Privacy

Who is responsible for your data

Menara is an independent verification service for e-commerce brands: we reconcile what ad platforms report against what your store actually recorded. For information you give us directly (booking details, emails, questions), Menara is the data controller. For the business data you connect to the service (ad-platform reports, store orders, analytics), you remain the controller and Menara acts as a processor, handling that data only on your documented instructions.

What we collect

Contact and identity details (name, email, phone number, company, and role) when you book a call (via cal.com) or write to us.

Technical data: IP address, browser and operating system, timestamps, pages visited, and cookies or similar identifiers.

Connected business data: with your authorization, read-only access to ad-platform reports (Meta, Snapchat, TikTok, Google), store orders (Salla, Zid, or Shopify), analytics (GA4), and spreadsheets. Connections run through Windsor.ai using OAuth access tokens; we never see, ask for, or store your passwords.

How we use it

We use this information to deliver the verification service: building your dashboard, reconciling platform claims against your actual orders, and answering your questions within one business day. We also use it to operate and secure the service, prevent fraud, meet legal obligations, and, only with your consent, send you marketing. We never sell, rent, or distribute personal information, and we do not send spam.

Who we share it with

Your data is never sold. We share it only with trusted service providers who process it on our behalf under confidentiality and data-processing terms: Windsor.ai (data connections), cal.com (scheduling), and our hosting providers. We may also disclose information where the law requires it, or as part of a business transfer such as an acquisition, in which case we will notify you.

Storage and security

We apply industry-standard technical, organizational, and physical safeguards. All platform connections are read-only, and you can revoke any access token at any time from the platform side. Data may be stored on servers in Saudi Arabia or in other countries, always with appropriate safeguards as required by PDPL and GDPR. You are responsible for keeping your own account credentials safe.

Retention

We keep personal information only as long as the purpose requires or the law mandates, then securely destroy it or irreversibly de-identify it. Data from your connected sources is deleted or de-identified when your engagement ends, unless you ask us to keep the record.

Your rights

Under PDPL and GDPR you can request access to your data, correct or update it, delete it, withdraw consent, object to processing, request a portable copy, and unsubscribe from marketing at any time. We may need to verify your identity first. We respond to requests within 30 days. Write to [email protected]. You also have the right to complain to the Saudi Data & AI Authority (SDAIA) or to your EU supervisory authority.

Cookies

We use first-party cookies for preferences such as language, and analytics cookies to understand how the site is used. You can control or disable cookies in your browser; some features may not work fully without them.

Minors

The service is intended for users aged 18 and over. If we learn that we hold a minor's personal data, we delete it immediately.

Changes to this policy

We may update this policy from time to time. The current version is always posted on this page with its date. Please review it periodically.

Contact

For privacy questions, requests, or complaints, email [email protected]. To book a call, use our calendar at cal.com.