Privacy Policy — AlBurhan

Last updated: 18 September 2026

What does AlBurhan collect?

When a merchant installs the AlBurhan app on their store, we access the following through the platform's interfaces (Salla, Zid, or Shopify):

Basic store data: the store ID and name.
Order data: the order status, product name, and delivery date.
Customer data needed to send the review request: the name and mobile number only.
The review the customer writes themselves (a numeric rating, a text comment, optional photos/videos they upload themselves, and an optional voice recording they record themselves).
The merchant's dashboard account data: the email address used to sign in, and the two-step verification setup if enabled.
If the merchant enables review reward points: the customer's points balance and the reward coupons issued to them, linked to the customer's ID on the platform or their mobile number.

Recent purchase notifications

If the store enables this, its visitors may be shown anonymous notifications of recent purchases that include only the product name and the shipping city, without the buyer's name, mobile number, or any other data about them.

Posting your review on the store's social media accounts

Your review is only turned into a card for posting on the store's social media accounts if you tick the separate consent box when writing it. The card shows only your first name and the first letter of your family name, and does not include your mobile number. You can delete your review from the same review link, which deletes its card from AlBurhan; anything the store has already posted on its accounts must be removed by asking the store directly.

If the merchant connects a Facebook Page and an Instagram account to post the cards, we store the page and account IDs, their names, and the posting token encrypted, and we use them only to post review cards the merchant has approved. They are deleted as soon as the connection is removed from the dashboard, or as part of deleting the store's data after uninstalling, and the merchant can also remove AlBurhan's permissions directly from Facebook settings.

Smart review and the size advisor

If the merchant enables smart replies, the review text, its star rating, and the product name — without the customer's name or mobile number — are sent to an artificial intelligence service provider (Anthropic) to suggest a reply to the review and to detect violating content. No reply is published until the merchant has reviewed and approved it.

Photos the customer uploads, and 3 frames from each video, are likewise sent to Anthropic to be checked before publishing, without the customer's name or mobile number. Photos and videos are stored in private storage that no one can access until they are approved, and they are scanned for viruses before that.

The voice recording is optional, and microphone permission is only requested when you press the record button. The recording is converted into a clean audio file without any metadata, scanned for viruses, and stored in the same private storage as photos and videos. The audio is not sent to any artificial intelligence service, is not converted to text, and is not published until the store has listened to it and approved it. You can delete it along with your review and your data at any time from the same review link.

If you enter your height and size when reviewing, they are saved with your review and shown to visitors without your name: the size you took, how it fit and your height range (for example 160–169 cm) rather than your exact height, and aggregated with other buyers' experiences. They are deleted with your review when it is deleted.

Review reads and the smart offer in the store

AlBurhan's widgets in the store count how many times reviews are read, and send AlBurhan anonymous counters only (which review was read and in which widget), without a name, number, tracking cookies, or any visitor identifier.

The store may also enable the “smart offer”: an anonymous analysis of browsing behavior on the page (products opened, time spent, and adding to cart) that runs inside the visitor's own browser to show a suitable discount. These signals are stored only in the visitor's browser (the browser's local storage), and nothing personal is sent from them; AlBurhan receives only an anonymous count (how many sessions fall in each category, and how many offers were shown or had their code copied). They can be cleared by clearing the site's data in the browser.

Sign-up requests from our website

When you fill in the form to join the launch list, we store the name, store name, platform, mobile number, and email (if entered), and we use them only to contact you about activating AlBurhan on your store, after your explicit consent in the form.

How do we use this data?

We use the customer's mobile number solely to send one WhatsApp message asking them to review the product after the order is delivered, and we do not send a reminder after it. We do not use the data for any other marketing purpose, and we do not sell it. We share it only with the technical service providers needed to run the system, and only to the extent each service needs:

Vercel: hosting the website and storing photos, videos, and voice recordings.
Railway: the database and virus scanning of files.
Meta: sending WhatsApp messages through the official WhatsApp Business interface.
Anthropic: smart review of reviews and photos as described above.
Resend: sending dashboard sign-in messages to the merchant's email.
Zid (Qudrah Technology Company): for Zid stores only, it collects the merchant's AlBurhan subscription and, under the partnership agreement, may access and store the data we collect from its stores, to the extent customers consent.

Where the data is stored

The data is stored with the providers above on servers outside the Kingdom of Saudi Arabia, including the United States. Transfers are limited to what is needed to run the service, communications are encrypted, and store connection tokens are stored encrypted.

Data retention period

We keep order and customer data for as long as the merchant's AlBurhan subscription is active. When the app is uninstalled, the store's data is deleted within 30 days, except for reviews actually published on the store's product pages (these remain the merchant's property unless they request their deletion).

Customer rights

Any customer can delete their review, comment and the data linked to the order themselves from the review link they received (“Delete my review and data”), by contacting the merchant, or by emailing us at the address below. When a review is deleted, the store owner is notified that a review of a specific product was deleted, without the customer's name, number or comment text.

To stop review request messages from all stores: press “I don't want review request messages in the future” on the review page, or send the word “STOP” (or “إيقاف”) in reply to our WhatsApp message. We store an encrypted fingerprint of your number that prevents sending to it, not the number itself.

Contact

For any privacy-related inquiry: support@getburhan.com