Privacy Policy

Safi (“Safi”, “we”, “us”), a product of Own the trend, runs mysafi.app, a finance platform that brings an online store’s sales, shipping and advertising data into one profit and loss view.

This policy explains what personal data we collect, why we collect it, how we protect it and the choices you have. It covers our website and the Safi app. If anything here is unclear, write to us at support@mysafi.app.

Account information. Your name, business name, email address, your Shopify store address, and a password that we store only as a secure hash. If you invite teammates, we store their name, email and role.

Store data you connect. When you connect your accounts, Safi reads:

• From Shopify: orders, refunds, products and stock, and the customer details attached to orders, such as name, phone number, city and delivery address.
• From your shipping company: shipments, delivery status and history, shipping fees, cash collected, and items returned or exchanged.
• From your ad accounts (Meta, TikTok and others): daily spend and campaign results. The details for Meta and TikTok are in their own sections below.

Information you enter. Product and packaging costs, fees, expenses and anything else you add to Safi.

Safi AI. The questions you ask Safi AI and its answers, saved so you can come back to them.

Security and usage data. Sign-ins, the devices signed in to your account, and technical logs we need to keep the service working and secure.

Payments. When you pay for a plan, your payment is handled by our payment provider. We do not store your full card details.

We use your data to:

• Provide Safi: sync your accounts, match orders to shipments, calculate profit and show your reports.
• Answer your questions in Safi AI and prepare its recommendations.
• Keep your account and your team's access secure.
• Reply to you when you contact us, and send messages about your account, billing and important changes.
• Improve Safi, using aggregated information that does not identify you or your customers.
• Send product news and tips, only if you have agreed to receive them. You can unsubscribe at any time.

We do not sell personal data, and we do not use your store’s data to advertise to you or to anyone else.

Your store’s data is stored securely and belongs to you. Inside Safi it is private to your workspace: only you and the teammates you invite can see it, and each teammate sees only what their role allows.

• We never sell your data, rent it out or share it with advertisers.
• Other Safi customers can never see your data, and you can never see theirs.
• Your Safi AI conversations are private to the person who had them, even within your team.
• Safi staff do not look at your store's data as a matter of course. A small number of authorized staff can open your workspace only when you ask us for help, to fix a problem with your account or connections, to keep the service secure, or when the law requires it.
• The service providers listed below process your data only to run Safi for you, and may not use it for anything else.

Your store’s orders include your customers’ personal data. For that data, you decide what is collected and why, and Safi processes it on your behalf, only to provide the service to you.

When a customer asks your Shopify store to see or delete their data, Shopify tells us, and Safi responds to those requests. When you uninstall Safi from your store, Shopify asks us to erase your store’s data, and we do.

When you connect Meta by logging in with Facebook, you choose which ad accounts Safi may read. Safi asks Meta for one permission, ads_read, which is read-only.

• What we read: each ad account's ID, name and currency, and its daily results per campaign: spend, impressions, reach, clicks, link clicks, purchases and their value, add-to-carts and checkouts. We also keep the access token Meta gives us, so Safi can keep these reports up to date.
• What we never do: read personal profiles, posts, friends, messages or Page content, or create, change or pause ads, audiences or budgets.
• Why: to show your real ad spend and return on ad spend next to your orders, delivery costs and returns, on your profit and loss, on the Marketing page and in Safi AI's answers.
• Who sees it: only you and the teammates you invite. We never sell it, share it with advertisers or use it to target ads.
• How it is protected: the access token is encrypted at rest with AES-256, and the reports are stored with the rest of your workspace's data.
• How long we keep it: while Meta stays connected. Removing Meta on the Connections page deletes the token and every ad report imported from it straight away, and deleting your Safi account erases everything.

You can also remove Safi from your Facebook or Business settings at any time. The Data Deletion page explains each way to delete this data.

When you connect TikTok, TikTok’s authorization page lets you choose which ad accounts Safi may read. Safi’s TikTok app asks only for permission to read ad account details and reports; it cannot create or change anything.

• What we read: each ad account's ID, name and currency, and its daily results per campaign: spend, impressions, clicks, and purchases and their value on your website and in TikTok Shop. We also keep the access token TikTok gives us, so Safi can keep these reports up to date.
• What we never do: read your TikTok profile, videos, followers or messages, or create, change or pause campaigns, ads, audiences or budgets.
• Why: to show your real ad spend and return on ad spend next to your orders, delivery costs and returns, on your profit and loss, on the Marketing page and in Safi AI's answers.
• Who sees it: only you and the teammates you invite. We never sell it, share it with advertisers or use it to target ads.
• How it is protected: the access token is encrypted at rest with AES-256, and the reports are stored with the rest of your workspace's data.
• How long we keep it: while TikTok stays connected. Removing TikTok on the Connections page deletes the token and every ad report imported from it straight away, and deleting your Safi account erases everything.

To answer a question, Safi AI sends the question and the figures needed to answer it to our AI model provider, Anthropic, which processes them to write the answer. Anthropic does not use this data to train its models.

Conversations with Safi AI are private to the person who had them. Other members of your team cannot read them.

When you send a voice note, the recording goes to ElevenLabs, which turns it into text. Safi keeps the text, not the recording.

We share data only with the companies that help us run Safi, and only what each one needs:

• Cloudflare, which hosts the Safi app and website.
• Supabase, which hosts our database.
• Anthropic, which powers Safi AI.
• ElevenLabs, which turns voice notes into text.
• Windsor.ai, which reads daily ad results from ad accounts you connect through it.
• Our payment and email providers, to take payments and send account email.

Each of them processes data under a contract and on our instructions. We may also share data when the law requires it, to protect our users or our service, or as part of a merger or sale of our business, in which case this policy continues to apply.

We protect your data with safeguards built into how Safi works:

• Every connection to Safi is encrypted in transit.
• The keys that connect Safi to your shipping company and ad accounts are encrypted at rest with AES-256.
• Safi only reads from your store, shipping company and ad accounts. It never changes anything in them.
• Everyone on your team has their own login, and roles decide who can see or change what.
• You can see which devices are signed in to your account.

No system is perfectly secure. If we become aware of a breach that affects your data, we will tell you without undue delay and explain what we are doing about it.

Your data is stored on servers in the European Union (Ireland). Our providers may process it in other countries, with safeguards in place to protect it.

We keep your data while your account is open. When you close your account or uninstall Safi from Shopify, we delete your workspace, including your store’s orders and your customers’ details. Copies in our backups are overwritten over time. We may keep limited records, such as invoices, where the law requires us to.

Under Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and other laws that may apply to you, you can ask us to:

• Tell you what personal data we hold about you and give you a copy.
• Correct data that is wrong or incomplete.
• Delete your data.
• Stop or limit a particular use of your data, or withdraw a consent you gave.

Write to support@mysafi.app from the email address on your account. We may need to confirm your identity before we act on a request.

We use a small number of essential cookies, for example to keep you signed in. We do not use advertising cookies. You can block cookies in your browser, but you will not be able to sign in to Safi without them.

Safi is a business service and is not meant for anyone under 18. We do not knowingly collect data from children.

We may update this policy as Safi changes. We will post the new version here and update the date at the top. If a change is significant, we will also tell you by email or in the app before it takes effect.

Questions or requests about your privacy: support@mysafi.app, or use the contact page.