Privacy policy

This policy explains what DebutYard SaaS Solutions (Kenya) collects when you use DebutYard, why, and your choices. We follow Kenya's Data Protection Act, 2019, and aim to meet the GDPR standard for visitors from the EU and UK.

What we collect

• Account data: your email, and your name and avatar if you sign in with Google or GitHub.
• Listing data you submit: product details, images and links.
• Order data: what you bought, amounts and the payment reference. Card details stay with Paystack or PayPal.
• Usage data: pages viewed, applause, clicks on outbound links, and technical data such as IP address and browser, used for analytics and to detect applause fraud.

How we use it

• To run your account, publish your listings and deliver what you buy.
• To keep rankings fair by detecting fake accounts and applause manipulation.
• To send service emails (sign-in links, receipts, launch updates) and, if you opt in, our newsletter.
• To meet legal, tax and accounting obligations.
• To write once to businesses that have just launched about our submission service, using the contact address they publish on their own website and public information about their site. You can opt out of any such email by replying to it, and we keep a record of addresses that opt out so we never contact them again.

Who we share it with

Service providers that run parts of DebutYard for us: hosting (Vercel), database (Supabase), file storage and bot protection (Cloudflare), email (Resend, and Maildoso for outreach email), payments (Paystack, PayPal), Domain Rating data (Ahrefs), writing and classification (Google Gemini) and fetching public web pages our own checks can't reach (Firecrawl). For the submission service, we share the product details you give us with the directories we submit to. We don't sell personal data.

Badge block

If you allow directory badges on a submission order, you add a small block to your website that loads from DebutYard. As with any file a page loads, our hosting provider receives the IP address and browser details of your visitors when it's fetched. We use these only to deliver the block and keep it secure, and we don't use them to identify or track your visitors. The block sets no cookies. The badges it shows may load images from the directories they came from, under those directories' own policies. If your site's visitors are covered by your own privacy policy, mention this there. Removing the block stops all of this.

Bot protection

The Domain Rating checker uses Cloudflare Turnstile to tell people from automated traffic. When you run a check, Turnstile collects information about your device and browser, such as your IP address and browser signals, and Cloudflare processes it to decide whether the request is genuine. Cloudflare's handling of this data is covered by the Cloudflare Turnstile Privacy Addendum.

Retention

We keep account and listing data while your account is open. Order records are kept as long as tax law requires. Applause and usage logs are kept for up to 24 months.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing support@debutyard.com. You can also complain to the Office of the Data Protection Commissioner (Kenya) or your local authority.

Cookies

We use essential cookies to keep you signed in and to remember your checkout. We don't use advertising cookies.