute-resolution obligations. You can request deletion of your account at any time.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact privacy@hadyah.com. You may also delete your account from within the app.

10. International transfers

We and our providers may process and store information in countries other than your own. Where required, we take steps to ensure appropriate safeguards for such transfers.

11. Security

We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated where appropriate.

14. Contact

Questions or requests? Email privacy@hadyah.com.