1. Data we collect
- From your sign-in account: your name and email address from Google, Apple or Facebook, depending on which you choose. We never receive your password.
- Sign-in sessions: when you sign in, the session's time, your device type and your IP address are recorded to protect your account from unauthorised access.
- Your store details: its name, tagline, description, phone number, photo, opening hours, delivery fee, pause times, and when you accepted the vendor terms.
- Your products: their names, descriptions, prices, stock, categories, photos, and whether they are visible to customers.
- Orders: the orders your store receives, what you do with them (accept, reject, cancel, update status), the reasons and notes you write, and when.
- Photos: only the photos you take or choose for your store and products. We ask for camera and photo access when you add a photo, and we do not access your other photos.
- Notifications: a notification token for each device you sign in on, so we can send it order notifications.
- Crash data: when something goes wrong we record technical details of the error, your device model and operating system, the app version and your account ID — not your name, email or IP address.
We do not collect your location, contacts or payment details.
2. How we use your data
- To run your store and show it and its products to customers.
- To deliver orders to you and notify you of them, and to tell customers their order status and why an order was rejected or cancelled.
- To sign you in and protect your account.
- To fix errors and improve the app.
- To contact you about the service, such as changes to the terms or a store suspension.
- To enforce the vendor terms, protect customers and comply with the law.
We do not sell your data or use it for advertising. Your store's public content (its name, photos and products) may be used to promote Qala Store, as the vendor terms explain.
3. What customers see
- Anyone using the customer app: your store's name, tagline, description, photo, opening hours, delivery fee and visible products.
- A customer who orders from you: in addition, the store's phone number so they can call you, their order's status, and the reason for a rejection or cancellation, including your note when you choose "Other reason".
Customers do not see your account name or email. If you do not want your personal number shown, use a business number.
4. Customer data you receive
Each order gives you the customer's name, phone number, address and notes, to use for that order only, as the vendor terms require. When a customer deletes their account we erase these details from their orders, and they appear to you as «زبون» ("customer").
5. Who we share your data with
Technical service providers: we use companies that provide technical services to run the app, such as server hosting, the database, sign-in, photo storage, notifications and crash reporting. They process your data on our behalf and only as much as their service needs, may not use it for their own purposes, and are chosen to protect it at least as well as this policy describes.
Your sign-in provider: Google, Apple or Facebook, whichever you choose, under its own privacy policy.
Your phone's notification service: from Google or Apple. Notification text passes through it, such as the order number, item count and total.
These companies' servers are outside Iraq, mostly in the European Union and the United States, so your data is processed outside Iraq. We may also disclose your data if Iraqi law or an order from a competent authority requires it, or to protect someone's safety.
6. Retention and deletion
We keep your data while your account exists. When you delete it:
- Immediately: we erase your name and email from our database and delete your devices' notification tokens, and your sign-in account is deleted. Your store closes permanently and disappears from the customer app, and its current orders are cancelled.
- What we keep: the closed store's name, phone number, photo, description, products and product photos, and the orders it received, remain as the record of past orders. Customers who ordered from you still see the store's name and phone number in their order history.
- Backups: deleted data disappears from our backups within 30 days.
- Crash reports: deleted automatically within 90 days.
While your account exists, photos you remove from your store or products are deleted from storage after a day, except product photos that appear in past orders.
7. Your rights
- Edit your store and product details at any time in the app.
- Ask us for a copy of your data, to correct it, or to delete what can be deleted, using the contacts below. We reply within 30 days and explain if we must keep anything and why.
- Delete your account from the Store tab → "Delete account", or follow the steps on our account deletion page.
- Turn off notifications or camera and photo access in your phone's settings — without notifications you may miss orders.
8. Protecting your data
Your data travels between the app and our servers over an encrypted connection, we store no passwords, and your sign-in session is kept in your phone's secure storage. Access to data is limited to what running the service requires. No system is completely secure, so tell us immediately if you suspect someone else has accessed your account.
9. Age
The vendor app is for people aged 18 or older. We do not knowingly collect data from anyone younger.
10. Changes to this policy
We may change this policy. We will update the "Last updated" date and announce important changes in the app before they take effect.
11. Contact us
- Email: ma6640788@gmail.com
- WhatsApp: +964 783 026 7250