Legal / Privacy

Privacy Policy

This policy explains what YallaMashoor processes when you browse the board, create an account, submit or react to a listing, use badge verification or complete a payment.

Effective September 15, 2026

01

Data controller

The data controller is Basha Technology Solutions LLC, based in Sharjah, United Arab Emirates. Questions, privacy requests and listing notices can be sent to hello@yallamashoor.com or directed to @vmbharathi on X or through Bharathi's LinkedIn profile.

02

Information we collect

Public listing information

A published listing is public by design. It can contain the product name, tagline, category, destination URL, favicon, preview image, optional social links, submitter display name, publication method, reaction totals and published reactions. Some assets are supplied by the submitter and some may be fetched from public page metadata.

Account information

Authentication is provided by Clerk. YallaMashoor stores the Clerk user identifier, email address and, when available from the account, display name and avatar URL. We also store administrative and suspension status required to control access.

Reactions and moderation

We store the selected Toast, Meh or Roast type, generated reaction text, generation count, publication or moderation status and related timestamps. Published reactions are displayed with the author's public account identity.

Badge verification

We store verification status, review cycle, reviewer feedback, verification timestamps and notification-delivery timestamps. Badge-review emails use the listing owner's email address and public listing details.

Payment records

Stripe processes checkout and card details. YallaMashoor stores only operational payment records needed to confirm publication: internal payment and listing identifiers, Stripe session and payment-intent identifiers, amount, currency, status and timestamps. Full card numbers and security codes do not reach YallaMashoor's database.

Communications and technical data

If you contact us, we may retain the message and contact details needed to respond or maintain legal records. Cloudflare and other infrastructure providers may process standard request information such as IP address, user agent, referrer, request time and diagnostic data for delivery, reliability, security and abuse prevention.

03

How we use information

  • Create and secure accounts and enforce account access decisions.
  • Create, review, publish, rank, share, moderate and remove listings and reactions.
  • Fetch public metadata for a submitted URL and generate moderated reaction text.
  • Create Stripe checkout sessions, confirm payment status and publish paid listings.
  • Review badges and send submission, approval or requested-change notifications.
  • Understand page usage and product funnels so we can improve YallaMashoor.
  • Prevent spam and abuse, apply rate limits, diagnose failures and protect legal rights.
  • Respond to support, legal and privacy requests.

Depending on your location and the activity involved, processing is based on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations or consent where consent is required.

04

Service providers and disclosure

We do not sell or rent personal information. We disclose limited data to providers that help operate YallaMashoor:

  • Cloudflare for Workers hosting, D1 database storage, KV rate limiting, delivery and operational logging.
  • Clerk for authentication and account management.
  • Stripe for checkout and payment processing.
  • Resend for transactional badge-review email delivery.
  • Amazon Web Services Bedrockfor generating reaction drafts from public product details.
  • Scrapfly for retrieving public metadata from submitted URLs when direct retrieval is not sufficient.
  • Mixpanel for product analytics, using its India data-residency endpoint.

We may also disclose information to professional advisers, authorities or courts where required by law, or as part of a merger, financing, acquisition or sale of assets subject to appropriate safeguards.

05

Cookies, local storage and analytics

Authentication and payment providers may use cookies or similar technologies that are necessary to secure sessions and complete the services you request. YallaMashoor also uses Mixpanel to understand page views, clicks, form submissions, scroll activity and key product actions such as listing submission, checkout and reactions.

Mixpanel stores a pseudonymous identifier in local storage and may process browser, device, referrer, campaign and approximate-location information. After sign-in, analytics activity is associated with the Clerk account identifier, name and email address. The identifier is reset when the user signs out.

06

Data retention

  • Account and listing records are kept while needed to provide the service, preserve moderation integrity and resolve disputes.
  • Removed or inactive records may remain for a limited period in databases, backups and logs before routine deletion or expiry.
  • Payment records are retained as required for accounting, tax, fraud prevention and legal compliance.
  • Badge verification and email-delivery records are retained as needed to operate review cycles and prevent duplicate notifications.
  • Support and legal correspondence is retained only as long as reasonably necessary for the request and applicable obligations.
07

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing of personal data, receive a portable copy or withdraw consent. You may also have the right to complain to a relevant data-protection authority.

Send a request to hello@yallamashoor.com. We may need to verify your identity or authority over a listing. Some information may be retained where required by law, necessary to protect others or needed to establish, exercise or defend legal claims.

Removing a listing from YallaMashoor does not remove the same metadata from the original website, app store, social profile, search engine or other independent service.

08

Security and international transfers

We use reasonable technical and organizational measures intended to protect information, including managed authentication, restricted administrative access, signed webhook verification and provider secret storage. No online service can guarantee absolute security.

YallaMashoor and its providers may process information outside your country. Where required, international transfers rely on contractual or other legally recognized safeguards.

09

Children, policy updates and related terms

YallaMashoor is intended for adults and is not directed to anyone under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as YallaMashoor, its providers or legal requirements change. We will publish the revised policy and update its effective date. Material changes may also be communicated through the service where appropriate.

Use of YallaMashoor is also governed by our Terms and Conditions and Rules.