Privacy notice

Who is responsible

For your Fatoorify account, the operator named in the Terms of service is the controller: [operator legal name and contact details, to be provided]. Questions and requests: [contact e-mail, to be provided].

For the customer, staff and sales records your business enters, your business decides what is recorded and why. For that data we act on your business's instructions as its processor.

What we keep

The e-mail address and name of the account owner, and the name of the business and its stores.

Staff display names and PINs. PINs are stored only as hashes, never as the number itself.

The customers, products, sales, stock and other records your business enters.

Sign-in and security records, such as sessions and failed sign-in attempts.

A record of your acceptance of these texts: the version, the time, and the IP address and browser used.

Why we use it

To provide and secure the service, to send the e-mails the account needs (verification, password reset, invitations and reports you schedule), to keep records that the law requires, and to answer requests you make.

Who helps us run the service

[To be confirmed by the operator before launch: the hosting, e-mail delivery and payment providers used, and where each one processes data. No provider is named here until that is confirmed.]

How long we keep it

We keep business records for as long as the account is open, and they are still kept after the business is closed until a deletion is requested. [Retention periods after closure and the deletion procedure, to be set by the operator.]

Your choices

You can export your business data from the settings. Closing your business there stops access to it, but it does not delete the records. To ask for access, correction or deletion of personal data, write to the contact below. Deletion is handled on request, not in the app.

Security

Passwords and PINs are stored as hashes. Each business's data is kept apart from every other business's data, and staff see only what their role allows.

[Where data is stored and any transfers outside your country, to be completed by the operator.]

Contact

Privacy questions and requests: [contact e-mail, to be provided].

Optional website analytics

If you accept analytics, Google Analytics measures public website visits, navigation clicks, demo use and successful contact requests. Microsoft Clarity provides click and scroll heatmaps and session recordings to help us understand and improve the public website. These providers may process device, browser and usage data, including IP addresses, and may process data outside your country.

These tools load only after you accept analytics. We exclude signed-in point-of-sale and back-office pages, mask contact forms in recordings, and do not send form contents or customer records as analytics events. Advertising consent is not granted. Google Analytics cookies are configured to expire after 180 days; provider retention and privacy terms also apply. Read policies.google.com/privacy and privacy.microsoft.com/privacystatement for details.

You can reject analytics or withdraw consent at any time using Analytics settings on the public home page. Withdrawal stops collection in this browser and removes the site’s analytics cookies; it does not delete data already processed by the providers. Your choice is stored in this browser and applies separately on each regional domain.