Privacy Policy

Who we are

BeatShell is a platform for running an organization and its branches: operations, cash, staff, inventory, sales, and loyalty.

For anything related to privacy: support@beatshell.com

What we collect

Account data: your email, your name if you provide it, and your mobile number if you enable verification.

Organization data: the organization, its branches and staff, and the sales, inventory, closings and settlements it enters.

Loyalty customer data: mobile number, member code and point balance — entered by the organization and belonging to it.

Technical data: sign-in records, IP address and browser type, used for security and fault detection, not for ad tracking.

We never collect card details: they go straight to the payment gateway and never reach our servers.

Why we collect it

To run the service you subscribed to, to protect accounts from compromise and abuse, to send operational notifications about your account, and to meet legal obligations such as retaining financial records.

We do not sell your data, do not share it for advertising, and do not use it to train AI models.

Who it is shared with

Service providers acting on our behalf, only as far as the service requires: database and authentication hosting (Supabase), delivery and protection network (Cloudflare), email delivery, the SMS provider, the payment processor (Digitelz Labs, through the Tap gateway), and error monitoring.

And with competent authorities where Saudi law in force requires it.

Where it is stored

Data is stored in a data centre inside the European Union (Frankfurt), with our hosting provider Supabase.

This means your personal data is transferred to and processed outside the Kingdom. We state it plainly here so you know before you subscribe.

How long we keep it

We keep organization data while its subscription is active. After an account closes, data is deleted within a reasonable period, except what must be retained by law (such as financial records) or what has been stripped of identity for statistics.

Audit records remain after deletion with personal values emptied: what happened and when remains; who did it does not.

Your rights

You may access your data, correct it, request its deletion, and withdraw consent where consent was the basis.

An owner can delete their organization from inside the platform, which erases its data permanently.

For any other request: support@beatshell.com

Cookies

We use only cookies necessary to run your session and remember your language and theme. No advertising trackers and no sharing with ad networks.

Security

Data is encrypted in transit, access is restricted by rules enforced in the database itself rather than in the interface alone, and admin accounts require two-factor authentication.

No system is without risk: if a breach affects your personal data, we will notify you and the competent authority as the law requires.

Google data (Najm service)

When an organization connects its Google Business Profile to Najm, we request the business management permission (business.manage) with the account holder's explicit consent on Google's screen.

We use this permission for two things only: reading the organization's locations and reviews, and posting the organization's replies to reviews using the wording it chooses. We do not change any other profile data.

We do not sell or share Google data with anyone, and we do not use it for advertising or to train AI models. BeatShell's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The account holder can disconnect at any time from the Najm page in BeatShell or from their Google account settings (myaccount.google.com/permissions); we then stop accessing the data and delete the stored access tokens.

Children

The service is aimed at organizations and their staff, not at anyone under eighteen.

Changes to this policy

We may update this policy; the last updated date appears at the top of the page. We will notify account holders of material changes before they take effect.