Privacy Policy

Last Updated: May 2026

1. Introduction

Hadaya (gethadaya.com) is a gift wrapping service for Salla e-commerce store owners in the MENA region, operated by fractal code. In this policy, "we," "our," or "us" refers to fractal code as the operator of Hadaya. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Store name, email address, and Salla store credentials when you connect your store.
• Business Information: Store domain, subscription preferences, and widget configuration settings.
• Gift Order Data: Customer names, gift messages, wrapping paper selections, and order details processed through your store.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with our dashboard.
• Device Information: Browser type, operating system, and device identifiers.
• Log Data: IP addresses, access times, and referring URLs.

2.3 Information from Third Parties

• Salla Platform: We receive store information and order data through Salla's OAuth integration and webhooks.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our gift wrapping service
• Process and display gift orders in your dashboard
• Configure and deliver the gift wrapping widget on your store
• Communicate with you about your account and service updates
• Improve our services and develop new features
• Ensure the security and integrity of our platform
• Comply with legal obligations

4. Data Storage and Security

4.1 Storage Location

Your data is stored on secure servers provided by Supabase, with data centers located in regions that comply with applicable data protection regulations.

4.2 Security Measures

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication mechanisms
• Secure API key management

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

5.1 Service Providers

• Salla: For authentication and order processing integration
• Supabase: For database and authentication services
• Vercel: For hosting and content delivery

5.2 Legal Requirements

We may disclose information when required by law, legal process, or to protect the rights, property, or safety of our users or others.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination:

• Account data is deleted within 30 days
• Order history may be retained for legal and accounting purposes
• Anonymized analytics data may be retained indefinitely

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the email provided below.

8. International Data Transfers

If you are located outside the region where our servers are located, your information may be transferred to and processed in other countries. We ensure appropriate safeguards are in place to protect your data.

9. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: hi@fractalcode.dev

---

This privacy policy is provided for informational purposes and should be reviewed by legal counsel before use.