Information we handle
YSmarket is the developer and operator of the YSmarket app and marketplace. We collect information you provide, information created as you use the marketplace, and limited technical information needed to operate YSmarket.
- Account and identity: email address, authentication records, username, display name, assigned roles, and account-confirmation state.
- Profile and contact: phone number, county, location, biography, style and size preferences, and saved delivery addresses.
- Vendor information: business and application details, storefront settings, listings, product media, inventory, fulfilment information, and payout details.
- Marketplace activity: follows, likes, saved collections, comments, questions, reviews, Bag contents, and notification preferences.
- Orders and payments: order contents, delivery details, payment evidence you submit, M-Pesa transaction codes, verification outcomes, refunds, escrow records, and payouts.
- Safety and operations: support requests, moderation reports, fraud signals, audit events, device push tokens, security logs, and service analytics.
How we use information
We use information to create and protect accounts, provide discovery and shopping features, process and track orders, verify payment evidence, support delivery and payouts, send requested communications, prevent abuse, resolve disputes, and improve marketplace reliability.
We also use operational analytics to understand service performance and marketplace activity. Where the law requires consent, we ask before using information for that purpose. Otherwise, processing is based on providing the service, meeting legal obligations, protecting legitimate marketplace interests, or responding to your request.
Providers and payment boundaries
YSmarket uses carefully selected providers to operate the service:
- Supabase for authentication, database services, and file storage.
- Render for API hosting and Vercel for web hosting.
- Firebase Cloud Messaging for device notifications.
- Our configured email provider for confirmation, recovery, and service email.
Safaricom processes the external mobile-money payment. YSmarket is not Safaricom or M-Pesa and does not operate the mobile-money network. YSmarket receives payment evidence submitted by a user so that a transaction can be verified against an order.
Cloud and international processing
Our cloud providers may process or store information outside Kenya. When this happens, we use provider safeguards and access controls intended to keep information protected while it is transferred and processed.
Security and retention
We use access controls, encrypted connections, restricted administrative access, audit records, backups, and monitoring appropriate to the information we handle. No online service can promise absolute security, so you should also protect your password and device.
We keep profile information while your account is active. After a valid deletion request, direct profile information is deleted or anonymized where reasonably possible. Transaction, order, fraud-prevention, payout, dispute, tax, and immutable audit records may be retained where legally or operationally required. Retained records are restricted to the purpose requiring their retention.
Your choices and rights
You may ask to access, correct, export, object to certain processing of, or delete your personal information. You can update profile and address information from your account and manage device notifications through your device settings.
To make a privacy request, use the account-deletion page or email privacy@ysmarket.online. We may need to verify your identity before completing a request.
Children
YSmarket is not intended for children under 18 to transact independently. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take suitable action.
Changes and contact
We may update this policy when our services, providers, or legal obligations change. The effective date above will be updated, and material changes may also be communicated in the app or by email.
Questions and privacy requests can be sent to privacy@ysmarket.online.
You can request account deletion from the public account-control page.
Delete account