Privacy Policy

Last updated: April 2026

1. Who We Are

Yawmak is a B2B birthday cake automation platform operating in Lebanon. We connect companies with local bakery partners to automate employee birthday celebrations.

Contact: hello@yawmak.com

2. What Data We Collect

• Company information: company name, address, city, delivery address
• Employee information: full name, birthday (day and month only), dietary restrictions, cake preferences and notes
• Account information: email address, password (hashed, never stored in plain text)
• Payment information: processed via Stripe — we never store card numbers. Stripe's privacy policy applies to payment data.
• Usage data: pages visited, actions taken within the platform
• Communications: WhatsApp messages sent to bakery partners for order management

3. Why We Collect It

• Employee names and birthdays: to automate birthday cake delivery
• Dietary restrictions: to ensure appropriate cakes are ordered
• Email: to send order confirmations, invoices, and platform notifications
• Payment info: to process billing via Stripe
• Usage data: to improve the platform and fix issues

4. How Long We Keep It

• Active account data: kept while your account is active
• Employee records: deleted 30 days after company account closure
• Payment records: kept 7 years for tax and accounting compliance
• You can request deletion at any time by emailing hello@yawmak.com

5. Who We Share It With

• Bakery partners: employee first name, delivery address, dietary notes, and cake preferences — only what they need to fulfill the order
• Stripe: payment processing
• Resend: email delivery
• Meta/WhatsApp: order notifications to bakeries

We do not sell your data to any third party.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Withdraw consent at any time

To exercise these rights, email hello@yawmak.com.

7. Cookies

We use session cookies for login functionality only. No tracking cookies, no advertising cookies, no third-party analytics cookies.

8. Data Security

All data is encrypted in transit via HTTPS. Passwords are hashed using bcrypt. Our database is hosted on Supabase with encryption at rest.

9. Changes to This Policy

We will notify users by email if this policy changes materially. Continued use after notification constitutes acceptance.

10. Contact

hello@yawmak.com
Yawmak, Lebanon