Privacy Policy

Effective Date: September 14, 2026

This Privacy Policy explains how Shajer LLC, a Texas limited liability company with its registered address at 5900 Balcones Dr Ste 100, Austin, TX 78731, USA ("Shajer", "we", "us", "our"), collects, uses, shares, and protects information when you use:

• the Shajer website at shajer.shop;
• the Shajer customer mobile application and its web version ("Customer App");
• the Shajer Vendor mobile application, its web version, and the vendor web panel ("Vendor App");
• the Shajer Delivery mobile application ("Delivery App"); and
• the Shajer Services mobile application ("Services App"), used by independent skilled-trade professionals to quote on tasks posted by Customers,

collectively, the "Platform". One Privacy Policy covers every region. Where a practice differs between the United States and Pakistan, or applies to one role only (Customer, Vendor, Delivery Partner, or Service Professional), it is labelled. In the United States, only the Customer App and Vendor App are offered: there are no Delivery Partners, no Services App, no cash on delivery, and no in-app wallet. This Policy should be read together with our Terms and Conditions (United States / Pakistan and other regions).

1. Information We Collect

1.1 Information you provide directly

• All users: first and last name, email address, phone number, and password. If you sign in with Google, Facebook, or Apple, we receive the basic profile identifiers that provider shares with us (name, email, unique ID).
• Profile photo (Customers, Vendors, Delivery Partners), uploaded from your camera or photo library.
• Customers: delivery addresses and their map coordinates; order history; cart and wishlist items; in-app chat messages (text and images) with Vendors, Delivery Partners, or our support staff; ratings, reviews, and structured review answers (Section 1.9); refund requests and any photos you attach to them; referral codes; and, in Pakistan, the title, description, address, and photos of any service task you post, plus the quotes you receive and accept.
• Vendors: store or business name, store phone and email, store address and map coordinates, store logo and cover images, product listings and images, the sales-tax category you assign to each item (United States), and subscription and billing information. United States: when you connect a Stripe account, we ask an optional question about whether your bank account is in your own name or a business name, and we may ask for your date of birth and mailing address to shorten Stripe's form; those answers are passed to Stripe and not kept by us (Section 1.4). Pakistan: the payout details you enter in the app (for example bank name, account holder name, and account number).
• Vendor staff: if a Vendor creates staff accounts in the vendor web panel, we hold each staff member's name, phone, email, photo, and role, entered by the Vendor. The Vendor is responsible for telling its staff about this Policy.
• Delivery Partners (Pakistan only): government-issued identity document type and number, and photos of the front and back of the document; vehicle type; delivery zone; payout and withdrawal details; your chosen payment model (platform payout pool or direct payment by a linked Vendor); and, if you bid on long-haul goods-moving jobs (Section 1.8), your bid amounts and messages. Providing a government identity document is required to register as a Delivery Partner, so that we can verify the identity of the person who will be handling Customers' orders and entering their neighbourhoods. The identity number is encrypted at rest; the document photos are stored on private storage that has no public web address and are served only through short-lived expiring links to the staff who review them. These fields are never shown to Customers, Vendors, or other Delivery Partners.
• Service Professionals (Services App, Pakistan only): your profession or trade; your service zone; photos of the front and back of a government identity document, which are required at registration and reviewed by our staff before your account is approved; the quotes (price, message, estimated duration) you submit; and the status of each job stage you mark complete. Identity-document photos are stored on the same private storage, with the same expiring-link access, as Delivery Partners' documents, and are never shown to Customers or other users. We do not collect an identity number from Service Professionals.

1.2 Information collected automatically

• Device and app data: a push-notification token issued by Google Firebase Cloud Messaging for your device, and the language and region settings you choose in the app. We do not use any advertising identifier, advertising SDK, or third-party analytics or crash-reporting SDK in any of our apps.
• IP address: your IP address is recorded when you browse the Customer App before signing in (as part of a temporary "guest" session, which is linked to your account if you register), in our server logs, and for rate limiting of sign-in attempts. Staff accounts also record the IP address and device of each sign-in.
• Usage data: the screens and features you use and your order, task, and transaction activity on the Platform.
• Website: the shajer.shop website is a set of static pages. It makes no requests to our servers, sets no cookies, and stores nothing in your browser. It reads your browser's time-zone setting, on your device only, to decide whether to show the United States or the international version of a page; that setting is not sent to us or to anyone else.

