Yashi Labs · Buy & Binge

Buy & Binge Team privacy policy

Buy & Binge Team is the staff operations app published by Yashi Labs. It is available to team members with an account provided by the business. This policy describes information handled through the staff app on Android and iOS.

Information the app handles

• Staff account identifiers, sign-in credentials and assigned roles, used to authenticate you and control access.
• Customer names, contact details and account records entered or managed by authorized staff.
• Orders, sales, payment status, transaction references and subscription or fulfillment records managed for business operations.
• Support conversations and other text entered in the app.
• Product images you choose to upload. The app uses the system image picker; it does not upload your entire photo library.
• Operational and security records associated with requests, such as network addresses, request timing and authenticated actions.

Staff login tokens are stored using the operating system's secure storage. The app also caches information locally to provide its features. Signing out clears the active session. The review account uses a separate sample workspace containing fictional records; sample sessions are kept in memory and end when the app restarts.

How information is used

We use this information to provide staff access, manage customer service, record and fulfill orders, maintain business records and protect the service. Access depends on the staff role assigned by the business. Optional image uploads and optional record fields are used when you choose to provide them.

Service providers and sharing

Information is processed by our application and database hosting, storage and network service providers. Information may also be used by the business's fulfillment, payment and communication providers when staff carry out the corresponding workflow. We may disclose information when required by law or to protect the service. The staff app does not include advertising SDKs or advertising tracking, and we do not sell personal information collected through it.

Security and retention

App requests use encrypted HTTPS connections and the backend enforces authenticated roles. We retain account and operational records while needed to provide the service, support customers, maintain transaction and audit history, and meet applicable obligations. Removing a staff login does not automatically erase business transaction records.

Your choices and requests

Staff accounts are provisioned by the business; there is no public account registration in this app. Contact your administrator or email [email protected] to request access, correction, account closure or deletion of personal information. We may verify your identity and retain records needed for ongoing service, accounting or other applicable obligations. You can decline optional image selection and sign out when you finish using the app.

Changes

We will update this page when our practices change and revise the effective date.