Storix privacy policy for merchants and platform visitors

This policy explains how Storix handles the personal data of the visitors and merchants of its platform.

1. Who we are

Storix is a brand and platform operated by Qalam Systems LLC ("Storix", "we", "us"). Storix is operated by Qalam Systems LLC, a company registered in New Mexico, United States. We serve merchants in Egypt first, then the region.

This policy applies where Storix is the controller of the data: when you browse the marketing site, register interest in opening a store, or work in a store's admin, billing, and integrations as a merchant user.

2. Shopper data: Storix processes it for the merchant

For the personal data of shoppers who buy from a store on Storix — names, addresses, phone numbers, and order details — the merchant is the controller and Storix is the processor under Law 151 of 2020. Storix processes this data only on the merchant's instructions, to host the store and run its orders, and protects it with the measures in this policy. Shoppers exercise their data rights with the store they bought from, and Storix assists the merchant when needed.

3. WhatsApp Business messaging

• Merchants can connect their own WhatsApp Business Account to Storix through Meta's Embedded Signup. They choose which WhatsApp assets to share, and they can disconnect at any time from Storix settings or from Meta Business settings.
• When connected, Storix processes the merchant's WhatsApp account details and phone number, their customers' phone numbers, and message content, only to send order confirmations, cash-on-delivery confirmations and shipping updates on the merchant's behalf, and to show customer replies to the merchant inside Storix.
• For these messages the merchant is the controller and Storix is the processor (consistent with section 2). Messages are delivered through Meta's WhatsApp Business Platform (Cloud API).
• We do not sell this data, use it for advertising, or use it for any purpose other than providing the service.
• After a merchant disconnects, we stop accessing their WhatsApp account. Message data is deleted on the schedules in section 9 (platform events, 90–180 days), or earlier on request via support@storix-ai.com.

4. Data we collect

• Account and identity data — name, email, mobile number, national ID or company registration number where required for verification, company name, preferred language, and login identifiers.
• Device and usage data — IP address, device and browser type, pages visited, timestamps, error logs, and security signals used to detect fraud and abuse.
• Billing and subscription data — your plan, invoices, and the payment references returned by the payment provider. Full card numbers are not stored on Storix servers; they stay with the payment provider.
• Support conversations — the messages and files you exchange with support, with the metadata needed to reply.
• Store operational records — your store configuration and the action logs needed to run the service and meet our legal obligations.

5. Why we use your data

• Performance of a contract — running the platform, billing your subscription, and providing support.
• Legal obligation — keeping the records Egyptian law requires and responding to lawful requests.
• Legitimate interest — securing the service, preventing fraud, and essential service notices.
• Consent — optional marketing and analytics beyond the above. You can withdraw consent at any time without affecting the service itself.

We do not sell personal data.

6. Cookies and analytics

The platform uses cookies and similar storage to keep you signed in, remember your language and theme, measure performance, and protect the service. You control the non-essential categories from the cookie banner, and the details of each category and provider are in the Cookie policy.

7. Service providers

We share data with the providers the platform needs:

• Hosting and databases — Oracle Cloud Infrastructure.
• Payments — the payment provider processing platform billing (Stripe).
• Delivery and storage — the CDN and file storage serving the platform (Cloudflare).
• Push notifications — the messaging service delivering merchant notifications (Firebase).
• Email, SMS, and WhatsApp delivery — the providers configured to send your store and account messages.
• Support tooling — the ticketing and chat systems our support team uses.
• WhatsApp messaging — Meta Platforms (WhatsApp Business Platform).
• AI support assistant — Google (Gemini API), used to answer merchant support questions.
• Shipping — the carriers a merchant connects, such as Bosta, which receive the delivery details of that merchant's orders.

Each provider is bound by a written contract to process data only on our instructions. We may also disclose data when an Egyptian authority legally requires it.

8. Where data is processed

Our providers may process data in countries outside Egypt. When that happens, we rely on the safeguards the Egyptian Personal Data Protection Law requires for cross-border transfers.

9. How long we keep data

• Account data — while your account is active, plus a short wind-down period after closure.
• Platform events such as delivery logs and analytics impressions — deleted on fixed schedules, typically 90 to 180 days.
• Erasure requests — executed after approval, with a short grace window for review.
• Tax and commercial records — kept for the periods Egyptian law requires.

10. Security

Access to personal data is limited by role, actions in the admin are logged, and data is encrypted in transit. If a breach affects personal data, we notify the competent authorities and the affected persons as Egyptian law requires.

11. Your rights and how to use them

You can ask to access, correct, delete, or object to the processing of your personal data, and withdraw consent given for optional processing. Use the support channels listed at the bottom of this page; we reply within the timeframes of the Egyptian Personal Data Protection Law. You may also complain to the Personal Data Protection Center.

12. Children

The platform serves businesses and is not directed to children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy; the date of the current version is at the top of the page. Significant changes are announced before they take effect, and continued use means acceptance, to the extent Egyptian law permits.

14. Contact

Questions and requests go through the support channels listed at the bottom of this page.

Email: support@storix-ai.com — Qalam Systems LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA.

15. Signing in with Google or Facebook, and deleting your data

When you sign in or register with Google or Facebook, we receive only your name, your email address, and your account ID with that provider. We do not receive your password, and we never post anything on your behalf.

To delete your data, email support@storix-ai.com from the email address you signed in with, with the subject "Data deletion request". We delete your data within 30 days, except records that Egyptian law requires us to keep, such as invoices.

You can also remove Storix from Facebook: Settings & privacy → Settings → Apps and websites → Storix → Remove.