Privacy Policy

1. Who We Are

MyYarns is a social media management and customer support platform operated by Sendbaba Technologies Limited, a company registered in Nigeria.

Registered Address: Lagos, Nigeria
Email: privacy@myyarns.com
Website: https://myyarns.sendbaba.com

2. Information We Collect

2.1 Account Information

• Full name and email address when you register
• Company name and organization details
• Profile photo (optional)
• Password (stored as encrypted hash — we never see your password)

2.2 Social Media Data

• Messages, comments and DMs received through connected social accounts
• Social media profile information of your customers (name, profile photo, platform ID)
• OAuth access tokens for connected platforms (stored encrypted)
• API credentials you provide (Meta App ID, WhatsApp tokens, etc.) — stored encrypted

2.3 Usage Data

• Pages visited, features used, and time spent on the platform
• IP address and browser/device information
• Conversation and response analytics

2.4 Payment Data

• Billing information processed by Korapay — we do not store card details
• Transaction references and payment history

3. How We Use Your Information

4. Social Media Platform Data

When you connect social media accounts to MyYarns, we access data from those platforms on your behalf. This includes:

• Meta (Facebook/Instagram): Messages, comments, page data via Meta Graph API
• WhatsApp Business: Messages via WhatsApp Business API
• LinkedIn: Messages via LinkedIn API
• Twitter/X: DMs and mentions via Twitter API
• Telegram: Bot messages via Telegram Bot API

We process this data only to provide the unified inbox service. We do not sell, share, or use your customers' social media data for advertising purposes.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Korapay — payment processing (Nigeria)
• Anthropic — AI features (data is not used for training)
• Cloud infrastructure providers — hosting on OVH servers in France/Europe
• Law enforcement — when legally required under Nigerian law

6. Data Security

• All data transmitted over HTTPS/TLS encryption
• API credentials and tokens stored encrypted at rest
• Passwords hashed using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access to production data limited to authorised engineering staff only

7. Data Retention

• Account data: Retained while your account is active + 90 days after deletion
• Conversation/message data: Retained for 12 months, then archived or deleted
• Payment records: Retained for 7 years (Nigerian tax law requirement)
• Log data: Retained for 30 days

8. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation, you have the right to:

• Access — Request a copy of all data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Receive your data in a machine-readable format
• Objection — Object to processing based on legitimate interest
• Withdrawal of consent — Withdraw marketing consent at any time

To exercise any of these rights, email us at privacy@myyarns.com. We will respond within 30 days.

9. Cookies

We use essential cookies only for session management and authentication. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this may affect platform functionality.

10. Children's Privacy

MyYarns is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us immediately at privacy@myyarns.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email and by posting a notice on the platform at least 14 days before changes take effect. Continued use of MyYarns after changes constitutes acceptance.