Personal data processing policy

Version of October 4

This Policy has been prepared in accordance with the Law of the Republic of Armenia "On Protection of Personal Data" and explains which data of hayjan.am users is processed, why, for how long it is kept and what rights users have.

1. Who processes the data

The personal data processor is the Site operator listed in the "Contacts" section. For questions about data processing, write to the email address in the "Contacts" section or use the support form on the Site.

2. What data we process

Account data: phone number, display name (nickname), password as an irreversible hash, optionally an email address and profile photo, language and currency settings.

Listing content: texts, prices, photos and videos, location (region, city, district, address and map point — if you provided them), and the history of listing changes.

Interaction data: phone views and WhatsApp button clicks, favorites, reports; in later stages — messages, reviews and support requests.

Technical data: IP address, browser and device information, date and time of actions, the action log (audit log), one-time confirmation codes and their status.

3. Why we process data

Registration, login, phone confirmation and account recovery.

Posting, moderating, translating and displaying listings; search and filtering.

Communication between users: showing the phone number (if you allowed it), opening WhatsApp, email notifications (if an email is provided and confirmed).

Security: protection against spam, fraud and abuse, request limits, investigating violations, restoring data after mistakes or a breach.

User support and compliance with the laws of the Republic of Armenia.

4. Legal basis and principles

Data is processed on the basis of the consent you give when signing up and in cases expressly provided by law. You may withdraw consent; in that case the account is closed and the data deleted or anonymized unless the law requires further retention.

We process only the data needed for the stated purposes, keep it accurate and do not use it for purposes incompatible with those stated.

5. Who receives the data

Publicly visible on the Site: nickname, profile photo, time on the site, listings and rating. The phone number is shown only if you enabled it, and only after the "Show number" button is pressed.

To deliver a confirmation code, the phone number and the code are passed to the messenger you choose (Telegram or WhatsApp) or to a staff member who sends the code manually. These services may process data outside the Republic of Armenia; by choosing a channel you consent to such a transfer.

Service providers that run the Site (hosting and file storage, email delivery) receive data only to the extent needed for their services and must keep it confidential.

The map on the Site is loaded from OpenStreetMap servers, which receive your browser's IP address. Address search uses the OpenStreetMap Nominatim service.

Data is disclosed to public authorities only in the cases and manner established by the laws of the Republic of Armenia.

We do not sell personal data or share it for advertising.

6. Retention

Account and listing data is kept while the account is active.

Deletion through the Site interface is "soft": the data is hidden from the public but kept so it can be restored after a mistake or a breach, to resolve disputes and to prevent abuse. Photos and videos of deleted content are kept for at least 30 days and may then be permanently deleted.

At your request, data is deleted or anonymized, except information that must be kept by law or is needed to protect the rights of the operator and other users.

One-time confirmation codes are stored as hashes and are valid for a few minutes; codes for manual sending are deleted after use or expiry.

7. Your rights

You have the right to be informed about the processing of your data and to access it, to request its correction, blocking or deletion, and to withdraw your consent.

Most data can be changed in your profile settings. Send other requests to the operator's contacts; we will respond within the time limits set by the laws of the Republic of Armenia.

You may appeal the operator's actions to the authorized personal data protection body of the Republic of Armenia or to a court.

8. Data protection

Connections to the Site are protected with HTTPS. Passwords and API keys are stored only as hashes. Staff access to data is limited by role and permissions, and all administrative actions are logged. The database and files are backed up.

9. Cookies

The Site uses only necessary cookies: a session identifier (to keep you logged in) and your chosen language and currency. No third-party advertising or analytics cookies are used.

10. Changes to this Policy

We may update this Policy. The new version is published on this page with its date; we will announce significant changes on the Site.

Contacts

Sergey Aleksandrovich Pozdnyakov, sole proprietor

9 Tatevi St, Vanadzor, Republic of Armenia

admin@hayjan.am

hayjan.am