1. Data we collect
- Account data — name, email, password hash (email/password sign-in), Google profile identifier (Google sign-in), role, and permission flags
- Profile & storefront — avatar, banner images, public handle, listing content, reviews, and reports you submit
- Usage & security — IP address, browser type, session cookies, rate-limit counters, and security event logs (e.g. failed sign-in attempts)
- AI interactions — prompts, attachments you choose to send, and generated responses stored for your workspace history where enabled
- Payment-related metadata — subscription plan and transaction references processed by our payment partners (we do not store full card numbers)
2. How we use data
We use your information to:
- Authenticate you and enforce role-based access
- Operate marketplace listings, storefronts, trust records, and billing
- Provide AI copilot and related features you request
- Detect abuse, fraud, and security incidents
- Communicate service updates and respond to support requests
3. Cookies & sessions
Sign-in uses HTTP-only JWT session cookies scoped to our domain. These are essential for security and cannot be disabled while using authenticated features. We do not use third-party advertising cookies on the core workspace.
4. Sharing & processors
We share data only when necessary:
- Infrastructure providers — hosting, database, email, and file storage under data-processing agreements
- Google— when you choose "Continue with Google" for OAuth sign-in
- AI model providers — when you submit prompts or files to AI features
- Legal requirements — when compelled by valid law or to protect users and the platform
We do not sell personal information to data brokers.
5. Retention
Account data is kept while your account is active. Security logs are retained for a limited period for investigation. You may request deletion of your account subject to legal, billing, and fraud-prevention obligations.
6. Your rights
Depending on your location, you may have rights to access, correct, export, or delete personal data. Contact support@mrsoftware-et.com with the email tied to your account. We will verify identity before fulfilling requests.
7. International transfers
Data may be processed in Ethiopia and in countries where our subprocessors operate. We apply appropriate safeguards for cross-border transfers consistent with applicable law.
8. Contact
Privacy questions: legal@mrsoftware-et.com. Data controller: MrSoftware ET.