Privacy Policy
Last updated: September 20, 2026
This Privacy Policy is issued by Yaltopia Software Technology PLC ("Yaltopia," "Yaltopia Ticket," "we," "us," or "our"), a private limited company organized under the laws of Ethiopia and the owner and operator of the Yaltopia Ticket platform. We are committed to protecting your privacy in accordance with applicable Ethiopian law, including the Personal Data Protection Proclamation, and act as the data controller for the personal data described in this Policy. By using Yaltopia Ticket, you agree to the collection and use of information as described here.
We do not knowingly collect more identity/financial data than is necessary for the stated purpose, and verification documents are stored separately from general account data with restricted access.
- Account data: name, email, phone number, password (hashed), company/business profile
- Verification data: government-issued ID (e.g. Fayda) and business registration/TIN details, used solely for identity and business verification
- Business & tax documents: invoices, payment receipts, withholding certificates, declarations, bank statements, and other documents you create, upload, or scan
- Scanned images: photos or uploads submitted to our scanning/OCR features, and the data automatically extracted from them
- Communications: messages sent through the Platform, support inquiries, chat/support records
- Technical data: device information, IP address, browser type, app version, crash logs, for security and analytics
- Cookies & similar technologies: see the Cookies section below
How We Use Your Information
- To provide core services: account creation, invoicing, payments, tax documents, reporting
- To verify your identity and business details before granting account or feature access
- To process subscription fees and send transaction-related communications
- To respond to support inquiries and enforce our Terms of Service
- To detect, investigate, and prevent fraud and other abuse
- To comply with legal obligations, including responding to lawful requests from Ethiopian authorities
- To improve the Platform, including our scanning/OCR accuracy, through aggregated, anonymized usage analysis
- We use vetted third-party service providers for hosting, database infrastructure, payment processing, analytics, and customer communications. These providers are contractually bound to use your data only to provide services to us.
- Verification documents (ID, business registration) are shared only with the internal verification team and are never shared publicly.
- We may disclose information where required by Ethiopian law, court order, or to protect the rights, property, or safety of Yaltopia, our users, or the public.
- If Yaltopia is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to this Policy's protections continuing to apply.
- We do not sell your personal information to third parties.
- Account data is retained for as long as your account is active, and for a limited period after closure (up to 12 months) to handle disputes, legal claims, or re-activation requests, unless earlier deletion is required by law or requested by you.
- Verification documents are retained only as long as necessary to maintain your verified status, and are securely deleted within 90 days of account closure, unless a longer period is legally required.
- Invoices, receipts, and other tax-related records are retained as required by Ethiopian tax and financial regulations (typically several years).
- Support communications are retained for up to 24 months for quality and dispute-resolution purposes.
Data Security & Breach Notification
- We use industry-standard encryption in transit and at rest, access controls, and regular security reviews to protect your data.
- Verification documents are stored with restricted, logged access limited to authorized staff.
- No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Like any software system, ours may occasionally have issues — see our Terms of Service for guidance on double-checking scanned data.
- In the event of a data breach that poses a real risk of harm to you, we will notify affected users and, where required, the relevant Ethiopian authority, without undue delay and in line with applicable legal timelines.
Legal Basis & Your Consent
Where required by law, we process your personal data on the basis of: your consent (e.g., for marketing), performance of a contract (e.g., account services), our legitimate interests (e.g., fraud prevention, service improvement), or compliance with a legal obligation. You may withdraw consent at any time where consent is the basis for processing, without affecting processing already carried out.
Your Privacy Rights
Subject to applicable law, you have the right to:
Access the personal data we hold about you Correct inaccurate or incomplete information Request deletion of your personal data (see Account Deletion below) Object to or restrict certain processing (e.g., marketing) Request a portable copy of your data Withdraw consent where processing is based on consent Lodge a complaint with the competent Ethiopian data protection authority To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Marketing Preferences
You can opt out of promotional emails and notifications at any time via your Account Settings or the "unsubscribe" link in any marketing email. You will still receive essential transactional and security communications (e.g., subscription/payment confirmations, security alerts).
Cookies and Tracking
We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Platform is used. You can manage or disable cookies through your browser settings; disabling some cookies may affect Platform functionality.
Account Deletion
You can request deletion of your account and associated personal data at any time by contacting us. Some data may be retained after deletion as described in the Data Retention section above or where required by law (e.g., financial records, active disputes).
Request account deletionChildren's Privacy
Our service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe a child has provided us data should contact [email protected] immediately.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. Material changes will be notified via email or in-app notice, and the "Last updated" date will reflect the most recent revision. Continued use of the Platform after changes take effect constitutes acceptance.
Contact Us
For any privacy questions, requests, or complaints:
[email protected]