1. Introduction
This Privacy Policy explains how Abay Repository (the "Platform", also referred to as Abrehot Library) collects, uses, stores, and protects personal data. It forms part of the same legal framework as our Terms and Conditions and applies to all users, including readers and authors.
Processing of personal data is governed by the laws of the Federal Democratic Republic of Ethiopia, including the Personal Data Protection Proclamation No. 1324/2024 ("PDPP").
2. Data We Collect
- Account data: name, username, email address, phone number, and role (reader, author, or staff).
- Identity data (where required): national ID or verification details for authors, in line with platform rules.
- Transaction data: purchase history, payment references, and royalty-related records (not full card secrets).
- Usage data: books viewed or downloaded, device/browser type, and approximate location derived from IP where necessary for security.
- Communications: support messages and notifications preferences.
3. How We Use Your Data
- To create and manage your account and provide Platform services.
- To process payments, downloads, and author royalties.
- To send service emails (including password reset and two-factor authentication codes).
- To improve recommendations, security, and platform performance.
- To comply with Ethiopian law, tax, and regulatory obligations.
We process data under principles of lawfulness, consent where required, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
4. Sharing and Processors
We may share data with:
- Payment providers (e.g. Telebirr, Chapa, PayPal) solely to complete transactions.
- Hosting, email, and security service providers acting under contract.
- Authorities when required by Ethiopian law.
We do not sell personal data to third parties for marketing.
5. Your Rights (PDPP)
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure (where applicable)
- Right to data portability
- Right to object or restrict processing
To exercise these rights, contact us through your profile or the Platform support channels.
6. Security and Retention
We implement appropriate technical and organizational measures to protect personal data. In case of a personal data breach, the Platform will notify the relevant authority within 72 hours of detection where required by law.
Data is retained only as long as needed for the purposes above, legal obligations, or dispute resolution.
7. Children
The Platform is not directed at children under the minimum age required by Ethiopian law for online accounts without guardian consent. We do not knowingly collect such data.
8. Changes and Contact
This Privacy Policy may be updated from time to time. The current version is always available from the Platform footer and registration pages.
Last Updated: October 21, 2026
Together with the Terms and Conditions, this policy governs your use of Abay Repository.
