Preamble#

The operator of the "Clarity" app (the "Service Provider", "we") is committed to protecting the privacy of merchants who use the app (the "User", "you") through the Salla platform. This document explains the nature of the data collected, the purposes for which it is used, and the controls applied to its processing, in keeping with the principles of transparency and the Personal Data Protection Law of the Kingdom of Saudi Arabia.

Article 1Definitions#

For the purposes of this policy, the following terms have the meanings set out next to each, unless the context requires otherwise:

"App": the Clarity app available through the Salla App Store, designed to process the merchant's product photos (background removal and image enhancement) and, on plans that include the Profit section, to calculate the store's profits.

"User" or "Merchant": any natural or legal person who installs the app on their online store on the Salla platform.

"Salla platform": the technical platform that hosts the User's online store, on which the app operates as an add-on.

"Personal data": any data that could identify the User directly or indirectly.

"Processing service provider": a specialized third party whose application programming interface (API) is used to remove the background from a photo. To ensure service continuity, the app relies on one primary provider and one backup provider, the latter used automatically only when processing with the primary provider is temporarily unavailable; both are subject to the controls described in Article 5. In addition, an upscaling provider is used only for low-resolution product photos on plans that include automatic image enhancement, subject to the same controls.

Article 2Scope of the policy and User consent#

This policy applies to all data processed through the app from the moment it is installed on the User's store until it is uninstalled. By installing the app, subscribing to any of its plans, or using it in any way, the User acknowledges having read and understood this policy and gives explicit and binding consent to all the practices described in it. If the User does not agree with any of its provisions, they must refrain from installing the app or continuing to use it.

Article 3Data collected#

1. Store data: When the app is installed, the Salla platform grants the Service Provider, via the OAuth 2.0 protocol, limited access to the User's store data strictly needed to run the app. This includes the store ID, its access token, and the email address registered for the store account with Salla. The email is used solely to send service notices (such as a photo quota nearing its limit) and support messages.

2. Product photos: The app receives the product photos the User chooses to process, and returns each photo after processing to the User's store through the Salla platform API. To allow the User to undo a processing operation, the app keeps a copy of the original photo before processing for up to forty-eight (48) hours, after which it is deleted automatically.

3. Usage data: Limited technical data, such as the number of photos processed during the subscription period, and basic technical logs for troubleshooting and performance improvement.

4. Order data (Profit section): If the User enables the Profit section on the Pro or Business plan, the app reads the store's orders from the Salla platform and stores only financial totals from them: the order number, date and status; the payment method; the amounts (subtotal, shipping, cash-on-delivery fee, discount, tax and total); the order items (product, option code, quantity and price); and the shipping city only. It also reads the product costs recorded in Salla, and stores the costs, fee rates, ad spend and fixed expenses the User enters. This data is used solely to calculate and display the profits of the User's store to the User.

5. Explicit exclusions: The app does not store any personal data of the User's store customers (store visitors or end buyers). It does not store their names, mobile numbers, email addresses or detailed addresses, and it has no access to any card or payment method data.

Article 4Purposes of data use#

The data referred to in Article 3 is used solely for the following purposes: performing the app's core function; calculating and displaying the store's profits to the User when the Profit section is enabled; counting usage against the selected subscription plan; providing technical support when needed; and improving the quality and reliability of the service.

The Service Provider undertakes not to sell data or share it for marketing or advertising purposes with any party.

Article 5Sharing data with third parties#

A product photo is sent, solely for background removal, to the processing service provider referred to in Article 1. Normally, the photo is sent to the primary provider only. If it cannot be processed there for purely technical reasons (such as the provider's temporary capacity being exhausted), the same photo is automatically resent to the backup provider to complete processing without interrupting the service, for the same purpose only. If the photo is low-resolution and automatic image enhancement is enabled, the photo is sent after its background is removed to the upscaling provider, solely to increase its resolution. Some processing providers' servers may be located outside the Kingdom of Saudi Arabia. Each provider is required to delete the photo from its systems once processing is complete, in accordance with its own policy. No other data, including store data or the merchant's identity, is shared with any processing service provider or any other third party, except in the following cases: compliance with a judicial or regulatory order issued by a competent authority, or protection of the Service Provider's legal rights when necessary.

Article 6Data retention#

The access token, email address and store settings are kept only while the app is installed, and are deleted automatically and permanently from the live database as soon as the app is uninstalled from the User's store, together with any saved original product photos, any pending processing jobs, and all order and cost data saved for the Profit section. The exception is brief records that contain no photos, access tokens or contact data (the store ID, the plan, and the number and dates of processing operations), which are kept for accounting and statistical purposes only. Photos being processed are not stored on the Service Provider's servers after their processing is complete and they are returned to the store, except for a short temporary technical period needed to complete the processing itself.

Note on backups: The Service Provider relies on periodic automated backups of the database for operational continuity and protection against technical failures (see Article 7). Because of the nature of these backups, a copy of the User's access token may remain in an earlier backup for up to eighty-nine (89) days after uninstallation, even though it is deleted immediately from the live database as described above. These backups are not used for any operational purpose during this period, are restored only in the event of a technical failure that requires it, and are permanently deleted when their automatic period ends.

Article 7Data security and protection#

The Service Provider takes reasonable technical and organizational measures to protect data from unauthorized access, disclosure or modification. These measures include, without limitation: encrypting communication channels (HTTPS) between the User's store and the app's servers; restricting access to credentials (tokens) to the systems needed to run the service only; verifying the validity and signature of every notification received from the Salla platform (webhook signature verification) so that no request not actually issued by Salla is accepted; and protecting the app's internal administration interfaces with a dedicated authentication system that prevents access by any unauthorized party.

Article 8User rights#

The User may at any time: uninstall the app from their store, which immediately stops access to their data; request access to the data held about them through the contact channels set out in Article 12; and request the deletion of any data remaining after uninstallation, which the Service Provider undertakes to carry out within a reasonable period.

Article 9Compliance with Saudi regulations#

The Service Provider seeks to comply with the provisions of the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), with respect to collecting the minimum data necessary, defining the purpose of processing, and not using data outside that purpose.

Article 10Cookies and similar technologies#

The app does not currently use cookies for tracking or marketing purposes. If any such technology is added in the future, this policy will be updated to explain its nature and purpose.

Article 11Changes to the policy#

The Service Provider reserves the right to amend the provisions of this policy from time to time. Any material change will be published on this page with an updated effective date at the top. The User's continued use of the app after a change is published constitutes implied acceptance of it.

Article 12Contact and inquiries#

For any inquiry or request relating to this policy or to the User's data, please contact: [email protected]