Privacy Policy
Last updated: October 16, 2026
At DzStore, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share information when you use our platform at dzstore.org. We process personal data in accordance with Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, as amended and supplemented by Law No. 25-11 of 24 July 2025.
01Information We Collect
We collect information you provide directly: name, email address, phone number, and business information when you create an account. Store data including product information, images, and store settings. Order information including customer names, phone numbers, addresses, and order details. Payment proof screenshots for subscription payments. Technical data including IP addresses, browser type, device information, and usage patterns through cookies and analytics tools.
02How We Use Your Information
We use your information to: provide and maintain our platform services; process and manage your store and orders; send email notifications (order confirmations, shipping updates, account alerts); improve our services and develop new features; provide customer support; detect and prevent fraud; send marketing communications (with your consent, which you can withdraw at any time); and generate anonymous analytics to improve the platform.
03Data Security
We implement industry-standard security measures to protect your data, including: encrypted data transmission (HTTPS/TLS); secure password hashing; rate limiting and brute-force protection; regular security audits; access controls and authentication. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
05Third-Party Services
We work with trusted service providers that process data on our behalf, only as needed to run the platform: cloud hosting and database providers (where your account and store data are stored); Supabase (database and image storage); Cloudflare (network security, performance and privacy-friendly traffic statistics); Resend (email delivery); Sentry (error monitoring); Google Analytics and PostHog (usage analytics); Groq (AI-powered features); Chargily (online payment of subscriptions); and the WhatsApp Business platform (order notifications). Each provider is bound by its own privacy and security commitments, and we share only the minimum data each one needs.
06Merchant Data
As a merchant, you are responsible for how you handle your customers' data. You agree to: only collect customer data necessary for order fulfillment; not sell or share customer data with third parties; handle customer data in compliance with applicable privacy laws; inform your customers about your own data practices. DzStore is not responsible for merchants' handling of customer data beyond our platform.
07Store Customer Data
When customers place orders through DzStore-powered stores, we collect their name, phone number, delivery address (wilaya, commune, address), and order details. This data is shared with the merchant for order fulfillment. Customers do not create accounts on DzStore — orders are placed with basic contact information only. If a merchant turns on "count sales when I confirm the order", DzStore sends that merchant's own Meta (Facebook/Instagram) and/or TikTok advertising account a purchase event when the merchant confirms an order. It contains the order value, the products, and the customer's phone number, name and wilaya in hashed (one-way encrypted) form, plus the ad click identifiers stored by the merchant's pixel in the customer's browser. It never contains the address, the IP address or the device details. This is used only to measure that merchant's ads; it is off by default and the merchant can turn it off at any time.
08Delivery History Shared Between Stores
To help merchants reduce failed deliveries, DzStore may show, next to a merchant's own orders, how earlier orders placed with the same phone number ended across all DzStore stores: how many were delivered, how many were returned, how many were refused after shipping, and how many stores they came from. Only these counts are shown. A merchant never sees another store's name, its orders, their dates, addresses or products, or any note written by another seller. The counts come from order statuses recorded by delivery companies or by merchants. Merchants may use them only to decide whether to ship an order, and for no other purpose. Customers can exercise their rights over this data (access, correction, objection) by writing to [email protected].
09Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Order records may be retained for up to 5 years for legal compliance. Anonymous analytics data may be retained indefinitely.
10Your Rights
You have the right to: access the personal data we hold about you; correct inaccurate personal data; request deletion of your personal data; object to processing for legitimate reasons; export your data in a portable format; and withdraw your consent at any time, including for marketing communications. To exercise any of these rights, contact us at [email protected]. You may also lodge a complaint with the National Authority for the Protection of Personal Data (ANPDP).
11Account & Data Deletion
You can permanently delete your DzStore account and all of its data at any time. In the DzStore app or on the web dashboard at dzstore.org, open Settings and tap Delete Account, then confirm. This immediately and permanently deletes your account, your store, and everything linked to it — your products, orders, customers, and settings. Nothing is kept after deletion and the action cannot be undone. If you are unable to sign in, email us at [email protected] from your registered address and we will delete your account and data for you.
12Children's Privacy
Merchants must be at least 13 years old to create a store account. Store visitors and customers must be at least 13 years old to place orders. We do not knowingly collect personal data from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.
13Law Enforcement Disclosure
DzStore may be required to disclose your personal data in response to lawful requests by Algerian authorities, including courts or government agencies. We will make reasonable efforts to notify you of such requests unless legally prohibited from doing so.
14Data Transfer
Some of our hosting and service providers may store or process data on servers located outside Algeria. These transfers are necessary to provide the service, and we only work with providers that offer an adequate level of protection and security. By creating an account and using DzStore, you consent to this processing. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you by email before your personal data is transferred to another entity and becomes subject to a different privacy policy.
15Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify you of material changes via email. Your continued use of our platform after changes constitutes acceptance of the updated policy.
16Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us at [email protected]. We are available 24/7.