Privacy policy

Merchants' own data (their account and shop): we are responsible for it.

Data of the people who order from a merchant's shop: the merchant decides why and how it is used; we store and process it on the merchant's behalf so their shop works. Customers should contact the shop first about their order.

Merchant account: name, email address, phone number, language, plan, and a password stored only in hashed form by our authentication provider — or your Google account's name and email if you sign in with Google.

Shop content: products, photos, texts, prices, delivery prices and settings you enter.

Orders placed on shops: the customer's name, phone number, email (optional), wilaya, commune, address, notes, the items and totals. If the merchant turns it on, details typed into an unfinished checkout are kept so the shop can call back; they are deleted automatically 30 days after the customer's last change.

Visit statistics: pages viewed, type of device, the website a visitor came from and the country. No cookies are used for statistics; a visitor is counted with a code that changes every day and can't be traced back to them. Pages with a private order link are recorded without that link.

Security data: network addresses, used briefly to stop abuse (for example too many orders or sign-in attempts).

When a merchant clicks "Connect Google", we ask Google for one permission only: to see and edit the files this app creates (drive.file). We then create one spreadsheet in the merchant's Google Drive and write their shop's orders into it. We cannot see any other file, email or contact.

We keep the access Google gives us encrypted, and use it only to write that shop's orders to that spreadsheet. We never sell Google data, use it for advertising, or use it to train AI models, and people at Usix don't read it except to fix a problem the merchant asks us about.

A merchant can stop this at any time: Disconnect in Integrations, or remove the app at myaccount.google.com/permissions.

Usix's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To run the service: show shops, take and manage orders, send the notifications a merchant turns on, create shipments with the couriers a merchant connects, and sync orders to their sheet.

To keep it safe: stop fake orders, spam and attempts to break into accounts.

To help: our support team can open a merchant's dashboard only while that merchant has granted temporary support access from their account settings.

To manage plans and trials.

Our service providers, only to run Usix: Cloudflare (hosting and network), Supabase (database and sign-in).

Services a merchant chooses to connect, with the data they need: Google (Sheets), Meta (WhatsApp messages to customers), delivery companies (the parcel's recipient, address and amount), and the advertising pixels a merchant adds to their shop (Meta, TikTok, Google).

We don't sell personal data, and we don't share it with anyone else unless the law requires it.

Account and shop data: as long as the account exists. Orders: as long as the merchant keeps them or their account exists. Unfinished checkouts: 30 days after the last change. Visit statistics are kept without any name, phone number or address.

Encrypted connections (HTTPS) everywhere; passwords never stored in readable form; keys for connected services (Google, WhatsApp, couriers) stored encrypted; each shop's data separated from the others' in the database; team members see only what their role allows.

Merchants can see and correct their data in their dashboard and account settings, and ask us to delete their account. Customers can ask the shop they ordered from to see, correct or delete their details; we help merchants do it. We follow Algeria's Law No. 18-07 on the protection of personal data.

If we change this policy, we update this page and its date, and let merchants know about important changes.