Who we are
Al-wesam is an Arabic-first system for managing sales, point of sale, purchases, inventory, customers and accounting, offered to businesses on a subscription. For any privacy matter, contact us:
Our role and the subscriber's role
Business data a subscriber enters into the system, such as its customers, suppliers, invoices, products and journal entries, belongs to that business, which is responsible for it towards the people it concerns. We process that data on the subscriber's behalf, on its instructions, and only to provide the service to it. We are responsible, under this policy, for user-account, subscription and service-operation data.
Data we collect
- Account data: name, username, e-mail address, phone number, role and permissions. Passwords are stored as one-way hashes; we cannot read them.
- Business data about the subscriber: its name, branches, points of sale, settings and subscription details.
- Business records: the customers, suppliers, products, prices, invoices, payments, expenses, stock movements and journal entries the subscriber enters, and attachments such as invoice and product images.
- Device and usage data: the device identifier registered with the business, app version, sync times, IP address, sign-in and security logs, and the audit log showing who performed each operation and when.
- Communications: what you send us by e-mail or WhatsApp when asking for a demo or support.
- Storefront visitors: a visitor to a subscriber's storefront needs no account. Sending an order opens WhatsApp on the visitor's own device to message the merchant directly; we do not store that conversation.
We do not collect payment-card data.
Mobile app permissions
The Al-wesam mobile app requests only the following permissions and uses each one only when you use the feature it belongs to:
- Camera: to scan barcodes when selling or looking up a product, and to take a product or invoice photo when you choose to attach one. Scan frames are not stored; only a photo you attach yourself is uploaded.
- Photos: the app opens your device's photo picker so you can choose an image to attach; it cannot reach any other image.
- Internet and network state: to reach the server and detect connectivity, so the app works offline and syncs when the connection returns.
When the phone is used as a scanner for a desktop point of sale, barcode numbers travel directly between the two devices over your local network. The app does not collect your location, contacts or messages.
How we use data
- Providing and operating the service, including offline work and syncing devices with the server.
- Protecting accounts: passwords, user permissions, the business manager's approval for every new device, and detecting unauthorised use; the Al-wesam team's accounts use two-factor authentication.
- Managing the subscription and sending notices about it in the app and by e-mail.
- Providing technical support when you ask for it.
- Keeping encrypted backups to restore the service after a failure.
- Meeting legal obligations.
We do not sell data, we do not use it for advertising, and we do not use subscribers' business data to train AI models.
Google user data and Google Drive
Al-wesam uses the Google Drive API with the drive.file scope only, to keep encrypted backups of the service in an account owned by Al-wesam. This scope reaches only files our app created. Our customers do not sign in with Google, and we do not access their Google accounts or files. We do not share Google data with anyone or use it for advertising or to train AI models.
Al-wesam's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Al-wesam team access
Our platform team sees metadata about subscribing businesses to manage subscriptions, such as the business and owner name, subscription status, number of branches and users, and last sync time. Businesses' financial records are not shown to it. We access business data only at the business's request for support, to protect the service, or as required by law.
Security
- Encrypted connections between devices and the server over HTTPS.
- Hashed passwords, the business manager's approval for every new device, fine-grained permissions per user and an audit log of operations; two-factor authentication for the Al-wesam team's accounts.
- Encrypted, integrity-checked backups.
- Each business's data kept separate from every other business's.
No protection is perfect, but we review our measures continually and notify affected businesses of any breach involving their data.
Retention and deletion
We keep data for as long as the subscription lasts. When a subscription ends, data is not deleted automatically; the account becomes read-only and is then locked as described in the Terms of Service. The business owner can ask us to delete the business's data permanently; we then delete it from our servers within a reasonable time, and it leaves our backups as they rotate. We may keep what the law requires us to keep.
Deleting your account
To request deletion of your account, or of your business account and its data, contact us from the e-mail or phone number registered on the account and include your username and business name. We verify the requester, carry out the deletion and confirm it to you. A business owner can also deactivate their users' accounts inside the system.
- Deleted: account data, and the business's data, records and attachments when deletion of the business is requested.
- Kept: only what the law requires us to keep, for the period it sets; data leaves the encrypted backups as they rotate.
Your rights
You can ask to access, correct, export or delete your data, or object to a particular processing, by contacting us. If you are a customer of a business that uses Al-wesam, please send your request to that business first, as it owns your data; we will help it carry the request out.
Minors
Al-wesam is a service for businesses. It is not directed at anyone under 18, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. The date of the last update appears at the top of the page, and we tell businesses about material changes in the app or by e-mail before they take effect.
Contact
For any question or request about this policy: