Privacy
South Africa

Legal

Privacy Policy

Fermain Pty Ltd, trading as Yagr. Effective .

1. Overview

This Privacy Policy explains how Fermain Pty Ltd, trading as Yagr (we, us, or Yagr) collects, uses, stores, and protects personal information when you use the Yagr consumer app, seller platform, and related services (together, the Platform).

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

2. Who processes your data

Responsible party: Fermain Pty Ltd (trading as Yagr).
Privacy enquiries and data subject requests: privacy@yagr.app

3. Information we collect

Depending on how you use the Platform, we may collect:

  • Account data — name, email address, profile picture, and role, provided when you sign in with Google (or via a developer sign-in on non-production environments).
  • Listing and property data — addresses, descriptions, photographs, room details, asking price, agency association, and publication status when you create or manage listings on the seller platform.
  • Search and hunt data — natural-language queries, filters, saved hunts, likes, passes, skips, and reactions used to run search and personalise your feed.
  • Communications — messages you send through contact or viewing-request flows, and support correspondence.
  • Payment data — billing status, receipts, and transaction references. Card numbers are handled by our payment provider; we do not store full card details on our servers.
  • Technical and usage data — IP address, browser type, device information, pages viewed, and error logs. Where you accept analytics cookies, similar data may be collected through Google Tag Manager / Google Analytics.
  • Inferred or generated data — search intent parsed from your queries (including via AI models), match scores, and notification preferences.

4. How we use your information

We use personal information to:

  • provide, secure, and maintain the Platform and your account;
  • display listings, maps, and search results, and rank results by relevance;
  • operate hunts, notifications, and seller portfolio tools;
  • process listing fees and send payment receipts or failure notices;
  • improve search quality, fix errors, and understand aggregate usage patterns;
  • detect fraud, abuse, and security incidents; and
  • comply with legal obligations and respond to lawful requests.

We do not sell your personal information.

5. Lawful basis (POPIA)

We rely on one or more of the following, depending on the processing:

  • Contract — processing necessary to provide the service you request (for example operating your account or publishing a paid listing).
  • Legitimate interests — operating and improving the Platform, securing systems, and preventing abuse, balanced against your rights.
  • Consent — where required, for example optional analytics cookies, or direct marketing where consent is needed.
  • Legal obligation — where we must retain or disclose information by law.

6. Sharing and disclosure

We may share personal information with:

  • Service providers who help us run the Platform, including cloud hosting (Google Cloud), authentication (Google), payment processing, email delivery, AI inference (Anthropic for search parsing and listing-assist features), and maps (Google Maps where enabled). These providers process data on our instructions and under contractual safeguards.
  • Other users — for example, listing details you publish are visible to buyers; contact details you choose to share may be visible to interested parties.
  • Professional advisers or authorities — where required by law, court order, or to protect rights and safety.

Some providers may process data outside South Africa. Where we transfer personal information across borders, we take steps required by POPIA to ensure an adequate level of protection.

7. Cookies and storage

Cookies are small text files stored on your device. We also use browser local storage and session storage for similar purposes where cookies are not used.

Essential (always used)

These are necessary for the Platform to function. We do not ask for consent before setting them.

  • yagr-user and yagr-api-token — keep you signed in and authorise API requests (HttpOnly, secure). The API token typically expires within 72 hours; the user cookie may last up to 30 days.
  • yagr-demo-access — on password-protected demo environments, remembers that you passed the demo gate (HttpOnly, secure).
  • sidebar:state — remembers whether the navigation sidebar is expanded (on desktop).
  • Theme preference — stored in local storage (via mode-watcher) so light/dark mode persists.
  • Session storage — short-lived caches for search UI state (for example parsed filter results) that clear when you close the browser tab.

Optional analytics

If you choose Accept analytics on our cookie banner, we load Google Tag Manager, which may set cookies such as _ga and send usage events (page views, searches, listing views) to Google Analytics. You can withdraw consent at any time via Cookie settings in the site footer. We ask for fresh consent at least every 12 months.

You can block or delete cookies in your browser settings. Blocking essential cookies will prevent sign-in and core features from working.

8. Data retention

We keep personal information for as long as needed to provide the Platform, meet legal and accounting requirements, and resolve disputes. When you close your account or request deletion, we delete or anonymise information within a reasonable period, except where we must retain it by law or for legitimate business purposes (for example billing records).

9. Your rights

Under POPIA you may have the right to:

  • request access to personal information we hold about you;
  • request correction or deletion where appropriate;
  • object to processing based on legitimate interests in certain circumstances;
  • withdraw consent where processing is based on consent (without affecting prior processing); and
  • lodge a complaint with the Information Regulator.

Contact privacy@yagr.app to exercise these rights. We may need to verify your identity before responding.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and secure cookie flags. No online service is completely secure; please protect your Google account credentials.

11. Children's privacy

The Platform is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact privacy@yagr.app so we can delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users or by a notice on the Platform. The effective date at the top of this page will be updated when changes take effect.

13. Contact

Privacy questions and data requests: privacy@yagr.app.