Privacy

Who we are

YAFE is operated by Jaming Holdings, Kuwait. Questions, requests and complaints: j@javvygroup.com.

If you sell through YAFE

We hold your email address, the name you give us, a hashed password, your payout details, the products you create and the files you upload, and a record of every sale.

When you connect Instagram we store an access token issued by Meta, encrypted, along with your Instagram account id and username. The token lets YAFE read comments on your posts and send replies. It does not let YAFE post, follow, unfollow, or message anyone who has not contacted you first. You can disconnect it at any time from your dashboard, and separately from Instagram under Settings → Apps and Websites.

If you request a file through YAFE

When you comment a keyword or send a message, Instagram gives us your account id so we can reply to you. We keep that id with the order.

You enter your delivery email on YAFE’s file-claim or checkout page. We use it to deliver the requested file and help with that order. It is not used for marketing and it is not sold. The seller may access order information to provide support.

Free claims do not use a payment provider. When paid checkout is enabled, MyFatoorah hosts payment entry. YAFE stores payment references, amounts, currency and status for verification and accounting; it does not store card numbers or security codes. Supplier onboarding sends the seller’s required identity and banking details to MyFatoorah.

What we never do

We do not message people who have not contacted the seller first. We do not import or buy contact lists. We do not scrape Instagram. We do not sell anyone's data. We do not use the content of your messages for advertising.

How long we keep things

Instagram tokens are cleared when you disconnect. Operational webhook logs are retained for up to 90 days. Delivery and order records are retained to provide the requested service and resolve issues; you can request removal. Any transaction records that must be retained will be identified when processing that request. Uploaded files may be retained while existing download obligations remain.

Your rights

Write to j@javvygroup.com to get a copy of what we hold about you, to correct it, or to have it deleted. We answer within 30 days.

For Instagram disconnection and data deletion requests, see data deletion.

Processors we use

Meta Platforms (Instagram messaging), MyFatoorah (payments), and Hostinger (hosting, in the Netherlands). Each holds data only to do its part.