1. The data we collect
- Account data: name, email address, phone number, photo, password (stored encrypted) and interface language.
- Agent professional data: profile information and the CCP / RIP account details needed for withdrawals.
- Store and connection data: store information and connection tokens for Shopify, YouCan, Lightfunnels, WooCommerce, Google Sheets and delivery companies, stored encrypted.
- Order and store-customer data: customer name, phone number, address and wilaya, products, amounts and order status.
- Call data: the agent app sends the time, duration and outcome of each call, linked to the order concerned.
- Financial data: wallet movements, commissions and withdrawals. Card payments are handled by the payment provider, and we never store card numbers.
- Technical data: IP address, browser and device, sign-in and activity logs, and your push subscription if you enable notifications.
2. Why we use this data
- To run your account and the platform’s services.
- To connect stores with agents, carry out contracts, and calculate commissions and platform fees.
- To confirm orders, send them to the delivery company the seller chose, and follow their status.
- To process wallet top-ups, withdrawals and referrals.
- To protect the platform and its users from fraud and abuse.
- To send notifications about your account and answer support requests.
- To improve the platform using aggregated usage statistics.
3. Store customers’ data
The seller is responsible for the customer data they put on the platform, and must be entitled to collect and use it to confirm and deliver orders. Rassmi processes this data on the seller’s behalf and for that purpose only. Only store team members, according to their permissions, and agents with an active contract with the store can see it.
5. Google user data
Rassmi complies with the Google API Services User Data Policy, including the Limited Use requirements. We use Google Sheets access only to create and update the sheets linked to your store in order to sync orders. We do not transfer, sell or use Google data for advertising, and we never send it to any artificial intelligence model.
7. How long we keep data
We keep your account data while your account is active. When an account is deleted, we delete or anonymise your personal data and keep only what the law requires, such as financial records, for as long as it requires. Sign-in records (IP address and device) are kept for one year to protect the platform from fraud, then deleted.
8. Security
We use an encrypted connection (HTTPS), store passwords and connection tokens encrypted, limit access with permissions, and offer two-factor authentication. No system is 100% secure, and we will tell you if an incident affects your data.
10. Your rights
You can access your data, correct it, object to its processing and ask for it to be deleted. Write to us from the email linked to your account at mail@rassmi.com and we will reply within 30 days. You may also lodge a complaint with the National Authority for the Protection of Personal Data.
11. Changes
We may update this policy when the platform or the law changes. We will change the date above and let you know in the platform about any important change.
A question about this document? Write to us at mail@rassmi.com
6. Signing in with Facebook or Google
When you sign in with Facebook or Google, we only receive your name, email and photo to create or link your account. We never post anything on your behalf. The Data deletion page explains how to erase this data.