Privacy Document

    Privacy Policy

    How Medebir collects, uses, and protects your data.

    Effective: January 1, 2026Version 1.0Ethiopia

    Contents

    1. Data we collect2. How we use your data3. Data sharing4. Data security5. Your rights6. Data retention7. Cookies & tracking8. Policy updates
    Our commitment: Medebir does not sell, rent, or commercially exploit your personal or business data. Your data belongs to you.
    1

    Data we collect

    We collect only the data necessary to provide and improve the Medebir platform:

    Data type
    What it includes
    Registration data
    Business name, owner name, phone number, business category — to create and manage your account.
    Inventory data
    Product names, categories, quantities, pricing, purchase costs — core business operation data.
    Sales & transactions
    Sale records, payment types, amounts, seller identity, customer phone (when provided).
    Team data
    Team member names, phone numbers, and roles — for access control and accountability.
    Financial data
    Expense records, profit calculations, revenue figures — for analytics and reporting.
    Customer contacts
    Phone numbers recorded during sales or the Waiting List — used only for your business communication.
    Device & usage data
    IP address, device type, session logs — for security monitoring and service improvement.
    2

    How we use your data

    Your data is used exclusively to deliver and improve the Medebir platform:

    • To provide, operate, and maintain all platform features
    • To send real-time sale notifications to the business Owner
    • To generate business analytics, reports, and performance insights
    • To deliver customer support, onboarding, and technical assistance
    • To improve platform features and fix issues
    • To comply with applicable Ethiopian legal and regulatory requirements
    • To protect the security and integrity of the platform
    3

    Data sharing

    We do not share your data with third parties except in these limited circumstances:

    • With your explicit written consent
    • With trusted technical providers (cloud hosting, database services) under strict confidentiality agreements and only to the extent necessary to operate the platform
    • When required by Ethiopian law, court order, or lawful government authority
    • To protect the rights, property, or safety of Medebir, its users, or the public
    We never sell your data to advertisers, data brokers, or any commercial third party.
    4

    Data security

    We implement industry-standard measures to protect your data:

    • Encrypted data transmission using HTTPS/TLS protocols
    • Secure cloud infrastructure with access controls and monitoring
    • Role-based access controls that limit data visibility within the platform
    • Regular security audits and vulnerability assessments
    While we take every reasonable measure to protect your data, no system can be guaranteed 100% secure. We will promptly notify affected users in the event of a confirmed data breach.
    5

    Your rights

    You have the following rights regarding your data:

    Access

    Request a copy of the data we hold about you at any time.

    Correction

    Request correction of inaccurate or incomplete data.

    Export

    Export your data anytime via Excel or PDF in the Report Center.

    Deletion

    Request deletion of your data. We process verified requests within 30 business days.

    6

    Data retention

    We retain your business data for as long as your account is active or as needed to provide the service. Upon account termination, personally identifiable information will be deleted within 90 days, unless longer retention is required by law.

    Anonymized aggregate data may be retained indefinitely for internal analytics to improve the platform.

    7

    Cookies & tracking

    Medebir uses essential session cookies and local storage solely to maintain your login session and platform preferences. We do not use advertising cookies, cross-site tracking, or third-party analytics tools that share your data externally.

    8

    Policy updates

    Medebir may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days before they take effect. Continued use after the effective date constitutes acceptance of the revised policy.

    This Privacy Policy is governed by the laws of the Federal Democratic Republic of Ethiopia. Any disputes shall be resolved by the competent courts of Addis Ababa.

    Privacy questions or data requests?

    Phone: 0913020845  |  0943413849

    Website: www.medebir.business