--- title: "Privacy Policy | Nasam" description: "How Nasam collects, processes and protects user data, where it is stored, and what rights you have over it." url: https://nasam.co/en/privacy lang: en --- # Privacy Policy Last updated: August 2026 ## About the platform The Nasam platform ("the platform") is a product of Nasam Hub ("Nasam"), registered in the Kingdom of Saudi Arabia (commercial registration no. 1009112338). This policy explains how user data is collected, processed and protected when you use the platform or install its app on a Salla store. ## Data we collect ### Registration data When you create an account we collect your name, email address, mobile number and store name. ### Marketplace connection data When you connect your marketplace accounts (Amazon, noon, Trendyol, Salla), the connection is made over OAuth: you grant the platform access to your account without sharing your password. The resulting API tokens are stored encrypted in our database. Through that connection we read and store your store's data on each marketplace, including: - Products and listings - Orders - Inventory - Prices - Sales performance data ### Usage data Sign-in records and actions taken inside the platform, used to detect technical problems and improve performance. ## Why we collect it We process your data for one purpose: delivering the platform services you subscribed to. That includes syncing inventory and prices across channels, showing orders and product performance, managing your account, and contacting you about the service. The legal basis for processing is contractual necessity to deliver the service, under the Saudi Personal Data Protection Law. ## Sharing data with third parties We do not sell your data and we do not share it for advertising or marketing purposes. We exchange data with the marketplaces (Amazon, noon, Trendyol, Salla) through each platform's APIs, to carry out the operations you ask for — updating inventory and prices, and tracking orders. We use Amazon Web Services (AWS) to host the platform and store data. We may disclose data where required by a judicial order or a request from a competent regulatory authority in the Kingdom of Saudi Arabia. ## AI assistant connections The platform lets you connect an AI assistant — Claude, ChatGPT, or any client that supports remote MCP servers — to your Nasam account. The connection is optional and only ever starts because you asked for it. - You consent to each connection by signing in to Nasam and clicking Allow. - Access is read-only. The assistant reads your Nasam data; it creates, changes and deletes nothing. - What it can read is limited to the brands your account may access, under the same permissions that apply inside the platform. - Marketplace API tokens and passwords never appear in a response, and no customer name, phone number or email address is exposed. - Answers that leave Nasam are processed by whoever operates the assistant, under their own privacy policy. - You can revoke access at any time from Connected apps in Nasam, and it ends automatically when your account is deactivated. ## Where data is stored Data is stored on AWS servers in Frankfurt, Germany. This involves transferring personal data outside the Kingdom of Saudi Arabia. The transfer is made under the Personal Data Protection Law and its implementing regulations, relying on contractual safeguards with AWS and the data protection standards applied in the European Union (GDPR). ## How we protect data We apply the following measures: - Encrypted connections between the user and the platform (HTTPS/TLS) - Encryption at rest through AWS managed encryption services - Encryption of marketplace API tokens in the database - Access permissions scoped to the user's role inside the platform ## Deleting data When you cancel your subscription or remove the app from your Salla store, your data is deleted from our systems automatically and immediately, including access tokens and store data. The exception is anything we are required to retain under the accounting or tax regulations in force in the Kingdom. ## Your rights Under the Personal Data Protection Law, you have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data - Request restriction of processing - Object to processing on legitimate grounds To exercise any of these rights, contact us at the email address below. We respond within 30 days. ## Changes to this policy We may update this policy as needed. Where changes are material, we notify users by email or with a notice inside the platform. ## Contact For any question about this policy or about the protection of your data: Email: general@nasam.co This policy is prepared under the Personal Data Protection Law issued by Royal Decree M/19 dated 9/2/1443H, and its implementing regulations.