What we collect
When you register we store your name, email, emirate, account type and a salted password hash. We also store your profile, submitted listings, photos, listing contact number, saved favourites, reviews, reports, support requests and moderation history. Raw passwords are not stored.
What becomes public
Your display name, profile biography and approved listing details and photos are public. Customers receive your listing telephone number when they choose to contact you. Your account email is not shown in the public directory.
Previously submitted supporting documents
We no longer request or accept supporting documents for room listings. Any documents submitted previously remain private and are no longer accessible through the site. Contact support to request removal.
How we use it
We use these records to operate accounts, display approved content, manage favourites, route enquiries, moderate submissions, investigate reports and respond to support requests. Contact click counts show provider engagement; they do not record the content of external conversations.
Sessions, local storage and spam protection
A required, HttpOnly session cookie keeps you logged in for up to seven days. Listing drafts are saved in your browser’s local storage and can be cleared from that browser. We use short-lived, hashed network identifiers to limit abusive requests. No advertising trackers are installed in this release.
Service suggestions
Service suggestions store the requested service, emirate, optional details and optional email for the administration team to review. Suggestions and contact details are not published. We use these suggestions to plan which services to invite and may contact you about your suggestion if you provide an email.
Hosting and external services
The site is hosted on Cloudflare Workers. Structured records are stored in Cloudflare D1, and uploaded photos in Cloudflare R2. Self-hosted fonts and bundled photography are delivered with the site. WhatsApp and telephone links leave Afrosouq and are subject to the relevant service’s terms and privacy practices.
Access and protection
Private documents are accessible only to their uploading account and authorised administrators. Administrative decisions create an audit record. Sessions expire and are cleaned up periodically. Security measures reduce risk but cannot guarantee absolute protection.
Retention and deletion
Expired sessions and rate-limit entries are removed daily. Listings and account records remain while needed to operate and moderate the service. Contact support to request access, correction, account closure or deletion; some records may need to be retained for legitimate legal or security reasons. The operator must publish a precise retention schedule before commercial launch.
Your requests and choices
You may update your profile or pause listings in your dashboard. Use Contact support for privacy requests, document removal or concerns about misuse. We may need proportionate information to confirm account ownership before fulfilling a request. Do not send your password.
Children and policy updates
Accounts are intended for adults aged 18 and over. Do not submit children’s personal details or photos without an appropriate lawful basis. Changes to data practices will be reflected in this notice.