Privacy Policy

The data controller is EURL Groupe Hadji Web, publisher of the Weydaa website and app, Algiers, Algeria. Contact: contact@weydaa.com.

Depending on how you use Weydaa, we process:

• Account: name, email address, password (stored in irreversibly encrypted form) and language; with “Continue with Google”: the name, email and photo provided by Google
• Phone (optional): the number shown on your listings, revealed only to signed-in users who request it
• Listings: title, description, price, photos, wilaya, commune and features
• Messaging: your messages, price offers and their read status
• Reviews, reports, favourites and search alerts
• Contact form: name, email and message
• Technical data: IP address and account identifier for security and abuse limiting, server technical logs
• Notifications: the notification identifier of your browser or device
• Only with your consent: audience measurement and Google Ads measurement (see “Cookies”)

• Creating and managing your account, publishing your listings, putting you in touch with other users: performance of the terms of use
• Sending service emails and notifications (listing approval, new message, offer): performance of the service
• Moderating listings, detecting and preventing fraud and abuse, protecting accounts: legitimate interest in protecting users
• Measuring site audience and the effectiveness of our ads: your consent, which you can withdraw at any time
• Responding to requests from competent authorities: legal obligation

Every listing is analysed automatically when it is published by an artificial intelligence service (OpenRouter, which passes it to a Google model). Only the title, description, price, location and features are sent, never your name, email or phone number: so do not put your contact details in the description. If the analysis is favourable, the listing is published; otherwise a moderator reviews it and alone decides on any refusal. By default, “Featured” listings appear first in results.

Your messages are only read by the person you are talking to. If a conversation is reported, the moderation team may view it; every such view is logged. A deleted message is hidden immediately and its content is erased within 30 days.

Weydaa does not sell or rent your data. It is entrusted to the following providers, each only for what its service requires:

• Vercel: website hosting and technical logs; US company, servers in the Paris region (France)
• Supabase: database, photos and real-time messaging; region [●]
• OpenRouter and Google: automated listing moderation (title, description, price, location, features); United States
• Upstash: abuse limiting (IP address, account identifier); region [●]
• [● email delivery provider]: service emails; [●]
• Google: sign-in with Google (name, email, photo); United States
• Browser and device notification services (Google, Mozilla, Apple): notification identifier and message preview; United States
• Sentry: technical error reports, without session recording; Germany
• PostHog: audience measurement, with your consent; European Union
• Google Ads: ad measurement, with your consent; United States
• Google Firebase: Android app notifications and crash reports; United States
• Competent authorities, where required by law

Most of these providers are located outside Algeria (European Union, United States): your data is transferred to them so that the service can work. We limit the data sent to each of them to what is strictly necessary, and exchanges are encrypted (HTTPS).

• Account: as long as it is active; when it is deleted, your data is erased or anonymised (see the “Account deletion” page)
• Listings: online for 60 days, renewable; a deleted listing is removed immediately, then its photos, description and phone number are erased within 30 days
• Deleted messages: content erased within 30 days
• Search history: 90 days
• Read notifications: 6 months
• Contact form messages, moderation log and automated listing analyses: 12 months
• Verification codes and password reset links: erased once expired
• Audience measurement (PostHog): [●]
• Server technical logs: limited period set by the host

At any time, you can:

• Access your data and get a copy: “Export my data” in Settings
• Correct it: from your profile and your listings
• Erase it: “Delete my account” in Settings; erasure is real, including in our audience measurement tool
• Object to processing or withdraw your consent: “Manage cookies”, at the bottom of the page or in Settings

For any request: contact@weydaa.com. If you believe your rights are not respected, you can refer the matter to the Algerian personal data protection authority (ANPDP).

Weydaa uses strictly necessary cookies and local storage: sign-in session, preferences, listing draft. Only with your consent, and separately: (1) PostHog audience measurement, hosted in the European Union (pages viewed and journeys, without your name, email, phone number or the content of your messages, and without session recording); “For you” suggestions are then computed on your device; (2) Google Ads measurement (Google cookies), which counts sign-ups and listings posted thanks to our ads, without personalised advertising. Until you make a choice, nothing is loaded.

You can change your choices at any time: Manage cookies

Weydaa is intended for people aged at least 19. We do not knowingly collect data about minors: if you believe a minor has sent us data, write to us so that it can be deleted.

Weydaa implements technical and organisational measures to protect your data: HTTPS/TLS encryption, irreversibly encrypted passwords (bcrypt), login attempt limiting, secure authentication tokens.

In addition to the data described above, the Weydaa Android app processes:

• Sign-in tokens: stored on your device, encrypted (Android Keystore), and erased when you sign out
• Push notifications: sent through Firebase Cloud Messaging (Google). A device identifier (notification token) is linked to your account to deliver them; it is deleted with your account or as soon as it is no longer valid
• Crash reports: Firebase Crashlytics (Google) receives technical information about the error and the device (model, Android version, app version), without the content of your messages or listings
• Photos: the app only accesses the photos you pick or take for your listings
• No advertising and no advertising trackers, and no GPS location: you choose the wilaya and commune of your listings yourself

To learn how to delete your account and what happens to your data: Account deletion

For any question about your data: contact@weydaa.com.