1.3 Location information

Location is used only as follows. Each app asks for location through your device's standard operating-system permission prompt, and you can withdraw the permission in your device settings at any time.

• Customer App: with your permission, your device's location is read when you add or select a delivery address or open the map, to confirm delivery-zone coverage and set the address coordinates. The coordinates of your saved address (not your live device position) are then sent with the app's requests to our servers so that we can show you stores that serve your area and the right delivery zone, prices, and taxes. The Customer App does not track your device's location continuously or in the background.
• Vendor App: location is read once, with your permission, to place your store on the map and set its delivery-coverage zone. It is not collected continuously or in the background.
• Delivery App (Pakistan only): while you are logged in and your status is set to "active/online," the app records your device's GPS position approximately every 10 seconds, converts it to a street address, and sends it to our servers so that Customers and Vendors can see delivery progress and so we can assign nearby jobs to you. This continues if you leave the app running in the background while online (the app may ask you to exempt it from battery optimisation for this reason) and stops when you go offline, log out, or close the app. We keep only your most recent position, not a history of your movements. The Delivery App does not request "Always" location access.
• Services App (Pakistan only): your device's location is read once, with your permission, when you register, to detect your service zone. Tasks are then shown to you by zone, not by live location. It is not collected continuously or in the background.

1.4 Payment information

Shajer's applications and website never receive or store your full payment card number, expiry date, or security code.

United States — paying by card. Card payments are processed by Stripe. When you pay, you enter your card into a secure payment form provided by Stripe's software inside the app; the card details go directly from your device to Stripe. Shajer receives only the payment result and limited transaction details (amount, fees, and Stripe's reference IDs). To calculate the sales tax due on an Order, we send the delivery address you chose (street, city, state, postal code, country) to Stripe's tax service; for a pickup Order we send the store's address instead. Stripe processes this information under its own privacy policy.

United States — Vendors. Vendors are paid through Stripe, and Shajer does not hold their banking details at all. A Vendor connects a Stripe account of their own; their bank account number and any government identifier Stripe requires (such as a Social Security Number) are entered on Stripe's own pages and are never entered into, transmitted through, or stored by Shajer's systems. To shorten Stripe's verification form, the Vendor App may ask for the Vendor's date of birth and mailing address at the moment they choose to connect. Those answers are passed directly to Stripe when the account is created and are not retained by us — they are not written to our database, our logs, or any backup. Providing them is optional; a Vendor who prefers can enter the same details on Stripe's pages instead. Vendor subscription fees are also charged by Stripe, to a card the Vendor saves with Stripe; Shajer stores only Stripe's customer and subscription reference IDs. We keep, for each Order, Stripe's payment, refund, dispute, and fee reference IDs and amounts, because we need them to handle refunds, disputes, and sales-tax records.

Pakistan. Orders are paid by cash on delivery or from your in-app Shajer wallet, and by any online payment method we offer in the app; if an online method is offered, your payment details are entered with that payment partner, not with us. We keep a ledger of your wallet balance and transactions. Delivery Partner and Vendor payout details are stored by us to process payouts and are used only for that purpose. For service tasks, see Section 1.7.

1.5 Camera and photo library

With your permission, the apps access your camera and photo library so that you can upload a profile picture; attach images to in-app chat; attach photos to a refund request (Customers); upload a store logo, cover image, and product images (Vendors); capture delivery-proof photographs (Delivery Partners); and capture or attach task photos and identity-document photos (Customers and Service Professionals in Pakistan). None of our apps records audio; we do not use the microphone.

1.6 Bluetooth (Vendor App only)

The Vendor App may request Bluetooth permission solely to connect to a nearby receipt printer you choose to pair. This connection is local to your device and printer; no data is sent to Shajer or any third party as a result of this pairing.

1.7 Escrow payments for service tasks (Pakistan only)

When a Customer accepts a Service Professional's quote for a task, the Customer's payment is held in the in-app Shajer wallet ledger as escrow and released to the Service Professional in stages as each agreed job stage is completed and approved by the Customer, or returned to the Customer's wallet if a task is cancelled under the applicable policy. We record the quote amount, the stage breakdown, and each stage's status (pending, in progress, awaiting approval, approved) to administer this process. This escrow uses the same wallet ledger as other in-app wallet features and is separate from card payments. The service-task marketplace is not offered in the United States.

