Legal

Privacy Policy

We take your privacy seriously. This policy explains what data we collect, why we collect it, and how it's protected.

Effective: January 1, 2026Updated: June 1, 2026Governed by Ethiopian law
Plain language summary: We collect only what we need to run the marketplace and protect you. We never sell your data. Your Fayda ID information is stored encrypted and never shared without your explicit consent.
Section 01

Data we collect

When you use Bilu Store, we collect information necessary to operate the marketplace and protect every transaction. This includes:

  • Account data: your name, phone number, email address, and profile photo
  • Identity data: Fayda ID reference number and verification status (not your full ID document)
  • Transaction data: listings you create or purchase, escrow amounts, payment records in ETB
  • Communication data: messages exchanged via in-app chat, dispute correspondence
  • Device data: device model, OS version, IP address, and app crash logs for technical support
  • Location data: city-level location for listing relevance (not precise GPS unless you opt in)

Section 02

How we use your data

We use your data to operate and improve the platform — and for no other purpose:

  • Processing and protecting escrow transactions
  • Verifying seller and buyer identities to prevent fraud
  • Resolving disputes fairly with full transaction history
  • Sending you important notifications about your orders, payments, and account
  • Detecting and preventing scams, fake listings, and fraudulent accounts
  • Improving the app based on aggregate, anonymized usage patterns

We do not use your data for advertising targeting, profiling, or resale to third parties.


Section 03

Who we share it with

We share your data only in limited circumstances:

  • Other users: your public profile, listing details, and seller rating are visible to other users
  • Payment processors: transaction amounts are shared with our licensed payment partners for ETB escrow processing
  • Dispute resolution: when a dispute is opened, relevant transaction and communication data is shared with our resolution team
  • Legal compliance: we may disclose data when required by Ethiopian law, court order, or regulatory authority

We do not sell, rent, or trade your personal data to any third party for commercial purposes.


Section 04

Escrow & payment data

All ETB payments processed through Bilu Store's escrow system are handled by our licensed payment infrastructure. Your payment information is encrypted in transit and at rest. We store transaction records for 7 years in accordance with Ethiopian financial regulations.

We never store full card numbers or mobile money PINs. Payment credentials are tokenized and processed directly by our certified payment partners.

Section 05

Fayda ID data

Fayda verification is performed through Ethiopia's national digital ID infrastructure. When you verify:

  • We receive a verified confirmation and a pseudonymous reference token — not your full Fayda record
  • Your Fayda ID document image is processed by the Fayda system directly, not stored by Bilu Store
  • Verification status (verified/unverified) is displayed on your seller profile

Fayda data is governed by the Fayda National Identity Programme's own privacy policy in addition to this policy.


Section 06

Data retention

We retain your data for as long as your account is active, plus a reasonable period thereafter for legal and fraud-prevention purposes:

  • Account data: retained while account is active, deleted within 90 days of account closure
  • Transaction records: 7 years (Ethiopian financial regulation requirement)
  • Dispute records: 3 years from resolution
  • Chat messages: 1 year from transaction completion
  • Device/technical logs: 90 days

Section 07

Your rights

Under Ethiopian data protection principles, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your account and personal data (subject to legal retention obligations)
  • Receive your data in a portable format
  • Object to certain processing of your data

To exercise any of these rights, contact our privacy team at privacy@bilustore.et. We respond within 14 days.


Section 08

Security

We implement industry-standard security measures to protect your data, including TLS encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls, and regular security audits. Despite these measures, no system is 100% secure — if you suspect a security issue, report it immediately to security@bilustore.et.


Section 09

Children

Bilu Store is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.


Section 10

Changes to this policy

We may update this Privacy Policy from time to time. We will notify all users via in-app notification and email at least 14 days before material changes take effect. Your continued use of Bilu Store after the effective date constitutes acceptance of the updated policy.


Section 11

Contact our privacy team

Questions about your privacy?

Our Data Protection Officer is available to answer any questions about how we handle your personal data.

privacy@bilustore.et
Bilu Store, Bole Sub-city, Addis Ababa, Ethiopia
We respond within 14 business days

Contact us