1. Introduction

Welcome to Habesha Houston ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our website and mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, or interact with our services.

By using our website, mobile applications, or services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services.

2.1 Information You Provide to Us

• Account Information: When you register for an account, we collect your name, username, email address, and password (which is encrypted using secure hashing algorithms).
• Business Listings: When you submit a business listing, we collect business name, description, category, address, phone number, email, website, business hours, and images.
• Classified Ads: When you post a classified ad, we collect ad title, description, price (if applicable), location, contact information (phone, email), and images.
• Community Events: When you submit an event, we collect event title, description, date, time, location, contact information, and images.
• Reviews and Ratings: When you submit a review, we collect your rating (1-5 stars) and review text (optional, up to 500 characters).
• RSVP Information: When you RSVP to an event, we collect your name and email address.
• Contact Form: When you contact us, we collect your name, email, subject, and message.
• Registration IP Address: For security purposes, we collect your IP address when you create an account.

2.2 Automatically Collected Information

• Cookies and Session Data: We use cookies and session storage to maintain your login status and preferences.
• Usage Data: We may collect information about how you access and use our website and mobile applications, including your IP address, browser type, operating system, device type, device identifiers, and pages or screens visited.
• Mobile Device Information: When using our mobile applications, we may collect device information such as device model, operating system version, unique device identifiers, mobile network information, and app version.
• Location Data: If you grant location permissions in our mobile application, we may collect location data to provide location-based features such as showing nearby businesses or events. You can disable location services at any time through your device settings.
• Translation Services: If you use translation features, third-party services may collect information according to their privacy policies.
• API Usage Data: When using our mobile applications, API requests are logged for security and performance monitoring purposes, including request timestamps, endpoints accessed, and device information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our services, including displaying business listings, classified ads, and community events.
• User Accounts: To create and manage your account, authenticate your identity, and process your requests.
• Communication: To send you email verification messages, respond to your inquiries, and notify you about important updates related to your submissions.
• Event Management: To manage event RSVPs and send event-related notifications (including cancellation notices).
• Content Moderation: To review and approve user-submitted content before it is published on our website.
• Security: To detect, prevent, and address technical issues, fraud, or security threats.
• Analytics: To understand how users interact with our website and improve our services.
• Legal Compliance: To comply with applicable laws, regulations, or legal processes.

4. Data Storage and Security

We implement comprehensive technical and organizational security measures to protect your personal information:

• Encryption: Passwords are encrypted using industry-standard secure hashing algorithms (bcrypt).
• Secure Sessions: We use secure session management with HttpOnly cookies, Secure flag (HTTPS), and SameSite protection to protect your account information.
• Database Security: We use prepared statements (PDO) to prevent SQL injection attacks and implement access controls.
• Input Validation & Sanitization: All user inputs are validated and sanitized before storage, with comprehensive SQL injection and XSS pattern detection.
• CSRF Protection: We use security tokens on all forms to protect against cross-site request forgery attacks.
• Rate Limiting: We implement rate limiting and IP-based blocking to prevent abuse and brute-force attacks.
• Account Security: Accounts are automatically locked after multiple failed login attempts for security protection.
• Security Headers: We implement comprehensive security headers including HSTS, X-Frame-Options, Content-Security-Policy, and others to protect against various attacks.
• IP Blocking: Suspicious IP addresses are automatically blocked to prevent malicious activities.
• Access Control: Administrative access is restricted to authorized personnel only with role-based permissions.
• Security Monitoring: All security events are logged and monitored for suspicious activities.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services that may collect information:

5.1 Mapping and Translation Services

• Mapping Services: We use third-party mapping services to display business and event locations. These services may collect information about your use of map features according to their respective privacy policies.
• Translation Services: We use third-party translation services to provide translation functionality. These services may collect information according to their privacy policies when you use the translation feature.
• Authentication Services: If you sign in using third-party authentication services, these services collect information according to their privacy policies. We only receive the information you authorize (such as name, email, and profile picture).

5.2 Image Hosting Services

• Image Hosting: We use third-party image hosting services to store and serve images uploaded by users. These services process images according to their respective privacy policies.

5.3 Live Chat Services

• Live Chat: We use third-party live chat services to provide customer support and communication features. When you use the live chat feature, these services may collect information such as your messages, IP address, browser information, and other data according to their respective privacy policies.

5.4 Mobile Application Services

• App Stores: When you download our mobile application from app stores (such as Google Play Store), the app store provider may collect information according to their privacy policies, including purchase information, device information, and usage statistics.
• Push Notifications: If you enable push notifications in our mobile application, we may send you notifications about events, messages, or other updates. You can disable push notifications at any time through your device settings or app settings.
• Device Permissions: Our mobile application may request certain permissions (such as location, camera, storage) to provide specific features. You can grant or deny these permissions at any time through your device settings.

These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they collect, use, and share your information.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Public Content: Information you submit for business listings, classified ads, events, and reviews will be displayed publicly on our website once approved.
• Service Providers: We may share information with third-party service providers who assist us in operating our website, conducting our business, or serving our users.
• Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and view your account information by logging into your dashboard.
• Edit: You can edit your business listings, classified ads, and events through your user dashboard.
• Delete: You can delete your submitted content from your dashboard. Note that deleted content may remain in our database for administrative purposes but will not be publicly visible.
• Account Deletion: You can request account deletion by contacting us. We will delete your account and associated data, except where we are required to retain information by law.
• Email Preferences: You can opt out of receiving non-essential emails by using the unsubscribe link included in our emails or by contacting us. You can choose to unsubscribe from all marketing emails or only event-related emails. Password reset and security notification emails cannot be unsubscribed from, as they are essential for account security.
• Cookie Settings: Most browsers allow you to refuse or delete cookies. However, disabling cookies may affect your ability to use certain features of our website.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Prevent spam and abuse
• Improve website functionality

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use our website.

9. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

10. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Account Information: Retained until you delete your account or request deletion.
• Content Submissions: Retained until you delete them or they expire according to their expiration dates.
• Reviews: Retained as long as the associated business listing exists.
• Event RSVPs: Retained until the event date has passed and the event is deleted.

11. International Data Transfers

Our website is hosted in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to the transfer of your information to the United States.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Trademarks

All trademarks, service marks, and trade names used on this Website are the property of their respective owners. This includes all product names, logos, and brands mentioned or displayed on this Website.

The use of any third-party trademarks does not imply endorsement, sponsorship, or affiliation with Habesha Houston. All third-party services used on this Website are subject to their respective terms of service and privacy policies.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: