Privacy Policy

Last updated: July 2, 2026

This policy explains how MahalLink (the "Platform", "we") collects, uses, and protects your data when you use our shop-management service. By using the Platform, you agree to the terms below.

1) Data we collect

• Account data: your name, mobile number (your login identifier), and password stored hashed (never in plain text).
• Shop data: shop name, activity type, country and currency, VAT and commercial-registration numbers (if provided), and branches.
• Operational data you enter: your customers, invoices and sales, expenses, payments and wallet, and catalog items.
• Subscription data: the chosen plan, subscription requests, and the bank-transfer sender name.
• Technical data: IP address, sign-in and activity logs (audit log) for security.

2) How we use your data

• Running the service: issuing invoices, managing customers, inventory, and reports.
• Managing your subscription, matching your bank transfers, and activating your plan.
• Security: fraud prevention, login throttling, and the audit trail.
• Technical support and improving the Platform.

3) Shop data isolation

Each shop's data is logically isolated from others; no shop can access another's data. Access is protected by a password and a temporary lockout after repeated failed attempts.

4) Data sharing

We do not sell or rent your data. We may share it only as necessary with:

• Hosting and infrastructure providers required to run the service.
• Authorities upon lawful request, or to comply with e-invoicing requirements (e.g., ZATCA in Saudi Arabia).

We do not share your data with any advertising parties.

5) Retention

We keep your data while your account is active and as needed to provide the service and meet legal obligations (such as retaining invoice records for the periods required by tax regulations). When an account is closed, data is deleted or anonymized within a reasonable period unless the law requires retention.

6) Your rights

You may request access to, correction of, or deletion of your data, and object to certain processing, by contacting us at the email below. We may need to verify your identity first.

7) Your customers' data

You — the shop owner — are the controller of your customers' data; we process it on your behalf solely to run the service. You are responsible for the lawfulness of collecting that data and for informing your customers under applicable regulations.

8) Changes to this policy

We may update this policy from time to time and will update the "Last updated" date above. Continued use of the Platform after changes means you accept the updated version.

9) Contact

For any privacy question or to exercise your rights, contact us at: [email protected]