Privacy

Who we are

YAFE is operated by Javvy Group, Kuwait. Questions, requests and complaints: j@javvygroup.com.

If you sell through YAFE

We hold your email address, the name you give us, a hashed password, your payout details, the products you create and the files you upload, and a record of every sale.

When you connect Instagram we store an access token issued by Meta, encrypted, along with your Instagram account id and username. The token lets YAFE read comments on your posts and send replies. It does not let YAFE post, follow, unfollow, or message anyone who has not contacted you first. You can disconnect it at any time from your dashboard, and separately from Instagram under Settings → Apps and Websites.

If you buy through YAFE

When you comment a keyword or send a message, Instagram gives us your account id so we can reply to you. We keep that id with the order.

Your email address comes from the payment page and is used to send you the file you bought and, if needed, to help you with that order. It is not used for marketing and it is not sold. The seller you bought from can see it, because they sold you something.

Card details never reach YAFE. Payment is handled by MyFatoorah on their own pages; we receive only the outcome and an invoice reference.

What we never do

We do not message people who have not contacted the seller first. We do not import or buy contact lists. We do not scrape Instagram. We do not sell anyone's data. We do not use the content of your messages for advertising.

How long we keep things

Sales records are kept for seven years, because they are accounting records. Instagram tokens are deleted when you disconnect. Uploaded files are deleted when you delete the product. Webhook logs are kept for 90 days for debugging, then removed.

Your rights

Write to j@javvygroup.com to get a copy of what we hold about you, to correct it, or to have it deleted. We answer within 30 days.

For Instagram disconnection and data deletion requests, see data deletion.

Processors we use

Meta Platforms (Instagram messaging), MyFatoorah (payments), and Hostinger (hosting, in the Netherlands). Each holds data only to do its part.