1.8 Long-haul goods-moving jobs (Pakistan only)

Delivery Partners may view and bid on long-haul, goods-moving jobs posted by Customers directly, independent of any Vendor. If you post or bid on a long-haul job, we collect the job description, pickup and drop-off details, the bid amount and message, and whether a bid was accepted. Payment for an accepted long-haul job is arranged directly between the Customer and the Delivery Partner and is not processed, held in escrow, or guaranteed by Shajer — see Section 6B of the Terms and Conditions (Pakistan and other regions).

1.9 Structured review answers

After a service task is completed, both the Customer and the Service Professional may be asked a short set of multiple-choice questions about the other party (for example, whether the professional arrived on time, whether the work was completed on time, whether the workspace was left clean, and whether each party was courteous), plus an optional free-text comment. The questions and answer choices are configured by Shajer and may change over time. We collect and display these answers, together with any comment, to help other users of the Platform make informed decisions. Item, store, and delivery reviews left by Customers are shown publicly with the reviewer's first name and profile photo only.

2. How We Use Information

• Create and manage your account and sign you in (including through Google, Facebook, or Apple sign-in and one-time codes);
• Process and fulfil Orders and tasks, including matching Customers with Vendors, Delivery Partners, and Service Professionals, calculating distances and delivery times, and enabling order tracking;
• Process payments, subscriptions, refunds, and disputes, and, in Pakistan, wallet transactions and payouts;
• Calculate, collect, report, and remit sales tax in the United States, where Shajer is a marketplace facilitator;
• Send transactional push notifications, emails, and SMS one-time codes related to your account, Orders, or jobs;
• Provide support, and review in-app chat and reports for safety, fraud prevention, and dispute resolution;
• Verify the identity and eligibility of Vendors, Delivery Partners, and Service Professionals, and prevent fraud, abuse, and safety incidents;
• Maintain, secure, and improve the Platform;
• Comply with legal, tax, and regulatory obligations and respond to lawful requests; and
• With your separate consent, send you marketing messages, which you can opt out of at any time.

We do not use your personal data for targeted advertising, and we do not make decisions about you by automated profiling that have legal or similarly significant effects.

3. Legal Bases for Processing (EEA/UK Users)

Where the General Data Protection Regulation ("GDPR") or the UK GDPR applies, we process personal data on the following legal bases: performance of a contract with you (for example, fulfilling an Order); your consent (for example, marketing communications and the camera, photo, and location permissions); our legitimate interests (for example, fraud prevention, security, and service improvement), balanced against your rights; and compliance with a legal obligation (for example, tax and accounting records).

4. How We Share Information

• Between Platform participants, as needed to fulfil an Order or task. We share only what the other party needs:
  • With the Vendor fulfilling your Order: your name, contact phone number, and — for a delivery Order — the delivery address and its map coordinates, plus any order note. For a pickup Order, your name and phone number only. In Pakistan, the Delivery Partner assigned to your Order receives the same details. Your email address is not shared with Vendors or Delivery Partners.
  • With Customers: a Vendor's store details; and, in Pakistan, the assigned Delivery Partner's name, photo, phone number, and live delivery progress.
  • Service tasks (Pakistan): before a quote is accepted, Service Professionals in the task's zone see the Customer's name, the task details and photos, and an approximate location (within about 3 miles); after the Customer accepts a quote, that Service Professional receives the exact address. A Customer's phone number and email are never shared with Service Professionals; contact is through in-app chat. The Customer sees the accepted professional's name, business name, and quote.
  • Long-haul jobs (Pakistan): Delivery Partners see the job details but not the posting Customer's identity; once the Customer accepts a bid, the Customer receives that Delivery Partner's name and phone number.
  Vendors, Delivery Partners, and Service Professionals may use the information they receive only to fulfil that Order or task; the Terms and Conditions prohibit any other use.
• Service providers acting on our behalf:
  • Stripe (United States): card payments, Vendor payouts, Vendor subscription billing, and sales-tax calculation (Stripe Tax), which receives the delivery or store address for each Order — see Section 1.4.
  • Google Firebase: sign-in and phone-number verification (the SMS one-time code is sent by Firebase), and push notifications (Firebase Cloud Messaging). Push notifications for chat include the message text, so that text passes through Google's notification service.
  • Google Maps Platform: maps, address search, geocoding, and distance calculation. When you search for an address, the text you type and your coordinates are sent to Google through our servers.
  • Google Sign-In, Facebook Login (Meta), and Sign in with Apple, if you choose them.
  • Have I Been Pwned: when you set or change a password, the first five characters of a one-way hash of it are checked against a database of known-breached passwords; the password itself is never sent.
  • Hosting and cloud providers: our application and database are hosted with a third-party hosting provider; United States order, refund, and sales-tax records are additionally copied to an append-only compliance archive on Google Cloud in the United States (Section 5).
  Each provider is bound to process data only for the service it provides to us.
• Legal and safety reasons: where required to comply with law, respond to a court order, subpoena, or other lawful request from a public authority (including, in Pakistan, requests made under the Prevention of Electronic Crimes Act 2016), enforce our Terms, or protect the rights, property, or safety of Shajer, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements, with notice to you.

