Privacy Policy — Misr Stores

In short We use your data to run your stores, bill you and support you. We don't sell it or use it for advertising. We share it only with the providers that make the Service work, and you can ask to see, correct or delete it.

1. Who we are and what this covers

This policy explains how Misr Stores ("we") handles personal data when you use misrstores.com, the merchant area, the admin dashboard and the store websites we host. We process personal data in line with Egypt's Personal Data Protection Law (Law No. 151 of 2020). Words like "Service" mean the same as in our Terms of Service.

2. What we collect

From your Google account when you sign in: your name, email address, profile picture and whether your email is verified. We never see your Google password.
Your profile: full name and address as written on your national ID, phone numbers, gender, birth date, nationality and residence.
Your stores: store names and descriptions, web addresses and domains, the template and settings you choose, and the details of each store's admin and employee accounts (names, emails, phone numbers, gender, birth date; passwords are stored only in hashed form).
What you add to your stores: products, photos, texts, coupons, banners and pages.
Billing: your invoices, the orders they include and their payment status.
Conversations: messages you send our team, service requests and profile change requests.
Technical data: IP address, browser and device type, pages requested, and timestamps, kept in server logs for security and troubleshooting.

3. How we use it

to create and run your account and stores, and to sign you in (performing our contract with you);
to calculate, issue and collect invoices;
to answer your conversations and deliver services you request;
to send you service messages, such as security notices and important updates about your account;
to keep the Service secure, prevent fraud and abuse, and fix problems (our legitimate interest);
to meet legal obligations, such as keeping financial records and answering lawful requests from authorities.

We don't sell your personal data, we don't use it for advertising, and we don't use third-party analytics or advertising trackers on these pages.

4. Your customers' data

When customers shop in your store, their data (such as names, phone numbers, email addresses, delivery addresses, orders, reviews and messages) is stored in your store. For this data you decide what it's used for, and we process it on your behalf only to run your store. You must use it lawfully, keep your store's privacy page accurate, and answer your customers' requests about their data; we'll help where the Service allows.

We share personal data only as needed with providers that make the Service work, under agreements that protect it:

Google: to sign you in, and to translate texts you send for translation in the dashboard;
Amazon Web Services: to store images and files, and to send emails;
Kashier: to process your customers' online payments, if you connect your Kashier account;
Bosta: to ship your orders, if you connect your Bosta account (order and delivery details).

We may also disclose data when the law requires it, to protect the rights and safety of our users or the Service, or as part of a merger or sale of our business, in which case this policy continues to apply to it.

6. Where it's stored

Some of our providers store or process data outside Egypt; for example, files are stored with Amazon Web Services in the European Union, and emails are sent through its servers in the United States. When data leaves Egypt, we rely on the safeguards the law requires.

7. How long we keep it

We keep your data while your account is active.
A deleted demo store's data is removed right away.
When you ask to delete your account, it's disabled at once and reviewed by our team. After the deletion is approved, some data is kept for legal purposes for up to 90 days and then deleted.
Invoices and the records behind them are kept for as long as tax and accounting laws require.
Server logs are kept for a limited time for security.

8. Security

We protect data with encrypted connections (HTTPS), hashed passwords, access limited to the people who need it, and separation between stores. No system is perfectly secure, so please keep your Google account and your stores' passwords safe, and tell us right away if you suspect misuse.

9. Your rights

You can ask to know what personal data we hold about you and get a copy of it, correct it (your profile's Request Change), delete it (your profile's Request Account Deletion), or object to or limit how we use it, and withdraw consent where you gave it. Start a conversation from your dashboard or email us; we'll reply within the time the law sets. You can also complain to Egypt's Personal Data Protection Center.

The Service is for adults (18 and over), and we don't knowingly collect data from children.

10. Cookies and your device

a session cookie keeps you signed in, and is removed when you sign out;
a cookie remembers the language you chose;
your light or dark theme choice is saved in your browser's storage.

These are needed for the site to work. We don't use advertising or tracking cookies.

11. Changes and contact

We may update this policy. We'll show the date of the latest version at the top of this page and tell you about important changes by email or in your dashboard.

For any privacy question or request, start a conversation from your dashboard or email support@misrstores.com.

This policy is available in Arabic and English. If the two differ, the Arabic version applies.