Privacy Policy

Effective Date: July 5, 2026

This Privacy Policy explains how Shajer LLC, a company registered in Austin, Texas, USA ("Shajer", "we", "us", "our"), collects, uses, shares, and protects information when you use:

• the Shajer website at shajer.shop;
• the Shajer customer mobile application ("Customer App");
• the Shajer Vendor mobile application ("Vendor App"); and
• the Shajer Delivery mobile application ("Delivery App"),

collectively, the "Platform". This Policy applies identically across all four channels above; where a practice is specific to one role (Customer, Vendor, or Delivery Partner) or one app, that is noted explicitly. This Policy should be read together with our Terms and Conditions.

1. Information We Collect

1.1 Information you provide directly

• All users: first and last name, email address, phone number, password, and, if you sign in with Google, Facebook, or Apple, the basic profile identifiers those providers share with us (name, email, unique ID).
• Profile photo (Customer, Vendor, Delivery Partner), uploaded via your device camera or photo library.
• Customers: delivery addresses and associated GPS coordinates; order history; cart and wishlist items; in-app chat messages (including optional voice messages) with Vendors or Delivery Partners; ratings and reviews; referral codes.
• Vendors: store/business name, store phone and email, store address and GPS coordinates, store logo and cover images, product listings and images, bank/payout account details (bank name, branch, account holder name, account number), and subscription/billing information.
• Delivery Partners: government-issued identity documents (identity type and number, and document images) used for verification, vehicle information, and payout/earnings and withdrawal details.

1.2 Information collected automatically

• Device and app data: device identifiers, a Firebase Cloud Messaging (FCM) push-notification token, app version, operating system, and crash/diagnostic logs (via Firebase Crashlytics).
• Usage data: pages/screens viewed, features used, and order/transaction activity on the Platform.
• Cookies and similar technologies (shajer.shop web app only): an authentication token and Redux application state stored in your browser's local storage, and a language-preference cookie. We do not use these to track you across unrelated third-party websites.

1.3 Location information

We use location data for the following purposes, and only in the following circumstances:

• Customer App and website: location is used, only when you actively add/select a delivery address or view the map, to confirm delivery-zone coverage and set your address coordinates. Location is not collected continuously or in the background.
• Vendor App: location is used to set and display your store's location and delivery-coverage zone, and (on iOS) to support invoice printing over Bluetooth. Location is not collected continuously or in the background.
• Delivery App: while you are logged in and your status is set to "active/online," the app periodically records your device's GPS coordinates (approximately every 10 seconds) so that Customers and Vendors can see delivery progress and so the Platform can assign nearby jobs to you. This stops immediately when you go offline, log out, or close the app. The Delivery App does not request or use "Always"/background location access — location is only collected while the app is open and running in the foreground.

1.4 Payment information

Shajer's applications and website do not collect or store your full payment card number, CVV, or bank card credentials. When you pay by card or a supported online payment method, you are directed to a secure, hosted checkout operated by our third-party payment gateway partner(s); Shajer only receives confirmation of the payment result and limited transaction metadata (amount, method used, reference/transaction ID). Vendor payout bank details and Delivery Partner payout details are stored by us to process payouts and are used only for that purpose.

1.5 Camera, photo library, and microphone

With your permission, the apps access your camera and photo library to let you upload a profile picture (all apps) and, for Delivery Partners, to capture delivery-proof photographs. Microphone access is used only if and when you choose to record a voice message in in-app chat; it is not used to record audio at any other time.

1.6 Bluetooth (Vendor App only)

The Vendor App may request Bluetooth permission solely to connect to a nearby receipt printer you choose to pair. This connection is local to your device and printer; no data is sent to Shajer or any third party as a result of this pairing.

2. How We Use Information

• Create and manage your account and authenticate you (including via Google/Facebook/Apple sign-in and OTP verification);
• Process and fulfill Orders, including matching Customers, Vendors, and Delivery Partners, calculating delivery distance/time, and enabling order tracking;
• Process payments and, for Vendors and Delivery Partners, payouts;
• Send transactional push notifications, emails, and SMS/OTP messages related to your account or Orders;
• Provide customer support and respond to your requests;
• Verify identity and eligibility (Vendors and Delivery Partners), and prevent fraud, abuse, and safety incidents;
• Maintain, secure, and improve the Platform, including diagnosing crashes and technical issues;
• Comply with legal, tax, and regulatory obligations; and
• With your consent or where permitted by law, send you promotional communications, which you may opt out of at any time.

