Privacy Policy

Safi (“Safi”, “we”, “us”) runs mysafi.app, a finance platform that brings an online store’s sales, shipping and advertising data into one profit and loss view.

This policy explains what personal data we collect, why we collect it, how we protect it and the choices you have. It covers our website and the Safi app. If anything here is unclear, write to us at hello@mysafi.app.

Account information. Your name, business name, email address, your Shopify store address, and a password that we store only as a secure hash. If you invite teammates, we store their name, email and role.

Store data you connect. When you connect your accounts, Safi reads:

• From Shopify: orders, refunds, products and stock, and the customer details attached to orders, such as name, phone number, city and delivery address.
• From your shipping company: shipments, delivery status and history, shipping fees, cash collected, and items returned or exchanged.
• From your ad accounts: daily spend and campaign results.

Information you enter. Product and packaging costs, fees, expenses and anything else you add to Safi.

Safi AI. The questions you ask Safi AI and its answers, saved so you can come back to them.

Security and usage data. Sign-ins, the devices signed in to your account, and technical logs we need to keep the service working and secure.

Payments. When you pay for a plan, your payment is handled by our payment provider. We do not store your full card details.

We use your data to:

• Provide Safi: sync your accounts, match orders to shipments, calculate profit and show your reports.
• Answer your questions in Safi AI and prepare its recommendations.
• Keep your account and your team's access secure.
• Reply to you when you contact us, and send messages about your account, billing and important changes.
• Improve Safi, using aggregated information that does not identify you or your customers.
• Send product news and tips, only if you have agreed to receive them. You can unsubscribe at any time.

We do not sell personal data, and we do not use your store’s data to advertise to you or to anyone else.

Your store’s orders include your customers’ personal data. For that data, you decide what is collected and why, and Safi processes it on your behalf, only to provide the service to you.

When a customer asks your Shopify store to see or delete their data, Shopify tells us, and Safi responds to those requests. When you uninstall Safi from your store, Shopify asks us to erase your store’s data, and we do.

To answer a question, Safi AI sends the question and the figures needed to answer it to our AI model provider, Anthropic, which processes them to write the answer. Anthropic does not use this data to train its models.

Conversations with Safi AI are private to the person who had them. Other members of your team cannot read them.

We share data only with the companies that help us run Safi, and only what each one needs:

• Cloudflare, which hosts the Safi app and website.
• Supabase, which hosts our database.
• Anthropic, which powers Safi AI.
• Our payment and email providers, to take payments and send account email.

Each of them processes data under a contract and on our instructions. We may also share data when the law requires it, to protect our users or our service, or as part of a merger or sale of our business, in which case this policy continues to apply.

We protect your data with safeguards built into how Safi works:

• Every connection to Safi is encrypted in transit.
• The keys that connect Safi to your shipping company and ad accounts are encrypted at rest with AES-256.
• Safi only reads from your store, shipping company and ad accounts. It never changes anything in them.
• Everyone on your team has their own login, and roles decide who can see or change what.
• You can see which devices are signed in to your account.

No system is perfectly secure. If we become aware of a breach that affects your data, we will tell you without undue delay and explain what we are doing about it.

Your data is stored on servers in the European Union (Ireland). Our providers may process it in other countries, with safeguards in place to protect it.

We keep your data while your account is open. When you close your account or uninstall Safi from Shopify, we delete your workspace, including your store’s orders and your customers’ details. Copies in our backups are overwritten over time. We may keep limited records, such as invoices, where the law requires us to.

Under Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and other laws that may apply to you, you can ask us to:

• Tell you what personal data we hold about you and give you a copy.
• Correct data that is wrong or incomplete.
• Delete your data.
• Stop or limit a particular use of your data, or withdraw a consent you gave.

Write to hello@mysafi.app from the email address on your account. We may need to confirm your identity before we act on a request.

We use a small number of essential cookies, for example to keep you signed in. We do not use advertising cookies. You can block cookies in your browser, but you will not be able to sign in to Safi without them.

Safi is a business service and is not meant for anyone under 18. We do not knowingly collect data from children.

We may update this policy as Safi changes. We will post the new version here and update the date at the top. If a change is significant, we will also tell you by email or in the app before it takes effect.

Questions or requests about your privacy: hello@mysafi.app, or use the contact page.