We do not sell your personal information, and we do not share it with third parties for targeted or cross-context behavioral advertising.

Chat monitoring. In-app messages are stored on our servers. Shajer's support and safety staff can read conversations between users and support, and can review a Vendor's conversations with its Customers, for safety, support, fraud prevention, dispute resolution, and enforcement of our Terms. Messages are never sold or used for advertising.

5. Data Retention

We keep personal data for as long as your account is active and as needed to provide the Platform, and afterward only for the periods below.

• Account and profile data (name, contact details, saved addresses, profile photo, cart, wishlist, push token): deleted when you delete your account.
• Identity documents (Delivery Partners and Service Professionals, Pakistan): the document photos are deleted immediately when the account is deleted (by you or by us), and any copy that is missed by that process is removed by a sweep within 30 days. For a registration that is denied or never completed, the document photos are deleted 90 days after the last change to the application. In no case are identity photos kept longer than 12 months after an account is closed.
• Chat messages and attachments: deleted 12 months after the last message in the conversation.
• Delivery Partner location: only the most recent position is kept; it is overwritten by the next one.
• Orders, payments, refunds, disputes, and sales-tax records (including the name, phone number, and address on each Order): kept after account deletion because tax and accounting law requires it. United States order and sales-tax records are kept for seven years in an append-only compliance archive; Texas marketplace-facilitator rules require at least four. Reviews and structured review answers remain visible with the reviewer's first name after the account is deleted.
• Wallet and payout records (Pakistan): kept with the transaction records above.
• Stripe records (United States): Stripe keeps its own records under its privacy policy; our copies of Stripe reference IDs are kept with the Order record.
• The date of birth and mailing address a US Vendor gives us to shorten Stripe's form: not retained at all — passed to Stripe as the account is created and kept nowhere on our side (Section 1.4).
• Our own staff's sign-in and audit records: four years.

What deletion does. Deleting your account removes your account record and profile data as described above. It does not remove the transaction, tax, dispute, and safety records listed here; those are kept for the stated periods and used only for those purposes.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encrypted transmission (HTTPS/TLS), access controls, optional two-factor authentication on every account type (mandatory for our staff), an audit log of staff actions, and independent backups. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we determine that a breach of security has affected your personal data, we will notify you and any authority the law requires, within the time the law requires.

Some categories of data are held to a stricter standard than the rest:

• Identity numbers are encrypted at rest, so the stored value is unreadable without the application's encryption key, and they are excluded from every response the apps return to other users.
• Identity documents, delivery-proof photographs, chat attachments, task photos, and similar sensitive uploads are kept on private storage with no public web address. They are reachable only through short-lived expiring links issued to the people who need them.
• Payment credentials are not ours to hold. Card numbers and US Vendor bank details live with Stripe (Section 1.4); the less of this data we store, the less there is to lose.

7. Your Rights and Choices

• Access and correction: you can review and update most profile information directly in the app.
• Account and data deletion: you may permanently delete your account at any time using the "Delete Account" option in the Customer, Vendor, Delivery, or Services app (you will be asked for a one-time code and to type a confirmation phrase). If you no longer have the app, email support@shajer.shop from the email address on your account, or include the phone number on it, and we will verify your identity and complete the deletion. Section 5 describes what is kept afterward and why.
• Permissions: you can grant or withdraw camera, photo library, location, and Bluetooth permissions at any time through your device settings; some features will not work without a required permission.
• Push notifications: you can disable push notifications through your device settings. Doing so also stops promotional notifications.
• Marketing communications: you can opt out of marketing emails or messages using the unsubscribe or opt-out option they contain, by replying STOP to a marketing text, or by contacting us.
• Location sharing (Delivery Partners): going offline or turning off the location permission stops location collection; you cannot accept jobs while offline.

