Privacy Policy

1. Who we are

StoreLens is a store inspection service for online stores on Salla, Zid, Shopify and WooCommerce. It is operated by Zain Growth Company, a limited liability company registered in the Kingdom of Saudi Arabia under commercial registration (unified number) 7054424721, with its address at King Fahd Branch Road, Al Olaya District, Riyadh 12212 ("StoreLens", "we", "us").

For personal data about you as a website visitor or account holder, we are the controller under the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. For data inside stores you connect, we process it on your behalf and under your instructions.

2. What we collect

Account and billing data: your name, email address, phone or WhatsApp number, company name, password (stored hashed), plan, and billing records. Card details are handled by our payment provider, [Payment provider]; we do not store full card numbers.

Store data: the URL of each store you add, the public pages we crawl, and the data your connected platform (Salla, Zid, Shopify or WooCommerce) makes available through the access you grant. If you connect Google Analytics 4 or Google Search Console, we read that data with read-only access, and we store the access tokens encrypted.

Competitor data: public information about competing stores, such as their public pages, search visibility and public social content. We do not access any competitor's private accounts.

Content and conversations: inspection results, drafts we generate for you (product descriptions, articles, posts), and the questions you ask in AI audit chat.

Usage and device data: pages you visit on our website and in the product, actions you take, device and browser type, IP address, approximate location, and referral source. We collect this with cookies and similar technologies (see section 6).

Communications: messages you send us through forms, email or WhatsApp.

3. Why we use it

• To provide the service: run inspections, rank leaks, write fixes, re-inspect on your plan's schedule, and show your Store Score. (Performance of our contract with you.)
• To run your account and billing, and to send service messages such as inspection results, receipts and security notices. (Contract.)
• To understand how StoreLens is used and to improve it, including product analytics. (Legitimate interest, or your consent where the law requires it.)
• To measure and improve our advertising and reach people who may benefit from StoreLens. (Your consent, given through our cookie settings.)
• To send you marketing messages about StoreLens. (Your consent. You can opt out at any time.)
• To keep StoreLens secure, prevent fraud and abuse, and comply with Saudi law. (Legal obligation and legitimate interest.)

4. AI processing

StoreLens uses AI models to summarise inspections, answer your questions in AI audit chat, and draft content. To do this, relevant store data and your prompts are sent to our AI model providers, [AI providers], who process them on our behalf. We do not allow these providers to use your data to train their models, as far as their terms let us control this.

If you connect StoreLens to Claude or ChatGPT through our MCP connection, the data you request in those tools is shared with that provider under your own account with them, and their privacy terms apply to it.

AI-generated drafts are suggestions. Nothing is published to your store without your approval.

5. Who we share it with

We do not sell personal data. We share it only with:

• Service providers that run StoreLens for us: Google Cloud (hosting and databases), [Payment provider] (payments), [Email/messaging provider] (email and WhatsApp messages), [AI providers] (AI processing), and PostHog (product analytics).
• Analytics and advertising partners, if you accept the relevant cookies: Google (Google Tag, Google Analytics 4 and Google Ads), Meta (Facebook and Instagram), TikTok, Snap, X and LinkedIn.
• The commerce platforms you connect (Salla, Zid, Shopify, WooCommerce) and Google (Analytics and Search Console), only to the extent needed to read the data you authorise.
• A StoreLens Partner (agency or freelancer), if your store is in their account. They see the inspections for that store.
• Professional support, only if you ask for it. If you use "Get pro help", we send your inspection to the support provider you choose. Without that request, we never share your store with any agency, including Zain, the group StoreLens belongs to.
• Authorities, when Saudi law requires it, and a buyer or successor if StoreLens is sold or merged, under the same protections.

6. Cookies, tags and pixels

We use these technologies on our website and product:

• Strictly necessary cookies, to sign you in and keep the service secure. These are always on.
• Analytics: Google Tag and Google Analytics 4 (website traffic) and PostHog (how the product is used, including session events).
• Advertising pixels: Meta Pixel, TikTok Pixel, Snap Pixel, X Pixel, LinkedIn Insight Tag and Google Ads tags. They measure ad results and build audiences on those platforms.

Analytics and advertising technologies run only with your consent where the law requires it. You can change your choice at any time in [Cookie settings], or clear cookies in your browser. Turning them off does not affect how StoreLens works for you.

7. Where your data is stored

Our platform and databases are hosted on Google Cloud in region me-central1 (Doha, Qatar). Some providers listed above, including analytics, advertising, AI and PostHog ([PostHog region]), process data in other countries, such as the United States or the European Union.

When personal data leaves Saudi Arabia, we transfer only what each purpose needs and rely on the transfer conditions of the PDPL and its Regulation on Personal Data Transfer outside the Kingdom, such as standard contractual clauses, and we assess the risks of each transfer.

8. How long we keep it

• Account data: while your account is open, and up to [12] months after closure, unless you ask us to delete it sooner.
• Inspection results and generated content: while your account is open. You can delete stores and drafts at any time.
• Billing records: as long as Saudi tax and accounting law requires.
• Analytics and advertising data: according to each provider's retention settings, which we keep at the shortest practical period.

9. Your rights

Under the PDPL you have the right to:

• Be told how your personal data is collected and used (this policy).
• Access your personal data and get a copy in a readable format.
• Ask us to correct, complete or update it.
• Ask us to delete it when we no longer need it.
• Withdraw your consent at any time, for example to marketing or advertising cookies.

Write to [privacy email] from the email on your account. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Saudi Data & AI Authority (SDAIA).

10. Security

We protect your data with encryption in transit and at rest, encrypted storage of access tokens, access controls, and monitoring. If a breach affects your personal data, we will notify SDAIA within 72 hours where required, and tell you without undue delay.

11. Children

StoreLens is a business service for people aged 18 and over. We do not knowingly collect data from children.

12. Changes

We will post any change to this policy on this page and update the date at the top. If a change is significant, we will tell you by email or in the product before it takes effect.

13. Contact

Privacy questions and requests: [privacy email]. Post: Zain Growth Company, King Fahd Branch Road, Al Olaya District, Riyadh 12212, Kingdom of Saudi Arabia.