Privacy policy

Who is responsible for what

For your own account (the store owner and staff who sign in), AQL Technology Company is the controller of your data.

For your customers’ data (names, phone numbers, orders), your store is the controller and Faiz processes it on your behalf, only to provide the service you switched on. You are responsible for having a lawful basis to share it with Faiz and, for WhatsApp messages, your customers’ agreement to be contacted.

What Faiz stores

When you install Faiz from the Salla App Store, Faiz copies the store data it needs from Salla and keeps it up to date:

• Your account: name, email and mobile of the people who sign in; sign-in sessions; what you change through Faiz (an activity log).
• Your store: products, stock and prices, orders and their items and totals, coupons, abandoned carts, reviews, store name and logo.
• Your customers: name, phone number, email, city and gender as Salla provides them, and their order history with your store. From delivery addresses Faiz keeps only the city, district and which fields are missing — never the street, building or exact location.
• What you create in Faiz: goals, notes, messages Faiz drafts, link pages, loyalty points, studio photos you add to products, and WhatsApp conversations if you connect WhatsApp.
• Usage records: which AI features were used and how much they cost (no message content), so plans and limits work.

Why Faiz uses it

Only to run the features you use: dashboards and insights, writing product copy and messages, campaigns and loyalty rewards, shipping checks, WhatsApp messages you switched on, and billing through your Salla plan. Faiz does not sell data, does not use it for advertising, and does not combine one store’s customers with another store’s.

Services that process data for Faiz

Faiz uses these kinds of providers, each only for its part and under its own data protection terms. The full list is available on request at support@aqltech.sa.

• Salla: the source of your store data, and billing for your plan.
• Cloud hosting and database, in the European Union. Data is encrypted in transit and at rest.
• AI providers: they write text and make studio images when you ask, and receive only what each task needs. They do not train their models on your data.
• Meta (WhatsApp): sends and receives WhatsApp messages on your own number, if you connect it.
• Email delivery, for sign-in links and notifications; and public search-trend data for your product keywords (no personal data).

International transfers

Some of these providers process data outside Saudi Arabia (the European Union and the United States). Faiz transfers only what each service needs, under the safeguards the PDPL and its regulations require, including each provider’s data protection agreement.

How long data is kept

• While Faiz is installed on your store, your store data is kept and kept in sync with Salla.
• If you remove Faiz, everyone is signed out at once and Faiz stops reading your store. Your store’s data is deleted after 30 days, unless you ask for it sooner.
• The activity log is kept for one year and technical logs for 30 days. Visitor counts on link pages are anonymous.

Security

Data is encrypted in transit and at rest, access by the Faiz team is restricted and logged, and every change Faiz makes to your store is recorded with who made it.

Your rights

You can ask to see, correct or delete your data, or to receive a copy of it, by writing to support@aqltech.sa. Your customers can contact your store; Faiz will help you answer their requests. You may also complain to the Saudi Data and AI Authority (SDAIA).

Changes

If this policy changes in a way that matters, Faiz will tell store owners in the app before it takes effect.