YapShop

Privacy Policy

Last updated: 21 June 2026

In short. YapShop processes two kinds of personal data: information about the vendor and their staff (you, our direct customer), and information about end customers who chat with the vendor through WhatsApp. For end customers, the vendor is the data controller and we process the data on their behalf. We use third parties (listed below) to deliver the service, including processors located outside Nigeria. Questions: support@emkairosintellisystems.com.

1. Who we are

YapShop is operated by emkairos intellisystems. When we say "we" or "us", we mean YapShop / emkairos intellisystems. When we say "vendor", we mean a business that has a YapShop account. When we say "end customer", we mean a person who chats with the vendor on WhatsApp through the YapShop platform.

2. Our role under data protection law

For vendor account data (your name, email, billing details, staff records, and so on), we are the data controller.

For end-customer data that flows through WhatsApp and the YapShop platform (the customer's name, WhatsApp number, address, order history, and messages), the vendor is the data controller and we act as the data processor. The vendor is responsible for telling their end customers what data they collect, why, and how to exercise their rights. We provide the tools that support those obligations.

3. What we collect

From vendors and their staff

  • Account information: name, email, role (owner, admin, support, sales), phone number, WhatsApp number, hashed password.
  • Business information: store name, currency, time zone, and other settings you configure.
  • Bank account information for receiving payments: bank name, account number, account holder name, and which account is the default.
  • Activity information: when you sign in, what you do in the dashboard, basic device and connection metadata captured in server logs for security purposes.

From end customers, on behalf of the vendor

  • Identifiers: WhatsApp number, and any name, display name, or email the customer shares or the vendor records.
  • Conversation data: every message exchanged on WhatsApp through the platform, including text, voice notes, images, videos, and documents the customer sends.
  • Order data: items ordered, quantities, prices paid, payment status, and delivery address (label, full name, phone, line, city, state, country, postal code, and any landmark the customer provides).
  • Derived information used by the vendor's dashboard: total orders, total spent, customer segments, and the AI agent's suggestions.

4. How we use this data

  • To provide the service: routing WhatsApp messages, generating AI replies, displaying orders, processing handoffs to human staff, and storing conversation history.
  • To support customers and resolve issues raised by vendors or end customers.
  • To bill and collect payments from vendors, and to keep accounting and tax records.
  • To protect the service, investigate suspected abuse, and comply with legal obligations.
  • To improve the platform, by analysing aggregated, non-identifying usage patterns.

We do not use end-customer conversation content to train any AI models without the vendor's explicit consent.

5. Third parties that process data with us

To deliver the service we share data with the providers below. Each is bound by their own privacy commitments and, where relevant, by data processing terms with us.

  • Anthropic(Claude AI): processes the content of WhatsApp conversations to generate AI replies on the vendor's behalf. Located in the United States.
  • Meta Platforms (WhatsApp Cloud API): delivers messages and media between vendors and end customers. Located internationally.
  • Cloudinary: hosts and serves product photos and videos uploaded by vendors. Located internationally.
  • Paystack: processes card and bank-transfer payments. Located in Nigeria.
  • Our hosting providers: run the YapShop application and database. Server locations may include facilities outside Nigeria.
  • emkairos intellisystems: the parent organisation operating YapShop, with internal access for engineering, support, and account management.

We do not sell personal data. We do not share data with advertisers.

6. International data transfers

Some of the processors above are located outside Nigeria. By using the service, you and your end customers acknowledge that data may be transferred to and stored in countries with different data protection rules than your own. We rely on the contractual terms with each processor to safeguard data in transit and at rest.

7. Cookies and local storage

The dashboard uses a small amount of browser storage:

  • A session cookie named yapshop_authed (value "1", lifetime 30 days) so server-side middleware can tell that you are signed in. It carries no other information.
  • localStorage entries holding your access and refresh tokens, so the dashboard can authenticate API calls without prompting you on every page.
  • localStorage for your theme preference (light or dark).
  • localStorage for a temporary product draft while you are creating a product, cleared on save or cancel and expiring after 24 hours.

All of these are strictly necessary for the service or are basic preferences. We do not use cookies for advertising or cross-site tracking.

8. How long we keep data

  • Vendor account and conversation data is retained for as long as the account is active. After cancellation, data is kept for 30 days to allow export, then deleted from active systems.
  • Order and payment records are retained for at least six years after the relevant tax period in line with Nigerian tax law, even if the underlying customer profile has been deleted.
  • Server logs containing connection and security metadata are retained for a short rolling window, typically not more than 90 days.

9. Your rights

Vendors and end customers have the following rights in respect of personal data we hold:

  • The right to ask for a copy of the data we hold about you.
  • The right to ask us to correct inaccurate or incomplete data.
  • The right to ask us to delete data, subject to records we are required to keep for legal, tax, or audit reasons.
  • The right to ask us to restrict or object to certain processing.
  • The right to receive your data in a portable format.

To exercise any of these rights, email support@emkairosintellisystems.com. We will respond within a reasonable time. We may need to verify your identity before acting on a request.

End-customer requests:if you are an end customer and your request relates to data held in a specific vendor's account, please contact that vendor directly. The vendor is the controller of that data. We will support the vendor in fulfilling legitimate requests.

10. Security

We take reasonable technical and organisational measures to protect personal data. These include encryption in transit (HTTPS for the dashboard and the API), authenticated access controls, role-based permissions, and regular review of who can access production systems. No service can guarantee perfect security, but we treat it as a priority and will notify affected vendors of any confirmed breach affecting their data without undue delay.

11. Children

YapShop is not directed at children under 13. We do not knowingly collect data from anyone under 13. Vendors using YapShop warrant that their customer base is not predominantly children. If you believe a child has had data collected through YapShop, contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active vendors by email or through the dashboard.

13. Contact

For any privacy questions, data requests, or complaints, write to support@emkairosintellisystems.com. If you are in Nigeria and we are unable to resolve your concern, you also have the right to complain to the Nigerian Data Protection Commission.