8. Additional Rights for EEA/UK Users (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to: request access to your personal data; request correction or erasure; restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority. Where we transfer personal data outside the EEA/UK (for example, to Google or Stripe infrastructure), we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what categories of personal information we have collected about you and for what purpose (see Sections 1 and 2); request deletion of your personal information (Section 7); request correction of inaccurate personal information; and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes other than those permitted by that law. We will not discriminate against you for exercising any of these rights. To exercise a right, contact us at support@shajer.shop; we may need to verify your identity before completing your request.

10. Additional Rights for Texas Residents (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act gives you the right to: confirm whether we are processing your personal data and access it; correct inaccuracies; delete personal data you provided or we obtained about you; obtain a copy of the personal data you provided to us in a portable format; and opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, do not process it for targeted advertising, and do not carry out such profiling, so there is nothing to opt out of; we honour these rights anyway.

Sensitive data. Under Texas law, precise geolocation and government-issued identification numbers are sensitive data. We collect precise geolocation only after you grant the location permission in your device's operating-system prompt, and only in the circumstances described in Section 1.3; you can withdraw that permission at any time in your device settings. In the United States we do not collect government-issued identification numbers or documents from anyone (US Vendors give them to Stripe, not to us). We never sell sensitive data.

How to exercise your rights. Email support@shajer.shop with "Texas privacy request" in the subject line, or use the deletion option in the app. We will respond within 45 days of receiving your request; if we need more time, we will tell you within that period and may take up to 45 additional days. We may ask you to verify your identity, and we will not discriminate against you for making a request. If we decline your request, you may appeal by replying to our decision within 60 days with "Appeal" in the subject line; we will respond to the appeal within 60 days with our reasons. If your appeal is denied, you may contact the Texas Attorney General to submit a complaint at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

11. Users in Pakistan

If you use the Platform in Pakistan, the following also applies.

• Where your data is stored. Shajer operates from the United States, and your personal data is stored and processed on servers outside Pakistan (Section 14). By creating an account you consent to that transfer. We protect it with the safeguards in Section 6 wherever it is held.
• Lawful requests. We may disclose personal data to Pakistani authorities where required under the Prevention of Electronic Crimes Act 2016 or other applicable Pakistani law, in response to a valid legal request.
• Your rights. You have the rights in Section 7 (access, correction, deletion, permissions, and marketing opt-out). Where applicable Pakistani law gives you additional rights over your personal data, we will honour them; contact support@shajer.shop to exercise any right.
• Identity documents, wallet, cash on delivery, delivery-partner location, service tasks, and long-haul jobs are described in Sections 1.1, 1.3, 1.4, 1.7, and 1.8; these features exist only in Pakistan.

12. Age

The Platform is for adults only. You must be at least 18 years old to create an account or use the Platform; every account is created by ticking a box confirming this. We do not knowingly collect personal information from anyone under 18, and in particular from children under 13. If we learn that an account belongs to someone under 18, we will close the account and delete the personal information associated with it, subject to the records we must keep under Section 5. If you believe a minor has provided us with personal information, contact support@shajer.shop.

13. Third-Party Services

The Platform integrates the following third-party services, each of which has its own privacy practices:

• Stripe (United States: payments, payouts, subscription billing, Stripe Tax) — see Stripe's Privacy Policy.
• Google Firebase (Authentication, phone verification, Cloud Messaging), Google Maps Platform, and Google Sign-In — see Google's Privacy Policy.
• Facebook Login (Meta Platforms) — see Meta's Privacy Policy.
• Sign in with Apple — see Apple's Privacy Policy.
• Have I Been Pwned (breached-password check, hash prefix only).
• Google Cloud (United States compliance archive of order and tax records).

14. International Data Transfers

Shajer is based in the United States, and our service providers (including Google and Stripe) may process data in the United States and other countries. If you use the Platform from Pakistan or elsewhere outside the United States, your personal data is transferred to and stored in the United States. Where required by applicable law, we take steps to ensure such transfers are protected by appropriate safeguards.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will give you notice of material changes in the app or by email before they take effect and will update the Effective Date above. Continued use of the Platform after an update takes effect means you accept the revised Policy.

16. Contact Us

Questions, requests, or complaints about this Privacy Policy or our data practices can be sent to support@shajer.shop, or by mail to Shajer LLC, 5900 Balcones Dr Ste 100, Austin, TX 78731, USA.