Privacy Policy

1. Information we collect

We collect the following because running a seller account genuinely requires it. Nothing is listed here that the platform does not actually process:

• Account data: email address, display name, phone number, profile photo if you add one, and the date the account was created.
• Store data: store name in Arabic and English, store email and phone, category, market and country, and the store image.
• Business data for verification: legal company name, commercial registration number, tax number, address, and business category.
• Owner and authorised-person data: full legal name, role, ownership percentage, national identification number, nationality, and contact details. Beneficial owners are disclosed at the threshold set in the Seller Agreement.
• Identity and verification documents: commercial registration, tax certificate, business licence, authorised representative ID, national ID (front and back), an owner selfie, bank proof, and other supporting documents.
• Payout data: bank account (IBAN) or CliQ alias, and the account holder's name. Account numbers and CliQ aliases are stored encrypted and are never shown in full in the platform — only the last four characters.
• Product and content data: products, listings, prices, inventory, product images and descriptions.
• Order data: orders, order items, shipments and returns — including the customer delivery information you need in order to fulfil an order.
• Team data: store members, their roles and permissions, invitations, and membership status.
• Financial data: transactions, commissions, fees, refunds, chargebacks, payouts, balances and settlements.
• Support data: support tickets, their messages and attachments.
• Technical security data: the IP address and browser type associated with a sign-in code request, and audit records of sensitive operations.
• Website cookie and advertising-measurement data, as described in section 6.

2. How we use your information

• Running your account and store, and letting you list, sell and fulfil orders.
• Verifying your identity and your business before you may sell, and re-verifying afterwards.
• Calculating commissions, fees and payouts, and paying you at the payout destination you have verified.
• Meeting our obligations to buyers: orders, delivery, returns, refunds and disputes.
• Preventing fraud and abuse, and protecting the platform, buyers and other sellers.
• Answering support requests and handling complaints.
• Sending operational and transactional notifications: sign-in codes, order alerts, verification and payout notices.
• Meeting legal, accounting and tax obligations.
• Improving the platform and measuring our own marketing, subject to your consent (section 6).

3. Information sharing

We do not sell your data. We share it only as far as necessary, with these categories:

• Carriers, delivery partners and captains, as far as needed to deliver your orders.
• Payment service providers and banks, to collect proceeds and pay out your earnings.
• The infrastructure providers the platform runs on: Google Cloud / Firebase for hosting, database, authentication and file storage; Vercel for web application hosting; and Amazon SES for email delivery.
• Buyers, who see your store name, your products and the order information they need. They do not see your owner data, your verification documents or your bank details.
• Competent authorities where we are under a legal obligation, or to protect our rights or those of our users.

4. What we never send to advertising platforms

We never send any advertising platform: passwords or one-time codes, bank account or IBAN details, verification or identity documents, national identification numbers, support ticket contents, internal review notes, or any data about your orders, your products or your customers.

5. Data security

• Signing in uses a one-time code sent to your email address, not a stored password.
• Permissions are decided on our servers per role (Owner / Manager / Staff). The interface never grants access.
• Bank account numbers and CliQ aliases are encrypted at rest and are never displayed in full in the platform.
• Verification documents are stored in non-public storage and are not reachable by a direct link.
• Sensitive operations are recorded in an audit trail and are rate-limited to prevent abuse.
• No system is perfectly secure, but we take reasonable and appropriate measures to protect your data.

6. Cookies and advertising measurement

We use necessary cookies to run the website, and optional cookies for analytics and for measuring our advertising. No optional cookie is set before you consent, and you can withdraw consent at any time using the “Cookie preferences” link at the bottom of any public page.

Our marketing providers include Meta Platforms (Facebook and Instagram). When you consent to the advertising category we use the Meta Pixel in your browser and the Conversions API from our servers, and we set the _fbp and _fbc cookies on your device. The sole purpose is to identify which advertising campaign brought a new merchant to Fawran.

In that case we send one-way SHA-256 hashed identifiers (your email address, your phone number where we hold one, and your internal account identifier), plus your IP address and browser type unhashed because Meta requires those unhashed to match an event, along with campaign source values and the click identifier.

This section concerns the website. The Fawran Seller mobile application does not use cookies.

7. Retention

• Account, store and verification data: for the life of the account, and afterwards for as long as legal and accounting obligations require.
• Financial, accounting, tax and order records: for as long as Jordanian law and our accounting obligations require, and for the duration of any open dispute or investigation.
• Records of acceptance of our legal agreements: kept as evidence of what was agreed and when. These are not removed by account deletion.
• An account deletion request and the record of its stages: kept as part of our audit trail.
• Your cookie choice: up to 180 days.
• Campaign source data: up to 90 days.
• Technical request data needed to deliver a measurement event: erased as soon as the event is delivered.

8. Account deletion

The account owner can request deletion of the Seller account from inside the platform: on the website through Settings → Account & security → Delete account, or in the mobile application through Settings → Account → Delete account.

• Only the account owner may request it. The request covers the account and every store that account owns; stores owned by somebody else are not affected.
• A request cannot be made while an amount is owed to Fawran. Settle it first, then request again.
• Money Fawran owes you is not forfeited by a deletion request and remains governed by the Payout Policy.
• The request is confirmed with a one-time code sent to your registered email address, issued for this purpose alone.
• After confirmation the account enters a review and retention period of three calendar months. Your data is not deleted during it; new selling stops, and you keep access to complete the obligations you already have.
• You can cancel the request at any time before the period ends, also confirmed with a code.
• At the end of the period, and after we re-check that nothing is owed, no obligations are open and no legal hold applies, your personal data is deleted or anonymized — while the records described in section 7 are retained.

9. Your rights

• Access and update your account and store data from inside the platform at any time.
• Ask us to correct inaccurate data, or object to a particular processing activity, by contacting us.
• Request deletion of your account, as described in section 8.
• Withdraw analytics or advertising consent at any time, with no effect on your ability to use the platform, register, or sell. On withdrawal we delete the advertising matching identifiers from your device and from your account record, and keep only the campaign name for calculating acquisition cost in our own books.
• Complain to us through the contact routes below if you believe we have not handled your data as described here.

10. Changes to this policy

We may update this policy. When we make a material change we will tell you by email or inside the platform, and we will update the review date at the foot of this page.

11. Contact us

For any question about this policy or about your data, contact us at admin@fawra.net, or open a support ticket from inside the Seller dashboard.