Privacy Policy and Confidentiality of Information
A
A
A
The Salla Platform team welcomes you. Out of our dedication to protecting users, the Salla Platform strives to safeguard the information of merchants, practitioners, and consumers in accordance with the Privacy Policy and Confidentiality of Information mechanism applicable to the Salla Platform. Accordingly, the Salla Platform notes that this document informs you of the Privacy Policy and Confidentiality of Information in effect on the Salla Platform. The Salla Platform has established this “Privacy Policy and Confidentiality of Information” to explain and determine the confidentiality and privacy mechanism applied on the platform. Therefore, please review it, as by using the Salla Platform, all your information is subject to this policy.
Definitions:
(Salla Platform) refers to the platform owned by Salla Information Technology Application Company, and this definition includes all forms of the Salla Platform on the internet, whether it is an application or a website. This phrase also includes the “Mahally Platform” affiliated with the Salla Platform, in all its forms across the internet, whether an application or a website.
(Merchant) refers to any merchant registered on the Salla Platform to set up their online store, whether a natural or legal person. This definition includes all aspects of the store as long as it conducts its commerce via the Salla Platform, including the store's website or application.
(Practitioner) refers to any e-commerce practitioner who registers on the Salla Platform to establish their online store. This definition covers all aspects of the store as long as they conduct their business via the Salla Platform, including the store's website or application.
(Online Store) refers to the store used by the merchant or practitioner on the Salla Platform, and includes the online store's website or application.
(Consumer) refers to every consumer who purchases a product or service from the online stores registered on the Salla Platform.
(User) this term is used to refer to any person who uses the Salla Platform, whether a merchant, practitioner, or consumer.
Information Obtained and Maintained by the Salla Platform in its Electronic Systems:
Consumer Personal Information: such as name, email address, and national ID or residency permit (Iqama) number.
Personal Information of the Merchant or Practitioner: such as name, email address, national ID or residency permit (Iqama) number, and residential address.
Information about the Store and its Legal Entity: such as the Commercial Registration (CR) number and a copy of the CR, or the Freelance Certificate number and a copy of the certificate, and the bank account certificate (IBAN).
Login Credentials for the Online Store: such as username, password, email address, and the password recovery question and its answer.
Salla Platform uses cookies to improve the user experience and provide customized services.
In the event that the user fails to provide the required information, Salla Platform may attempt to obtain it through other sources.
Information Regarding Store Revenues, Goods, or Services:
Salla Platform is continuously aware of store revenues, as the store utilizes payment gateways provided by the Salla Platform.
Salla Platform is aware of the types of goods or services displayed in the store.
Salla Platform monitors store performance in case there is a need to offer support, advice, or guidance to stores to assist them and enhance their performance.
Information of Store Consumers or Merchant Customers:
As Salla Platform strives to improve the experience of stores and enhance the quality of their operations, it constantly reviews the number of store consumers and their purchasing transactions.
This includes consumer orders, invoices, and shipments, abandoned carts, product reviews and the reviewer's name, wishlists, loyalty points and store wallet transactions, account activity such as the last login date, and statistics categorizing consumers by gender and age group.
Information Sharing:
Naturally, Salla Platform seeks to retain this information in a manner that protects user privacy, and Salla Platform only retains this information with the aim of enhancing platform quality, improving the business performance of stores, and facilitating and streamlining services.
As a general rule, all this information can only be accessed by designated Salla Platform personnel after obtaining permission from the Salla Platform management—such authorization is typically specific, limited, and subject to legal and administrative oversight by Salla Platform.
Since Salla Platform seeks to maintain a safe environment for conducting e-commerce, should Salla Platform observe any irregular or illegal activity conducted by a user—pursuant to the articles, clauses, and provisions of the Terms of Service and the Privacy Policy and Confidentiality of Information—it may share any of this information with the competent authorities to take necessary measures against the violating user, in compliance with the rules and provisions of the regulations in force in the Kingdom of Saudi Arabia, including, but not limited to, the E-Commerce Law, the Personal Data Protection Law, and the Anti-Cyber Crime Law.
