Privacy and personal data protection policy

This policy explains what data Sahl collects, on what basis, how we use and protect it, and your rights.

Consent before collection

We collect personal data only with your explicit consent: by creating an account you accept this policy, and you can withdraw consent by closing your account at any time. We collect only what is needed to conclude and perform the subscription contract, nothing more.

What we collect

When you create an account we collect your name, business name, email, mobile number and city, and at payment your billing details and tax number if provided. We never store card numbers; online payments go through a payment gateway licensed by the Palestine Monetary Authority and card data does not pass through our servers. While using the system, the business data you enter yourself is stored: products, prices, invoices, stock movements, your customers and your account users.

How we use it

For one core purpose: providing and running the service, including keeping and syncing your records across devices, showing your reports, issuing subscription invoices, sending account notices (trial end, renewal, invoices) and giving technical support when you ask. We may use aggregated, non-identifying data to improve the platform.

No sharing with third parties

We do not sell your data or share it with any party for commercial or non-commercial purposes. We only use technical service providers to run the platform (cloud hosting, email delivery, payment gateway), who are bound to protect the data and not use it for their own purposes. We may disclose data when required by law or a court order.

Your data is yours

The business data you enter remains the property of your business, and you are responsible for collecting it lawfully, including your customers' data. You can export it from the dashboard at any time; it is permanently deleted 30 days after account cancellation.

Security and breach notification

We apply technical and organisational measures: encrypted connections, daily backups and staff access limited to what their duties require. If a breach leads to a leak of consumer data we notify the Ministry of National Economy, the competent authorities and affected users as soon as we become aware of it, per Article 18 of Decree-Law No. 21 of 2025 on e-commerce.

Your rights and contact

You may access, correct and request deletion of your data. For any question or request, email or use the contact page. Data controller: . We may update this policy from time to time and will publish the current version on this page.