Mutasib — Smart Shop Management

1. Information We Collect

When you use Mutasib, we collect the following information:

Account data: Email address, username, role (shop owner, cashier, customer, admin), and hashed password.
Shop data: Shop name, description, category, address, phone number, and opening hours.
Product data: Product names, barcodes, prices, costs, stock levels, and categories.
Sales data: Transaction records including items sold, quantities, prices, totals, cashier identity, and timestamps.
Customer data: For customer accounts — wallet balances, credit notes, spending history, and receipts.
Technical data: IP address, browser type, device information, and usage logs for security and debugging.

2. How We Use Your Data

We use your data to:

Provide, maintain, and improve the Service.
Process payments and manage subscriptions.
Send transactional communications (receipts, alerts, reports).
Generate analytics and business insights (for Pro plan users).
Provide AI-powered features (stock predictions, reorder suggestions, chatbot).
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

We do not display advertisements. We do not sell your personal data to third parties.

3. Third-Party Data Sharing

To operate the Service, we may share certain data with trusted third-party service providers for purposes such as AI processing, email and SMS delivery, cloud storage, and payment processing. Each provider is contractually obligated to protect your data and use it only for the specific purpose we engage them for.

We only share the minimum data necessary for each provider to perform its function. We do not allow third-party providers to use your data for their own purposes. We do not sell your data to any third party.

4. Cookies

We use essential cookies for:

Authentication: Session tokens to keep you logged in.
Preferences: Language selection (English/Arabic) and theme (light/dark mode).

We do not use tracking cookies, advertising cookies, or analytics cookies from third parties.

5. Data Retention

Active accounts: Data is retained for the lifetime of your account.
Terminated accounts: Data is retained for 30 days after termination, then permanently deleted.
Sales records: Retained per your plan (Free: 30 days; Starter/Pro: unlimited) for operational purposes.
Backups: Database backups are retained for up to 7 days for disaster recovery.

6. Data Security

We implement industry-standard security measures:

Encryption in transit (HTTPS/TLS) for all connections.
Encryption at rest for sensitive data (passwords hashed with secure algorithms).
Access controls — only authenticated users can access their own shop data.
Regular security updates and dependency patches.
Prompt injection protection on AI endpoints.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data (subject to retention requirements).
Export your data in a portable format.
Withdraw consent for optional data processing (e.g., SMS notifications).

To exercise these rights, contact us at support@mutasib.com.

8. Children's Privacy

Mutasib is not intended for users under 18 years of age. We do not knowingly collect data from children. If we become aware that a child has provided personal data, we will delete it promptly.

9. International Data Transfers

Your data may be processed in countries outside your own, including through cloud hosting providers and service providers located in various regions. We ensure appropriate safeguards are in place for cross-border transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@mutasib.com or through our Contact page.

Privacy Policy