Privacy Policy & Data Protection

1. Introduction & Overview

Ribh (Ribh Analytics) ("we," "our," or the "Platform") is committed to protecting the privacy and security of our users and merchants on the Salla platform ("Merchant" or "User").

This Privacy Policy describes how we collect, process, store, and safeguard your data when you use our analytics application connected to your Salla store and advertising accounts across Meta, TikTok, Snapchat, Google Ads, and Pinterest.

2. Information We Collect and Sources

We collect only the analytical data strictly necessary to compute your store’s Profit & Loss (P&L) statements and unit economics:

• Salla Store Data (via Authorized OAuth 2.0): Order numbers, order timestamps, fulfillment status (completed, canceled, refunded), gross order value, product SKUs and quantities, shipping courier assignments, and payment methods (Mada, Credit Card, Tabby, Tamara, Cash on Delivery).
• Ad Platform Data (Meta, TikTok, Snapchat, Google Ads, Pinterest APIs): Daily campaign spend, impressions, clicks, and attributed conversions. We operate strictly with Read-Only permissions and never create, edit, or publish ads.
• Merchant-Provided Financial Inputs: Cost of Goods Sold (COGS) per SKU, fixed monthly operating expenses (rent, payroll, tools), and custom payment gateway negotiated fee rates.
• Account & Support Details: Merchant name, business email, and phone number for authentication, system alerts, and customer support.

3. Purposes of Data Processing

We process collected data exclusively to:

• Calculate real-time net profit per individual order and across the entire store.
• Reconcile Cash-on-Delivery (COD) collections with courier remittance statements to identify uncollected or delayed funds.
• Calculate True Net Return on Ad Spend (Net ROAS) across multi-channel advertising campaigns.
• Deliver automated financial insights on loss-making products and unprofitable campaigns.
• Provide technical customer service and platform performance updates.

4. No Sale or Commercial Sharing of Data

We strictly do not sell, rent, lease, monetize, or share your store data or customer information with any third party for commercial or advertising purposes.

Data is hosted strictly on secure cloud infrastructure providers operating under enterprise-grade encryption and strict access controls.

5. Security, Encryption & Saudi PDPL Compliance

We employ rigorous organizational and technical safeguards:

• End-to-end data transmission encryption via TLS / HTTPS (256-bit SSL).
• Database encryption at rest and token safeguarding using AES-256 standard encryption.
• Full compliance with the Kingdom of Saudi Arabia’s Personal Data Protection Law (Royal Decree No. M/19).
• Restricted system access limited strictly to automated analytic pipelines.

6. Merchant Rights & Data Deletion

Merchants hold the following rights regarding their data at all times:

• Right of Access: Review all synchronized data within the dashboard at any time.
• Right to Export: Download comprehensive accounting reports in standard Excel / CSV formats.
• Right to Erasure (Data Deletion): Disconnect the app from the Salla App Store at any time and request permanent deletion of all stored data by emailing privacy@ribh.sa or support@ribh.sa. Deletions are executed within 48 business hours.

7. Cookies & Session Management

We use strictly necessary functional session cookies to authenticate merchant login sessions and maintain application security. We do not use third-party behavioral tracking cookies.

8. Policy Revisions

We may update this Privacy Policy to reflect regulatory, technical, or legal changes. Registered merchants will be notified of material changes via email or system notification.