Privacy Policy

We at EDIT EDUCATIONAL SERVICES PLC ("Company", "we", "us", or "our"), the provider of the Endewred application ("Endewred", "App", or "Service"), are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social commerce automation platform.

By using our Service, you also agree to our Terms of Service.

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources.

1.1 Information You Provide

• Account Information: Name, email address, and phone number when you register.
• Profile Information: Business name, username, and profile picture.
• Social Media Data: When you connect your Instagram or TikTok accounts via official APIs, we receive access to your public profile, account ID, and permissions to manage direct messages on your behalf.
• Payment Information: Subscriptions are processed via Chapa. We do not store complete credit card or mobile wallet credentials on our servers.
• Communications: Content of your support requests or feedback.

1.2 Information Collected Automatically

• Usage Data: Log files, IP addresses, browser types, and interaction data within the Service (e.g., flow creation, message volumes).
• Message Content: To provide the automation service, we process the text of incoming messages and outgoing automated replies.

2. How We Use Your Information

• To provide and manage the automation service.
• To process transactions and send billing-related communications (via Chapa).
• To improve the platform through usage analysis and bug detection.
• To comply with legal obligations and detect fraud or security issues.

3. How We Share Your Information

We do not sell your personal information. We share it only with:

• Social Media Platforms: Meta/Instagram and TikTok to execute your configured automations.
• Payment Processors: Chapa for billing and subscription management.
• Infrastructure Providers: Cloud hosting services like Railway and Convex.
• Legal Compliance: When required by law or to protect our rights.

4. Data Retention

We retain your personal information for as long as necessary to provide the Service.

• Deleted Accounts: When you delete your account, personal data is typically deleted or anonymized within 90 days.
• Logs: Retained for 12 months for security and analytics purposes.

5. Your Rights and Choices

In accordance with the Ethiopian Personal Data Proclamation No. 1285/2021 and international standards (GDPR):

• Access & Correction: You can update your profile at any time.
• Portability: Request a copy of your data.
• Erasure: Request deletion of your account and personal data ("Right to be Forgotten").

6. Data Security

We implement appropriate technical and organizational security measures (AES-256 encryption at rest, TLS 1.3 in transit) to protect your personal information. While we strive to protect your data, no method of transmission over the Internet is 100% secure.

7. Meta & TikTok Integration

Endewred uses official Graph APIs. Important information:

• OAuth Authentication: We use Meta's and TikTok's OAuth 2.0 for secure authentication. We never ask for or store your social media passwords.
• Permissions: We only request permissions necessary for our Service (DM automation, profile access).
• Revoke Access: You can revoke Endewred's access at any time through your social settings or our dashboard.

Data Deletion Instructions (Meta Platform Compliance)

To request deletion of your data pursuant to Meta's Platform Terms Section 3(d), you have three options:

• Option 1 - Via Facebook/Instagram Settings:
  • Go to your Facebook Settings & Privacy → Settings → Apps and Websites
  • Find "Endewred" in your connected apps list
  • Click "View and Edit" then select "Remove"
  • This will automatically trigger data deletion on our end
• Option 2 - Via Endewred Dashboard:
  • Log in to your Endewred account
  • Go to Settings → Connected Accounts
  • Click "Disconnect" next to your Instagram account
  • Select "Delete all my data" when prompted
• Option 3 - Email Request:
  • Email legal@endewerede.com with subject "Data Deletion Request"
  • Include your Instagram username and registered email
  • We will process your request within 30 days
  • You will receive a confirmation code upon completion

Note: Data deletion is permanent and irreversible. All your conversations, automation flows, and contact data will be permanently removed from our systems.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at: