Data Processing
You own your customers’ data. We hold it for you.
Who is who
Your business decides what to record about your own customers and why. That makes you the controller of that data. We store and process it on your instructions and for no purpose of our own, which makes us the processor. This page is the agreement between those two roles, and it applies to every account.
What we process on your behalf
- Your customers: name, address, phone number, and — if you use the feature — a pinned location and a photograph of the door.
- The trade: orders, deliveries, returns, quantities, rates, invoices, payments, balances and deposits.
- Your people: staff and rider logins, attendance, wages and advances where you use those sections.
We never process any of it for our own purposes. We do not sell it, do not profile the people in it, and do not use one business's records to train anything.
Separation
Every row carries the id of the business it belongs to and every query is bound to the account signed in. It is enforced beneath the screens rather than by them. See the security page for how.
Who can reach it
Your own staff, according to the permissions you give them. On our side, only the small number of people who run the platform, only when you have asked for help, and every such access is written to an activity log you can ask to see.
Sub-processors
The hosting provider that runs the servers, and — only if you switch it on — the messaging provider that carries WhatsApp and SMS to your customers. Nothing else receives your data. We will tell you before adding another.
Where it lives
On servers chosen for latency to Pakistan. A message you send through WhatsApp necessarily passes through that provider's own network.
How long
As long as your account is open, and at least 30 days after it closes so that a business coming back finds its round intact. Ask for it sooner and we will do it sooner.
Getting it back, or destroyed
Every screen exports to a spreadsheet while you are signed in, and support will produce a full export on request at no charge. To have it destroyed, use the account deletion page: the request is verified by email, held for 14 days so it can be undone, and then carried out for good.
If something goes wrong
We will tell you about a breach affecting your data without delay, in plain language: what happened, what was reachable, what we have done, and what you should tell your own customers.
Asking
privacy@irsaal.pk. A signed copy of this agreement on your own paper is available on request.