Privacy Policy

Depending on the features you use, Al Tijar may process:

• Account and profile details: your phone number, optional email, and profile information you choose to provide, such as name, photo, bio, city, area, and gender.
• Content and activity: listings and their descriptions, categories, prices, locations, images, documents and contact details; applications, saved items, event RSVPs, reviews, reports, and messages you send to other members.
• Verification information: the verification level you request, your submitted name, contact details and notes, supporting documents, and the decision and review records.
• Support requests: the name, email address, subject, and message you submit through Contact Us.
• Optional marketing preferences: the channels you choose to receive community and business updates through. If you are an outside business or partner contact, authorized staff may also record your contact details and how you gave permission to receive those updates.
• If you enable push notifications, we store your browser’s Firebase push token with your account so Firebase Cloud Messaging can deliver account and activity alerts to that device.
• Service and security records: hashed sign-in codes and session tokens, session expiry, rate-limit counters, and administrative records needed to secure the service and investigate misuse.
• Location information: the location you add to a listing, search coordinates you enter, or device coordinates you choose to share for nearby-place results.
• If you enable optional analytics, Al Tijar stores normalized page paths, broad referrer sources, and one-way hashes of random browser and daily session identifiers to estimate traffic. It does not store IP addresses or account IDs in page-view records. If Google Analytics is configured, it also receives page-view events after you opt in.

• To create and secure accounts, sign you in, and provide the features you request.
• To publish and manage listings, help members discover posts, and support applications and conversations.
• To review verification requests and apply eligibility rules, including women-only opportunities.
• Your gender setting is used only for eligibility checks on women-only opportunities and is not shown on your public profile.
• To respond to support requests, moderate content, investigate reports, and prevent fraud or abuse.
• To manage business and community-partner relationships, follow-up tasks, and campaigns sent only through channels you opted into.
• To understand site usage when you choose to enable optional analytics.

Al Tijar is a community marketplace. Information you submit for a public listing—including its description, location, photos, and any contact details you choose to include—may be visible to visitors and other members. Messages are visible to the people in that conversation. Authorized staff may review relevant content when handling verification, safety, moderation, or support matters. Verification documents are stored privately and are available only to authorized reviewers.

We do not sell personal data. We share only what is needed with service providers that help us operate Al Tijar, such as hosting and database providers, private file storage, and the provider configured to deliver sign-in codes by SMS (APITXT, MSG91, or Twilio). Contact Us messages may be sent through Resend when that service is configured.

If you opt in to marketing, the selected message and contact details needed to deliver it are shared with the configured provider for that channel: Resend for email, or APITxT or Twilio for SMS and WhatsApp. Sign-in codes and account-related notices are separate from marketing preferences. You can change your choices at any time from Account → Communication preferences or by using the unsubscribe link in a message.

If you turn on push notifications, Firebase Cloud Messaging receives the push token and the alert content needed to deliver account and activity notifications. You can turn push off at any time under Account → Communication preferences; browser notification settings can also block delivery.

When you choose device-based nearby results, your coordinates are sent to Al Tijar to find a location label and nearby places; that lookup uses OpenStreetMap Nominatim. If Google Places is configured and you use place search, your search text and any location bias you provide are sent to Google. Map tiles may also be loaded from the map provider shown in the feature. Optional analytics data is sent to Google Analytics only after you opt in and only when analytics is configured.

We may also disclose information when required by law, or when necessary to protect members, the service, or someone’s safety.

On your first visit, the browser may ask whether to share your device location. If you dismiss the prompt, the app uses the default city and won’t automatically prompt again; you can request location later from the location control. If permission is already granted, the app can use it without another prompt. The app caches an obtained point in your browser for up to 24 hours; you can clear it by clearing site data or changing your browser permission. Cookie preferences and small display preferences are also stored in your browser. See our Cookie Policy.

We keep personal data while it is needed to provide the service, maintain account security, handle safety issues, resolve disputes, and meet legal obligations. Sign-in codes expire quickly and are stored as hashes; session tokens are stored as hashes and expire or can be revoked. Verification records and moderation records may be retained when needed for trust and safety or legal reasons. You can ask us to delete your account and associated content through Contact Us. We may need to verify your identity and may retain limited records where the law or a legitimate safety need requires it.

You can update profile and listing information through the available account tools, change your analytics choice using Cookie Preferences in the footer, and manage device-location permission in your browser. Manage optional marketing channels from Account → Communication preferences. You may also contact us to ask what personal data we hold about you, request a correction or deletion, withdraw consent where consent is the basis for processing, or raise a privacy concern. We may ask you to confirm account ownership before acting on a request.

Use the Contact Us form for privacy requests or grievances. Please do not send passwords or one-time sign-in codes.

If you are a parent or guardian and believe a child has provided personal data to Al Tijar, please contact us through the Contact Us form so we can review the request and take appropriate action under applicable law.

We use access controls and security measures designed to protect personal data, but no online service can guarantee absolute security. We may update this policy as the service or legal requirements change. The latest version will be published on this page.

• We do not sell personal data or provide phone numbers to advertisers.
• We do not load optional analytics or advertising scripts before you opt in to analytics.