Privacy Policy

Margin is run by Abdullah Mostafa Zaki, Cairo, Egypt. This policy explains what Margin collects, who processes it for us, and what you can ask us to do with it. Contact: support@marginegy.com.

Information We Collect:

• Account: name, email, Egyptian phone number, and a password (stored hashed) or your Google sign in.
• Workspace: brand name, settings and shipping cost.
• Transactions: amounts, dates, categories and notes, from you, the AI features, Shopify and Bosta.
• Shopify orders: order number, totals, line items, payment method, customer city and Shopify customer id, from the webhooks you set up.
• Raw Shopify webhook deliveries: these include your customers' names, phones and addresses. Kept 60 days, then deleted.
• Bosta: delivery status and fees, and your Bosta login tokens (not your password), after you connect.
• Uploaded receipts and screenshots: these can show other people's names and bank details.
• Voice notes: sent for transcription; we don't store the audio.
• Payment requests: plan, amount and whether you paid by InstaPay or Telda. The receipt itself is sent to us on WhatsApp, not stored in Margin.
• Usage analytics: pages and features used, tied to your email and name.

We don't collect card or bank account details.

Who Processes It for Us:

• Supabase: our database.
• Vercel: hosting.
• Groq: the AI that reads text, receipts and spreadsheets and writes reports. It runs open models (OpenAI gpt-oss, Qwen) on Groq's servers. See Groq's privacy policy and how it handles API data.
• Deepgram: voice note transcription. See Deepgram's privacy policy.
• UploadThing: stores receipt images.
• PostHog (EU hosting): product analytics.
• Google: sign in with Google.
• Resend and Google (Gmail): sending our emails.
• Shopify and Bosta: the integrations you connect.

How We Use Your Information:

• To run the service: record and categorise transactions, sync orders, calculate profit and returns, and write reports.
• To send account and billing emails, and to support you.

Margin does not train AI models on your data, and we don't sell your data. What Groq and Deepgram do with the data they process for us is set out in their own policies, linked above.

Data Security:

Data is stored with Supabase, which encrypts it at rest, and travels over HTTPS. Your Shopify webhook secret and Bosta tokens are stored in our database but are not yet separately encrypted by Margin.

How Long We Keep It:

Raw Shopify webhook deliveries are kept 60 days. Everything else is kept while your workspace exists. Our backups are kept up to 30 days.

Your Choices:

You can export your transactions from the Transactions page at any time. To have your workspace and account deleted, write to support@marginegy.com and we will handle your request.

Your Customers' Data:

When you connect Shopify, Margin receives personal data about your customers. You are responsible for having a basis to share it; we use it only to run Margin for you.

Changes:

We'll email you before material changes to this policy take effect. Questions: support@marginegy.com.