Privacy Policy | ShopBrain

1. Introduction

Welcome to ShopBrain (shopbrain.co). ShopBrain is a restaurant inventory management SaaS platform operating in Saudi Arabia, UAE, Egypt, Qatar, Bahrain, Kuwait, Oman, and Jordan. We are committed to protecting your privacy and handling your personal data transparently and responsibly.

This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and what rights you have regarding your data when you use our platform, website, and mobile application.

2. Information We Collect

We collect the following types of information to provide and improve our services:

Account information: name, email address, phone number, company name, and role within your organization.
Business data: inventory records, purchase orders, supplier information, production logs, sales data, and financial reports that you enter into the platform.
Usage data: how you interact with the platform, features used, pages visited, timestamps, and device information.
Technical data: IP address, browser type and version, operating system, device identifiers, and referral URLs.
Communication data: records of correspondence when you contact our support team or submit inquiries.
Integration data: information from connected third-party POS systems and accounting platforms when you authorize such integrations.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and operate our inventory management platform and related services.
To process transactions and manage your account, including authentication and access control.
To power AI-driven features such as demand forecasting, inventory optimization, and automated procurement suggestions.
To generate reports and analytics that help you make informed business decisions.
To communicate with you about service updates, security alerts, and support responses.
To improve our platform through aggregated and anonymized usage analytics.
To comply with applicable legal and regulatory requirements in the jurisdictions where we operate.

4. Data Storage and Security

Your data is stored on secure cloud infrastructure with industry-standard encryption at rest and in transit. We implement the following security measures:

TLS/SSL encryption for all data transmitted between your devices and our servers.
AES-256 encryption for data stored at rest.
Role-based access controls and multi-factor authentication options.
Regular security audits and vulnerability assessments.
Automated backups with geo-redundant storage.
Data residency options to comply with local data protection regulations in the MENA region.

We retain your data for as long as your account is active or as needed to provide our services. When you terminate your account, we will delete or anonymize your data within 90 days, unless retention is required by law.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform:

Essential cookies: required for authentication, security, and core platform functionality. These cannot be disabled.
Analytics cookies: help us understand how users interact with the platform so we can improve performance and usability.
Preference cookies: store your language selection, theme preferences, and other settings.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our platform.

6. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our platform. These include:

Cloud hosting and infrastructure providers for data storage and processing.
POS system providers when you enable integrations (e.g., Foodics, iMenu, Marn).
Payment processing services for subscription billing.
Analytics and monitoring tools to improve service reliability.
Communication services for email notifications and customer support.

We do not sell your personal data or business information to third parties. All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you.
Right of rectification: request correction of inaccurate or incomplete data.
Right of erasure: request deletion of your personal data, subject to legal obligations.
Right to data portability: request your data in a structured, machine-readable format.
Right to restrict processing: request that we limit the processing of your data in certain circumstances.
Right to object: object to the processing of your data for specific purposes, including direct marketing.

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

8. International Data Transfers

As we operate across Saudi Arabia, UAE, Egypt, Qatar, Bahrain, Kuwait, Oman, and Jordan, your data may be processed in any of these jurisdictions. We ensure appropriate safeguards are in place when transferring data across borders, including compliance with local data protection laws such as the Saudi Arabia Personal Data Protection Law (PDPL), the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and other applicable regulations in the region.

9. Children's Privacy

ShopBrain is a business-to-business platform designed for restaurant operators and is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@shopbrain.co

Website: shopbrain.co