1. Data We Collect

We collect data needed to operate, secure, improve, and provide Tijario's core features.

• Account data: name, email address, user ID, and sign-in data through email/password or Google OAuth.
• Store and business data: business name, store WhatsApp number, country, city or general address, currency, Instagram URL, invoice note, sales terms, and store logo if uploaded.
• Customer and business contact data: customer names, WhatsApp numbers, cities, and notes manually added by the user. We do not read the device contact book in the current version.
• Product and service data: names, descriptions, prices, quantities, currencies, and related notes.
• Documents and files data: quotes, invoices, document items, discounts, extra fees, taxes, totals, payment status, generated PDF files, and document history.
• AI data: customer messages or text entered for smart replies, product or service data used for caption generation, and generated AI outputs.
• Subscription and purchase data: active plan, subscription or purchase history through Google Play or supported payment providers, renewal or expiry dates, and plan limits. We do not collect full card numbers or CVV codes.
• App activity data: usage counters, number of documents or AI requests, plan limit status, and operational signals used to enforce subscription limits and improve the service.
• Device or app identifiers: this may include Firebase installation ID, notification token, and Advertising ID where available, for analytics, campaign measurement, and app improvement.
• Support data: messages or attachments you send when requesting support or reporting an issue.

2. Data We Generally Do Not Collect

• We do not collect full payment card details; payments are processed through Google Play or approved payment providers.
• We do not collect credit scores, health data, political or religious data, browsing history, installed apps, SMS/MMS messages, calendar data, or the device contact book in the current version.
• We do not collect videos or audio files. A store logo image may be uploaded only if the user chooses to do so.
• We do not collect sensitive device data such as contacts, SMS messages, precise location, microphone, or camera data in the current version. The Android app may use the Advertising ID through Meta/Facebook SDK for analytics and advertising campaign measurement where available.

3. How We Use Data

• To operate accounts, sign-in, and store settings.
• To create customers, products, services, invoices, quotes, discounts, taxes, and totals.
• To generate PDFs, save documents, and synchronize data between the web and Android app.
• To provide AI features such as smart replies and caption generation based on the input you provide.
• To manage plans, subscriptions, usage limits, and feature access.
• To send operational notifications or important service updates when notifications are enabled.
• To provide support, improve performance, and prevent abuse or fraud.
• To analyze core feature usage and measure app events such as invoice creation, quote creation, customer creation, AI feature usage, and subscription start.
• To measure advertising campaign performance and support attribution or ad optimization through Meta/Facebook where applicable.

4. Data Sharing and Service Providers

We do not sell your personal or business data. We may process data through trusted service providers only to operate Tijario.

• Supabase for authentication, database, storage, and access controls.
• Vercel for web hosting and server-side endpoints.
• Google Play and Google/Firebase for Google sign-in when used, Google Play subscriptions, Firebase Cloud Messaging notifications, and required Android services.
• Meta/Facebook SDK/App Events for app analytics, event measurement, attribution, and advertising campaign performance. This may include app usage events and device identifiers or Advertising ID depending on platform settings.
• AI providers to process text submitted for smart replies and captions and return generated output to your account.
• Payment providers to process subscriptions or payments without us receiving full card details.

5. Security and Encryption

• Data is transmitted through encrypted HTTPS/TLS connections where available.
• We use access controls, permissions, and database-level security rules to reduce unauthorized access.
• No digital service can guarantee absolute security. You must protect your password and avoid sharing account credentials.

6. Retention and Deletion

• We retain data while your account is active or as needed to provide the service, comply with law, prevent fraud, resolve disputes, or maintain billing records.
• You can edit many details from within the app. You may request account and associated data deletion from account settings where available, or by contacting support@tijario.site.
• Some backups or operational logs may remain for a limited period according to technical and legal retention cycles.

7. App Permissions and Notifications

• The app requires internet access for sign-in, synchronization, document creation, subscription processing, and AI features.
• The Android app may request notification permission to send operational notices or important updates. You can manage notifications from your device settings.
• The Android app may include Advertising ID or Ad Services ID permissions for analytics and campaign measurement through measurement providers such as Meta/Facebook.
• Photo selection may be used only when you choose to upload a store logo or similar file.

8. Children and Age Suitability

Tijario is intended for business and professional use and is not directed to children. Users should be legally eligible to use a business, invoicing, and subscription management app.

9. Your Rights and Contact

• You may request access, correction, export, or deletion of your data subject to technical capabilities and legal obligations.
• For privacy, Data Safety, or account deletion questions, contact us at support@tijario.site.