Privacy Policy

For your merchant account, we are the data controller. For the data of your customers that we process on your behalf, you are the controller and we act as your processor — we never use your customers' data for our own purposes or share it with other merchants.

Account: your name, email, phone (optional), wilaya, a hashed password and an optional profile picture.

Your store and products, and the orders your customers place (name, phone, delivery address) — processed on your behalf.

Subscription and billing records. We do not store bank-card numbers, and we collect no sensitive data or identity documents.

To create and run your account and store, process orders, manage billing, send the operational notifications you enable (e.g. Telegram), keep the platform secure, and meet our legal obligations.

We advertise Tujaar on Facebook and Instagram, and we measure which of those ads lead to a signup — see section 9. We send marketing emails only if you opted in when creating your account, and you can withdraw that at any time.

Hosting, authentication and file storage: Supabase. Subscription payments: Chargily (card data is handled by them, never stored by us). Order notifications: Telegram, if you enable it. Delivery: the carrier you connect to your store. Advertising measurement: Meta Platforms Ireland, which receives the signals described in section 9.

We never sell your data, and we never share your customers' data for advertising — the measurement in section 9 covers merchant accounts only.

Our hosting (Supabase) is currently located in Sweden. Your personal data is therefore transferred to and stored outside Algeria.

The advertising signals described in section 9 are sent to Meta Platforms Ireland and processed in the European Union and the United States.

We keep your data for the life of your account, then delete it — keeping only what the law requires, such as billing records for accounting purposes.

Under Law 18-07 (amended by Law 25-11) you may access, correct or object to the processing of your data, and request its erasure.

To permanently delete your data, email privacy@tujaar.net . Requests are handled manually.

Passwords are hashed and never stored in clear text. Delivery-provider credentials you enter are encrypted at rest. All traffic uses HTTPS, and each store's data is isolated from every other.

In the event of a security breach affecting your personal data, we will notify you and the competent authorities as required by law.

Strictly functional: your session, your language and your display theme. These stay on your device and are shared with nobody.

Advertising measurement: we run the Meta Pixel on tujaar.net and in the dashboard, so we can tell which of our Facebook and Instagram ads lead to a signup. It sets _fbc and _fbp (Meta's click and browser identifiers, 90 days) and _tj_vid (ours, 180 days). They are set on tujaar.net so that one visit can be recognised across the marketing site and the dashboard.

What Meta receives: the pages you visit on our sites and, when you create an account or open a store, your email, phone and name hashed with SHA-256 — which Meta cannot turn back into the original values — together with your IP address, your browser's user agent and the identifiers above. Nothing about your customers, your products or your orders is ever sent.

Meta Platforms Ireland acts as an independent controller for that data, under its own privacy policy. If you would rather not be measured this way, your browser's tracking protection or any content blocker prevents it, and Tujaar works normally without it.

We may update this policy and will refresh the date above. For any question about your data: privacy@tujaar.net .