Privacy Policy

Addis Poster ("we", "us", "our") is a classifieds platform for the Ethiopian diaspora community in the DC, Maryland, and Virginia (DMV) region. Our website is addisposter.com and our mobile app is available on iOS and Android.

• Phone number — used for SMS one-time password (OTP) sign-in. We do not store passwords.
• Display name — provided by you during registration; shown on listings and reviews.
• Listing content — titles, descriptions, prices, photos, and category data you post.
• Messages — in-app messages between buyers and sellers stored on our servers.
• Payment information — processed entirely by Stripe. We never see or store full card numbers. We store only the Stripe session ID and plan type.
• Usage data — standard server logs (IP address, browser/device type, pages visited) retained for up to 90 days.

• Authenticate you via OTP and maintain your session.
• Display your listings, business profile, and reviews to other users.
• Deliver in-app messages between users.
• Process promoted listing and advertising payments through Stripe.
• Detect and prevent fraud, spam, and abuse.
• Send important service notifications (never marketing without consent).

We do not sell your personal information. We share data only with:

• Twilio — to deliver SMS OTP messages (phone number only).
• Stripe — to process payments (redirected to Stripe's hosted page).
• Railway / Vercel — hosting providers that store data in the United States.
• Law enforcement, when required by a valid legal process.

We retain your account data for as long as your account is active. You may request deletion at any time by contacting us. Deleted accounts have their phone number and display name removed within 30 days; listings are anonymized rather than deleted to preserve community history.

Depending on your location you may have the right to access, correct, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, email us at privacy@addisposter.com.

Addis Poster is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

All data is transmitted over HTTPS. Passwords are never stored (OTP-only auth). JWT tokens expire after 30 days. We apply industry-standard security practices, but no system is 100% secure.

We will post any material changes here and update the effective date. Continued use of Addis Poster after changes constitutes acceptance of the updated policy.

Questions? Email privacy@addisposter.com.