Privacy Policy | Aajir (آجر)

1. Data We Collect

Account and profile data: name, email, phone, business details, role, and authentication information.
Store operations data: products, inventory, orders, shipping records, customer communication logs.
Billing and payment data: invoices, payment status, plan history, and related support records.
Technical data: IP address, device/browser metadata, security logs, and service diagnostics.

2. How We Use Data

To provide, maintain, and improve platform services and user experience.
To process billing, prevent abuse/fraud, and support lawful business operations.
To communicate important account, billing, legal, and service notifications.
To perform analytics for reliability, capacity planning, and quality improvements.

3. Legal Basis and Compliance

We process data for contractual necessity, legitimate business purposes, legal obligations, and security. Where legally required, consent-based processing will be requested through platform controls or notices.

This policy is intended to align with applicable Pakistani legal and regulatory requirements, including cybercrime, electronic transactions, and consumer protection obligations as applicable.

4. Data Sharing and Third Parties

We do not sell your personal data.
Data may be shared with trusted processors required for hosting, communication, payments, and delivery support.
Data may be disclosed where required by law, lawful request, or to protect legal rights and platform security.

5. Security Measures

Access controls, audit logging, and reasonable encryption/security practices are used to protect data.
Security controls are continuously improved but no internet service can guarantee absolute security.
You must protect account credentials and use strong operational security for your team devices.

6. Data Retention

We retain data for as long as needed for service delivery, compliance, dispute handling, tax/accounting, security, and legal obligations. Retention periods vary by data category and applicable law.

7. Your Rights and Requests

You may request access, correction, or deletion of eligible personal data from your registered account.
You may request account closure, subject to unresolved legal, billing, or compliance obligations.
Identity verification may be required before processing sensitive requests.

8. Cross-Border Processing

Depending on service architecture and processors, data may be processed in multiple jurisdictions. Where such processing occurs, we apply reasonable safeguards and contractual protections.

9. Policy Updates

We may revise this policy due to legal, regulatory, security, or product changes. Updated versions are effective when posted with a revised effective date.