We collect information you provide directly to us when you create an account, submit a business listing, make a payment, or communicate with us. This includes:
Account information: name, email address, and password
Business listing information: business name, address, phone number, description, hours of operation, images, and social media links
Payment information: billing details processed through Stripe (we do not directly store your credit card numbers)
Communications: messages and inquiries you send to us via email or the contact form
We also automatically collect certain information when you use the Service:
Usage data: pages visited, search queries, interactions with listings, and features used
Device information: browser type, operating system, screen resolution, and device type
IP address: collected and hashed for analytics purposes; not stored in personally identifiable form
Referral data: the URL that referred you to Hayashat
2. How We Use Your Information
We use the information we collect to:
Provide, maintain, and improve the Service
Process and manage business listings, including the review and approval workflow
Process payments for premium services (featured placement, verified badges, banner and ticker advertising)
Send transactional notifications about your account, listings, payments, and subscription status
Send expiration reminders for upcoming listing, banner, or ticker expirations
Analyze usage patterns to improve user experience and Service performance
Detect, prevent, and address fraud, abuse, or technical issues
Respond to your inquiries and provide customer support
3. Information Sharing
We do not sell your personal information to third parties. Business listing information (business name, address, phone number, description, images) is publicly displayed on the platform as part of the directory service.
We may share information with the following types of service providers who assist in operating the Service:
Payment processing: Stripe processes your payment transactions securely
Cloud storage: Amazon Web Services (AWS) stores business images and assets
Analytics: Firebase Analytics and Microsoft Clarity help us understand usage patterns
Error tracking: Sentry helps us identify and fix technical issues
We may also disclose information when required by law, to protect our rights, or in response to a valid legal request.
4. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
Passwords are hashed using bcrypt with a salt factor of 12
Authentication tokens are signed using HMAC SHA-256
All data is transmitted over HTTPS/TLS encrypted connections
Payment information is processed by Stripe's PCI-compliant infrastructure
IP addresses are hashed before storage for analytics
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
5. Cookies and Tracking
We use cookies and similar technologies to enhance your experience on the Service:
Essential cookies: Required for authentication, session management, and core Service functionality
Analytics cookies: Help us understand how users interact with the Service (see Third-Party Analytics below)
Preference cookies: Remember your settings and preferences for a better experience
You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the Service.
6. Third-Party Analytics
We use the following analytics services in our production environment to understand how the Service is used and to improve the user experience:
Firebase Analytics (Google): Collects anonymized usage data including page views, user interactions, and device information. Governed by Google's Privacy Policy.
Microsoft Clarity: Records anonymized session replays and heatmaps to help us improve the user interface. No personally identifiable information is captured. Governed by Microsoft's Privacy Statement.
These analytics tools are only active in the production environment, not during development or testing.
7. Payment Information
All payment processing is handled by Stripe. When you make a payment or load your wallet:
Your credit card information is sent directly to Stripe and is never stored on our servers
We store only a Stripe customer ID and basic transaction metadata (amounts, dates, status)
Wallet transactions are recorded in our ledger system for your account history
Stripe is PCI DSS Level 1 certified — the highest level of security certification
For more information about how Stripe handles your payment data, please review the Stripe Privacy Policy.
8. Your Rights
You have the right to:
Access: Request a copy of the personal information we hold about you
Update: Correct or update your personal information through your account settings
Delete: Request deletion of your account and associated personal data
Opt-out: Unsubscribe from promotional communications at any time
Data portability: Request your data in a portable format
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
Right to Delete: You may request that we delete your personal information, subject to certain exceptions
Right to Opt-Out:You have the right to opt out of the "sale" of your personal information. Hayashat does not sell personal information
Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, contact us at [email protected]. We will verify your identity before processing any request.
10. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy:
Account data: Retained while your account is active and for a reasonable period afterward for legal and business purposes
Business listings: Retained while actively published; removed or anonymized after account deletion
Payment records: Retained for 7 years to comply with tax and financial regulations
Analytics data:Aggregated and anonymized data is retained indefinitely; raw session data is retained according to our analytics providers' policies
When data is no longer needed, it is securely deleted or anonymized.
11. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete that information. If you believe we have collected information from a child under 13, please contact us at [email protected].
12. International Users
Hayashat is operated in the United States and our services are primarily directed toward users in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we may also notify you via email or through a notice on the Service. We encourage you to review this policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected] or visit our Contact page.