Privacy Policy

Who is Marka

SPAS Marka Solutions, a simplified joint stock company situated in Algiers, is the controller and responsible for your data ("Marka", "Us", "We", "Our"). The name of the platform: "marka-app". Our site: markaapp.net. Our email: contact@markaapp.net.

Terminology

• The Platform: our service that allows merchants to create and manage their online stores.
• The Merchant: any natural or legal person using the Platform to build their online store.
• The End Customer: the person who places an order in a merchant's store built on the Platform.
• Personal Data: any information relating to an identified or identifiable natural person.
• Data Controller: the entity that determines the purposes and means of processing data.
• Data Processor: the entity that processes data on behalf of the data controller.

Applicability of this privacy policy

This Privacy Policy describes how Marka processes personal data from you or relating to you when we are acting as the "data controller" in relation to that data. That includes where you are an individual subscriber to our platform and we process your personal data in the course of your subscription (e.g. when you set up an account with us).

What data do we collect

Personal data, or personal information, means any information about an individual from which that person can be identified.

• Account information such as your name, email address, login, and security details.
• Business information such as your business's name, store settings, and the names and roles of team members with access to the account.
• Customer information such as names, phone numbers, and delivery addresses, belonging to our merchants' own buyers, collected through orders, not through tracking.
• Technical data such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Transaction data such as payments to and from you and details of products and services you have purchased from us.
• Usage and analytics

  Once a team member is signed in, our analytics tool is linked to that person's name, email address, and role, along with which pages or features they use.

  Before sign-in, or where a merchant's own buyers are involved, this activity data is anonymous and does not include names, emails, phone numbers, or addresses.

How do we collect your data

We use two methods to collect data from and about you:

• Direct interactions: you may give us your personal data, such as your identity and business data, when you set up an account with us or correspond with us. This includes personal data you provide when you create a user account, subscribe to our services or publications, request marketing to be sent to you, give us feedback, or otherwise contact us.
• Automated technologies or interactions: as you interact with our website and use our services, we will automatically collect technical data and usage data.

Why do we collect your data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform a contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.
• Where you provide us with consent to process your data for specific purposes, in which case you will have the right to withdraw such consent at any time.

Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law.

What do we use your data for

• Provision of services: we use information such as your identity data and contact data to provide you with our services on the basis that such processing is necessary for the performance of a contract between you and us. This includes providing you with access to our platform, the administration of your account, billing, and notifying you of changes to our service or your account.
• Customer support: we use information such as your identity data, contact data, and usage data to respond to your requests for assistance, such as password resets and general troubleshooting. We process your personal data on the basis that it is necessary for the performance of a contract between you and us.
• Communications: we will use your personal data to communicate with you regarding your account and your use of our platform, such as to welcome you to the platform or confirm a subscription purchase. We process your personal data on the basis that it is necessary for the performance of a contract between you and us and/or necessary for our legitimate interests, such as to let you know about upcoming changes or improvements to our services.
• Monitoring, maintaining, and improving our services: we use technical data and usage data for analytics and measurement to understand how our services are used by our users, to ensure that our services are working as intended, to make improvements to our services, and to develop new services such as new content, features, or capabilities. We process your personal data on the basis that it is necessary for the performance of a contract between you and us and/or necessary for our legitimate interests.
• Legal and compliance: we process personal data when necessary to protect our legal rights or to comply with our legal obligations, for example if we receive a valid legal request from a regulator or law enforcement body to preserve or disclose certain information. The categories of information processed will depend on the specific scope of the relevant obligation.

How do we store your data

Companies that host our systems

• Vercel: hosts the merchant dashboard and the online storefronts.
• Railway: hosts our backend systems, admin tools, and database.
• Cloudflare: manages our domain and web traffic routing.

Companies that help us run the service

• Clerk: handles sign-in and account security.
• Cloudinary: stores product, store, and landing page images.
• Delivery and courier companies that a merchant chooses to connect, used only to fulfill that merchant's orders.
• PostHog: provides usage analytics, hosted in the EU. Signed-in team members are identified by name, email, and role.
• Sentry: helps us detect and fix technical errors, hosted in the EU.

Who we share your data with

We do not share your personal information with companies, organisations, or individuals outside of Marka except in the following cases:

• To trusted businesses or persons acting as service providers to help us operate and support our business, such as website and data hosting, payment processing, customer communications, and product analytics. These third parties process data for us based on our instructions and in compliance with our privacy policy and any other appropriate confidentiality and security measures.
• To governmental, legal, regulatory, tax, or similar authorities, ombudsmen, central and/or local government agencies, and/or law enforcement officials, if mandated by law and regulation or if required for the protection of our legitimate interests.
• In connection with certain types of corporate transactions, such as in the event of a restructuring or the sale of all or a significant part of our business.

Optional services a merchant may choose to connect themselves

• Discord: we receive a simple anonymous notification when a merchant submits feedback, without the content of that feedback.
• Telegram: merchants may connect their own Telegram account to receive order notifications.
• Google Sheets: merchants may connect their own spreadsheet to export their order data.

We do not sell personal information, and we do not share it with advertisers.

International transfers

Some of our service providers are based outside Algeria, so their processing of your personal data will involve a transfer of data outside Algeria. Whenever we transfer your personal data out of Algeria, we ensure a similar degree of protection is afforded to it, for example by only transferring your personal data to countries that have been deemed to provide an adequate level of protection for personal data, or by using specific contracts approved for use in Algeria which give personal data the same protection it has in Algeria.

What are your data protection rights

Under certain circumstances, you have the following rights with respect to your data:

• The right to access: you have the right to request Marka for copies of your personal data.
• The right to rectification: you have the right to request that Marka correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
• The right to erasure: you have the right to request that Marka erase your personal data under certain conditions, such as where personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• The right to object to processing: you have the right to object to Marka processing your personal data, under certain conditions. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Changes to this privacy policy

We may change this Privacy Policy from time to time. When we do, we will inform you.

How to contact us

Contact us if you have any questions or concerns about how we use your personal data at support@markaapp.net.