A merchant or practitioner who initiates the registration of their store on Salla Platform via success partners thereby grants the success partner through whom registration was made the right to access all information pertaining to the store.
Salla Platform notes that unlawful practices by any user may result in their data being shared with official authorities or certain private entities, such as banks.
The user acknowledges and agrees that Salla Platform may use the information provided by them to send marketing communications.
Security Level of User Confidential Information:
Salla Platform seeks to preserve the confidentiality of the platform users' information; however, given that 100% security cannot be guaranteed in (cyberspace), the Salla Platform team highlights the following:
Salla Platform strives to preserve all user information and ensure that no one accesses it in violation of the policy in force on the Salla Platform.
Salla Platform works to safeguard user information through high-quality electronic and technical protection systems that are continuously and periodically updated.
However, since the internet cannot be 100% guaranteed against potential breaches or viruses that may affect the electronic security systems and firewalls applied on the Salla Platform, Salla Platform advises users to maintain their information in strict confidentiality and not disclose any information that they consider highly sensitive, out of Salla Platform's commitment to protecting, guiding, and advising users.
Salla Platform aims to protect the personal data of its users according to the highest standards. In the event of any security breach leading to unauthorized access to or tampering with personal data, the platform is committed to promptly notifying the competent authorities and informing affected users of the breach details, and the platform will take all necessary measures to address the breach.
Strategic and Logistics Services (Third-Party Services):
The user expressly and in advance acknowledges and agrees that, in certain cases, the “Salla” Platform may need to share certain relevant information with third-party strategic or logistics service providers, including—without limitation—shipping companies, payment solution providers, or technical service providers, to enable them to perform tasks or deliver services related to the store or its associated operations.
This information is shared solely to the extent necessary and to achieve the legitimate purpose related to the service, in accordance with the provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia. The platform is committed to ensuring that relevant service providers maintain information confidentiality and use it exclusively for the specified purpose.
Integration with Google Services (Google Shopping API):
As part of the Salla Platform's commitment to providing integrated services for merchants, practitioners, and consumers, the Integration with Google Services feature has been enabled, specifically with the Google Merchant Center platform, aimed at facilitating product synchronization and managing store data in a secure and organized manner.
1. Granting Permission and Access to Data
When the merchant grants explicit permission via the Google-approved authentication mechanism, Salla Platform accesses specific data from the merchant's Google account, including but not limited to:
Product and inventory data registered in Google Shopping (such as product identifiers, prices, descriptions, and quantities).
Relevant Google Merchant Center account settings.
2. Purpose of Data Processing
This data is used solely for the purpose of enabling technical integration between the merchant's store on Salla Platform and their Google Shopping account, including:
Creating, updating, or synchronizing product listings.
Managing connection and authentication between the two systems.
This is done to ensure catalog data consistency between both platforms and to enhance the performance of the online store.
3. Data Protection and Regulatory Compliance
Salla Platform affirms the following:
Google user data is used solely for the purposes specified above, and in a manner that serves the merchant's legitimate interest in improving their online store experience.
Salla Platform does not sell, rent, or transfer this data to any third party for marketing, commercial, or advertising purposes outside the scope of the provided service.
Data is retained for the period necessary to fulfill the purpose of its collection, in accordance with the general Privacy Policy in force on the Salla Platform, or is deleted upon user request, or upon cancellation of the integration or removal of the application.
Salla Platform complies with all provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia and its Implementing Regulations, including applying the necessary security, confidentiality, and privacy standards to protect data when integrating with any external services.
Integration with AI Assistants (Salla AI Connector):
The merchant may connect their store to an AI assistant, such as ChatGPT by OpenAI or Claude by Anthropic, through the Salla AI Connector. The connection is made at the merchant's discretion, as they log in with their Salla account, approve the permissions granted to the assistant, and can revoke the connection at any time from the connector settings within the AI assistant.
