Privacy policy
This policy explains what data reaches Matjri Online (the platform), why, where it goes, and how to have it deleted.
Who we are and who owns the data
The platform gives store owners a dashboard, a website and a sales assistant on their channels. Each store owner is responsible for their customers’ data; we process it on their behalf and only as their settings direct.
What we collect
Store owners and their team: name, email and password (stored as a salted hash, never as text), and sign-in records (time, device and IP address) for security.
Store data: products, prices, stock, orders, invoices and settings the owner enters.
Store customers: name, phone number, address, orders, and the text, photos and voice notes a customer sends on the store’s channels (WhatsApp, Messenger, Instagram, Telegram or the store’s website).
No trackers, no ads, and no sale of data. The only cookies are the session cookie (to keep you signed in) and the language cookie.
Why we use it
To run the store: show products, record orders, answer customers and alert the team.
The sales assistant: when the owner turns it on, a customer’s message and the store information needed to answer it are sent to the AI provider the owner chose.
Security: preventing unauthorised access, rate limits, and a log of sensitive actions.
Who sees it
Every store is isolated from the others at the database level. The store’s team sees what each member’s role allows.
Platform staff open a store’s data only for a support request, and each such access is logged with its reason.
Outside services the store owner switches on: their chosen AI provider and channel providers (Meta for WhatsApp/Messenger/Instagram, Telegram, or a connected WhatsApp server). Cloudflare carries the connection to the site. Each has its own privacy policy.
How long we keep it
For as long as the account or store is active. The owner can delete conversations or customers from the dashboard at any time.
After a store is deleted its data leaves the database and remains only in encrypted backups until they expire (60 days at most).
Security
Connections are encrypted (HTTPS), channel and AI provider keys are stored encrypted, and backups are encrypted with a key that never leaves the server.
Your rights
You may ask for a copy of your data, its correction or its deletion. A customer of a particular store should contact that store first and may contact us if it does not answer. See “Data deletion”.
Changes
If anything important changes we will say so here and update the date.