Privacy Policy for Asly

1. Overview

This Privacy Policy explains how Asly (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use our platform, website, and services (the “Platform”).

By using Asly, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect

We collect the following types of data:

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (securely hashed)

2.2 Business & Store Data

When you use the Platform, we may process:

• Store name and business details
• Product listings, images, and descriptions
• Order and transaction data

2.3 Customer Data (Processed on Your Behalf)

As a merchant, you may collect customer data such as:

• Customer names
• Email addresses
• Shipping details

This data is processed by Asly on your behalf, and you remain the data controller for your customers.

2.4 Payment Information

Payments are processed by our Merchant of Record, Polar.sh.

We do not store full payment card details. Payment data is handled directly by Polar.sh in accordance with their privacy policies.

2.5 Usage Data

We automatically collect certain technical data:

• IP address
• Browser type
• Device information
• Pages visited and actions taken

2.6 Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Improve performance
• Analyze usage

You may disable cookies in your browser settings, though some features may not function properly.

3. How We Use Your Data

We use collected data to:

• Provide and operate the Platform
• Process transactions and manage credits
• Improve features and performance
• Detect fraud and prevent abuse
• Communicate with you regarding account, billing, or updates

We may also use aggregated and anonymized data for analytics and product improvement.

4. Data Ownership & Roles

• You own your store data and customer relationships
• Asly acts as a data processor for customer data
• You are responsible for complying with applicable data protection laws when handling your customers’ data

5. Data Sharing

We do not sell your personal data.

We may share data only with:

5.1 Service Providers

Including:

• Payment processors (Polar.sh)
• Cloud hosting providers
• Analytics and infrastructure tools

These providers process data only as necessary to deliver services.

5.2 Legal Requirements

We may disclose data if required by law, regulation, or legal process in Morocco or applicable jurisdictions.

6. Data Retention

We retain data only as long as necessary to:

• Provide the Platform
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may request deletion of your account, subject to legal and operational requirements.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption where applicable
• Access controls
• Secure infrastructure

However, no system is 100% secure.

8. Your Rights

Depending on applicable laws, you may have the right to:

• Access your data
• Correct inaccurate information
• Request deletion
• Object to or restrict processing

To exercise these rights, contact us at the email below.

9. International Data Transfers

Your data may be processed in countries outside Morocco where our service providers operate.

We take steps to ensure appropriate safeguards are in place.

10. Third-Party Links

The Platform may contain links to third-party services. We are not responsible for their privacy practices.

11. Children’s Privacy

Asly is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact

For questions or requests regarding this Privacy Policy, contact us at support@asly.com.