Privacy Policy

1. Information we collect
We may collect account identity and contact details, business profile information, subscription and payment references, user roles, application records, uploaded files, support communications, device and browser data, IP address, session identifiers, security events, usage logs, and cookies required to operate and protect the service. Manual subscription proof may contain payer name, wallet or bank reference, amount, date, and other details visible in the uploaded image or PDF.

2. Business data
Business records entered into TajirPro may include customers, suppliers or Tajirs, products, invoices, purchases, sales, expenses, payments, quotations, leads, staff information, notes, and reports. The customer controls what is entered and is responsible for having a lawful basis to process information about other people.

3. Purposes of processing
We process information to create and secure accounts, provide requested features, calculate reports, verify manual subscription payments, process subscriptions, send OTPs and operational notices, provide support, detect abuse, investigate incidents, maintain backups, improve reliability, comply with law, and establish or defend legal claims.

4. Legal and operational basis
Depending on the context, processing is necessary to perform our contract, protect legitimate security and business interests, comply with legal obligations, or act on consent where consent is required.

5. Sharing and service providers
We do not sell customer business data. We may share the minimum necessary information with vetted hosting, infrastructure, email, communications, payment, security, analytics, professional adviser, and support providers. Payment card numbers, CVVs and wallet PINs should never be entered into or uploaded to TajirPro; hosted payment providers handle those credentials when automatic channels are enabled. We may also disclose information where lawfully required or necessary to protect users, the public, the service, or legal rights.

6. Security safeguards
Safeguards may include HTTPS, password hashing, access controls, role permissions, session management, audit and login logs, rate limiting, backups, monitoring, software updates, and restricted administrative access. No safeguard can provide an absolute guarantee, and users must protect their devices, credentials, and staff permissions.

7. Retention
Information is retained for as long as reasonably needed to provide the service, meet contractual, tax, accounting, fraud prevention, backup, security, dispute, and legal requirements. Backup copies and logs may remain for limited periods after live data is changed or deleted.

8. Account closure and deletion
A verified account owner may request closure or deletion subject to unpaid obligations, legal holds, fraud prevention, backup cycles, and records we must retain by law. Deleting an account may permanently remove access to operational records, so customers should export required data first.

9. Cookies and local storage
Essential cookies and browser storage may be used for authentication, security, preferences, and session continuity. Optional analytics or marketing technologies should only be enabled where configured and legally permitted.

10. International processing
Infrastructure or providers may process information outside the user’s city or country. Where applicable, reasonable contractual and security safeguards will be used, but local legal protections may differ.

11. Your choices and rights
Subject to applicable law and verification, users may request access, correction, export, restriction, objection, or deletion of personal information. Some requests may be limited where data is required for security, contractual, legal, or record-keeping purposes.

12. Children
TajirPro is a business service and is not directed to children. Users must not create accounts for persons who lack legal capacity to enter the applicable agreement.

13. Incident communication
If a confirmed security incident creates a material risk to affected users, we will investigate, contain, document, and notify users or authorities where required by applicable law and reasonably possible.

14. Contact
Privacy questions and verified data requests should be sent through the contact details on the Support page. We may request proof of identity and account authority before acting on a request.