3. Legal Bases for Processing (EEA/UK Users)

Where the General Data Protection Regulation ("GDPR") or the UK GDPR applies, we process personal data on the following legal bases: performance of a contract with you (e.g., fulfilling an Order); your consent (e.g., optional marketing communications, camera/photo/microphone/location permissions); our legitimate interests (e.g., fraud prevention, service improvement, security), balanced against your rights; and compliance with a legal obligation (e.g., tax and accounting records).

4. How We Share Information

• Between Platform participants, as needed to fulfill an Order: a Customer's name, delivery address, and contact details are shared with the assigned Vendor and Delivery Partner; a Vendor's store details are shared with Customers; a Delivery Partner's name, photo, and live delivery status are shared with the Customer and Vendor for that Order.
• Service providers acting on our behalf, including: Google Firebase (authentication, push notifications via FCM, crash/analytics reporting), Google Maps Platform (maps, geocoding, distance calculation), Google Sign-In, Facebook Login (Meta), Sign in with Apple, SMS/OTP delivery providers, cloud hosting providers, and third-party payment gateway partners that process your payment.
• Legal and safety reasons: where required to comply with law, respond to legal process, enforce our Terms, or protect the rights, property, or safety of Shajer, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements.

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising purposes.

5. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Platform, and for a reasonable period afterward to comply with legal, tax, accounting, dispute-resolution, and fraud-prevention obligations. Delivery Partner identity/verification documents and financial/payout records are retained for the period required by applicable law even after account deletion. Chat messages tied to an Order are retained for a limited period to support dispute resolution and safety review.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encrypted transmission (HTTPS/TLS), access controls, and reliance on reputable infrastructure providers (Firebase/Google Cloud) for authentication and messaging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

• Access and correction: you can review and update most profile information directly within the app or website.
• Account and data deletion: you may permanently delete your account at any time using the "Delete Account" feature available in the Customer, Vendor, and Delivery apps (and on shajer.shop), or by emailing support@shajer.shop. Some information may be retained after deletion where required for legal, tax, fraud-prevention, or dispute-resolution purposes, as described in Section 5.
• Permissions: you can grant or withdraw camera, photo library, microphone, location, and Bluetooth permissions at any time through your device settings; some features may not work as intended if you withdraw a required permission.
• Push notifications: you can disable push notifications through your device settings.
• Marketing communications: you can opt out of promotional emails/messages using the unsubscribe or opt-out option they contain, or by contacting us.

8. Additional Rights for EEA/UK Users (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to: request access to your personal data; request correction or erasure; restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority. Where we transfer personal data outside the EEA/UK (for example, to Google Cloud/Firebase infrastructure), we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what categories of personal information we have collected about you and for what purpose (see Section 1 and Section 10 below); request deletion of your personal information (see Section 7); request correction of inaccurate personal information; and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising any of these rights. To exercise a right, contact us at support@shajer.shop; we may need to verify your identity before completing your request.

10. Children's Privacy

The Platform is not directed to, and we do not knowingly collect personal information from, children under 13 (or the applicable minimum age in your jurisdiction). Creating an account or transacting on the Platform requires you to be at least 18 years old, or the age of legal majority. If we learn that we have collected personal information from a child in violation of this Policy, we will delete it.

11. Third-Party Services

The Platform integrates the following third-party services, each of which has its own privacy practices:

• Google Firebase (Authentication, Cloud Messaging, Crashlytics) — see Google's Privacy Policy.
• Google Maps Platform / Google Sign-In — see Google's Privacy Policy.
• Facebook Login (Meta Platforms) — see Meta's Privacy Policy.
• Sign in with Apple — see Apple's Privacy Policy.
• Payment gateway partner(s) used to process your payment at checkout.

12. International Data Transfers

Shajer is based in the United States, and our service providers (including Google/Firebase infrastructure) may process data in the United States and other countries. Where required by applicable law, we take steps to ensure such transfers are protected by appropriate safeguards.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" above and, where required by law, through additional notice. Continued use of the Platform after an update takes effect constitutes acceptance of the revised Policy.

14. Contact Us

Questions, requests, or complaints about this Privacy Policy or our data practices can be sent to support@shajer.shop.