Privacy Policy — Sanad-POS

Last updated: October 2026

Sanad is a web-based system for managing sales and inventory for retail shops. This policy explains the types of data we process, why, how we protect it, and how you can exercise your rights. It applies to this website and to the Sanad application.

1. Who we are and our role

The service is offered to merchants by subscription. The Sanad team creates shop accounts; there is no self-registration.

• Shop and customer data entered by the shop owner: the owner decides how it is used, and Sanad processes it on the owner's behalf solely to run the service.
• Shop account and subscription data: we decide how it is used.

2. Data we process

• Account and subscription data: shop name, contact details of the owner, and subscription information.
• User data: name, email, phone (optional) and role within the shop. Sign-in credentials are stored securely and never as plain text.
• Operating data entered by the shop: products, stock, sales, returns, suppliers, expenses and related records.
• Shop customers' data (optional): a name and phone number, if the shop records them on an invoice.
• Files users upload: such as product images, logos and complaint attachments.
• Activity logs: for security and accountability within the account.
• Messages you send us: such as complaints and suggestions.

We use no analytics or advertising trackers.

3. Google integration (Google Sheets)

An optional feature that the shop owner turns on personally. It saves a backup copy of the shop's reports to a Google Sheets file inside the owner's own Google account.

• Scope requested: https://www.googleapis.com/auth/drive.file only. It lets Sanad access the file Sanad itself creates and nothing else. We do not read or modify any other file in Google Drive.
• What we write: the shop's report data in one file, updated automatically or on request.
• Protecting access: we store the access permission securely and share it with no one.
• Revoking: you can stop the connection from inside Sanad or from your Google Account permissions page. Our access ends immediately, and the file stays yours.

In line with that: we use Google data only to provide this feature; we do not sell it or use it for advertising; we do not transfer it to anyone except as needed to operate the feature or to comply with law; our team does not read it unless you consent, or for security or legal compliance; and we do not use it to train AI models.

4. Emails

We send email needed to run the service, such as account activation, verification codes and subscription reminders; reports and backups that the shop owner requests or enables; and replies to your messages to us.

5. Backup and restore

The shop owner can download an encrypted backup, or receive one by email if they enable it. A restore happens only after the account owner's identity is verified and explicitly confirmed, and it replaces the shop's data with the backup's contents.

6. Hosting and service providers

We use trusted providers to host the system and database, store files, protect the site and deliver email. They process data only to provide those services to us. Data is hosted within the European Union. We do not sell data or share it for marketing.

7. Browser storage

The app keeps on your device what it needs to work, such as your sign-in session, your preferences, and offline data until it uploads. It does not use this to track you. We do not use advertising or analytics cookies.

8. Security

We apply technical and organizational measures to protect data, including encryption in transit and at rest, secure storage of passwords, separation of each shop's and each branch's data from others, role-based permissions, and ending inactive sessions. No system is 100% secure, but we work continuously to reduce risk.

9. Retention and deletion

• Shop data is kept while the account exists and is not deleted automatically when a subscription expires.
• Whatever is deleted inside the system goes through a recoverable archive period before permanent deletion. When a person's data is permanently deleted, we erase their personal details, and financial records remain without identifying data to preserve their integrity.
• You can ask us to delete your account or data; we delete or anonymize it, except what the law requires us to keep.
• The Google Sheets file and any email you received are outside our control once sent, and you delete them yourself.

10. Compliance

Our processing is guided by Egypt's Personal Data Protection Law No. 151 of 2020. A shop owner must tell their customers what is recorded about them. We provide tools to help the shop comply, including logging security incidents and notifying those affected.

11. Your rights

You may ask to access, correct or delete your data, and withdraw the Google connection at any time. If you are a customer of a shop that uses Sanad, contact that shop first because it decides how your data is used, and we help it carry out your request. For requests about shop accounts and users, write to the address below.

12. Children and changes

The service is for merchants and is not aimed at children. We may update this policy, we show the date of the latest update at the top, and we notify account owners of material changes.

13. Contact

Questions about this policy or your data: [email protected]

Or reach us on: WhatsApp · Facebook · Instagram