1. Scope

This Privacy Policy applies to personal data processed by Pocket Studios while operating Mashroo3 for merchant workspaces.

2. Data Roles

In merchant workspace operations, Pocket Studios acts primarily as a data processor. The merchant customer (shop owner/business) acts as the data controller for end-customer records they upload or manage through Mashroo3.

Merchants are responsible for lawful collection and use of their customer data, including consent and legal basis where required.

3. Data Categories Processed

• Merchant account and workspace data (name, email, billing/admin data).
• Operational data (orders, invoices, stock, payments, delivery records).
• End-customer data entered by merchants (e.g., names, phone numbers, delivery addresses, order details).
• Usage, logs, and technical telemetry required for service security and reliability.

4. Third-Party Sharing and Processors

To operate Mashroo3, data may be shared with integrated service providers, including:

• Wakilni for shipping and delivery execution.
• Twilio / WhatsApp-related providers for messaging and transactional communication workflows.
• Cloud infrastructure and hosting providers required for data storage, compute, and platform operations.

We share only data reasonably required for the requested operational function.

5. Data Security and Non-Sale Commitment

Pocket Studios implements reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, loss, or misuse.

Pocket Studios does not sell merchant customer lists to competing shops, marketing agencies, or unrelated commercial buyers.

6. Legal and Regulatory Context

Mashroo3 data processing is aligned with Lebanese legal obligations, including Law 81/2018 relating to electronic transactions and personal data. Where merchants serve customers in jurisdictions such as the EEA/UK, merchants remain responsible for controller obligations under GDPR and related privacy frameworks.

7. Retention and Deletion

Retention and deletion behavior for cancelled subscriptions is described in the Refund & Cancellation Policy. For current policy terms, account cancellation ends access immediately and data is deleted immediately.

8. International Transfers

Data may be processed in jurisdictions where our service providers operate. Pocket Studios uses commercially reasonable safeguards for processor management and secure operations.

9. Data Subject and Merchant Requests

Merchants may contact us for privacy requests, data processing questions, or deletion/export coordination at [email protected].

10. Related Policies

This Privacy Policy should be read with the Terms of Service, Acceptable Use Policy, and Refund & Cancellation Policy.

11. Version

Current legal version reference: 2026-04.