Granting Permission and Access to Data
Once the connection is established, the assistant can view store information authorized by the merchant, including products, orders, customers, shipments, and reports. It can also perform modifications requested by the merchant, such as updating a product's price. The AI assistant prompts for the merchant's confirmation before executing changes.Information Shared with the Assistant
When a merchant inquires about a specific order, customer, or cart, the information sent to the assistant may include the consumer's personal data described in this policy, such as name, contact information, delivery address, and map location. For orders paid via bank transfer, the information may include the transfer receipt and the receiving store's bank account, with the account number masked except for the last four digits. Lists and reports typically display consumer names and cities, and contact details are not displayed unless requested by the merchant. Date of birth, gender, and last login date are only sent when requested by the merchant.Information That Is Never Shared
Salla never sends passwords, access tokens, or other credentials, nor does it share full bank account or IBAN numbers, consumers' IP addresses, device data, or usable digital codes. Private links that could allow anyone to open a consumer's order, checkout page, or downloads are never sent, except for the abandoned cart recovery link, order invoice, and its shipping label, which are only sent when the merchant opens that specific cart or order.Purpose, Recipients, and Processing Location
The AI service provider receives this information solely to respond to the merchant's request and processes it in accordance with the agreement entered into between the merchant and that provider. The AI service provider, as well as the infrastructure hosting the connector, may process this information outside the Kingdom of Saudi Arabia. Any transfer or disclosure of personal data outside the Kingdom of Saudi Arabia is carried out in accordance with the applicable requirements of the Personal Data Protection Law in the Kingdom of Saudi Arabia, its Implementing Regulations, and the regulations governing the transfer of personal data outside the Kingdom.Data Retention Period
The connector retains previews of pending changes for a maximum period of 15 minutes, cached report results for a maximum period of 90 days, and connector activity logs, including executed changes, for a maximum period of 12 months, for security, troubleshooting, auditing, and dispute resolution purposes related to those changes. Information received by the AI service provider is retained in accordance with the agreement entered into between the merchant and that provider.Responsibility
The merchant determines what to share through the AI assistant and with which provider. Merchants are responsible for using consumer information obtained in this manner in compliance with their obligations toward their customers.
Users' Rights Regarding Personal Data:
Salla Platform is committed to protecting the privacy of its users and providing clear mechanisms to exercise their rights regarding personal data, including the exercise of the following rights:
Right of Access: The user has the right to access their personal data held by the Salla Platform.
Right to Obtain a Copy: The user can obtain a copy of their personal data that has been collected and processed by the Salla Platform.
Right to Rectification: The user has the right to amend or update their personal data to ensure its accuracy and completeness.
Right to Destruction: The user has the right to request the deletion or destruction of their personal data if it is no longer needed for processing.
Right to Withdraw Consent: The user has the right to withdraw their consent to the processing of their personal data at any time.
Terms and Conditions of Using Salla Platform:
All obligations of Salla Platform, all obligations of users, and all rights arising from the relationship between the user and Salla Platform are (set out in the Terms of Service). Please note that all transactions conducted between the merchant and the consumer are entirely independent of the Salla Platform as an entity, and Salla Platform holds no responsibility for them, as such transactions constitute an independent contractual relationship subject to the agreement entered into between the merchant and the consumer.
These rules constitute the “Privacy Policy and Confidentiality of Information,” established to ensure the credibility and trust that Salla Platform is keen to offer to all users.
For further details regarding the processing of your personal data and how to exercise your rights, you may contact the Personal Data Protection Department at Salla Platform for Information Technology Company using the contact details provided below:
Name: Cyber Security Department
Email: dataprotection@salla.sa
A
A
A
The Salla Platform team welcomes you. Out of our dedication to protecting users, the Salla Platform strives to safeguard the information of merchants, practitioners, and consumers in accordance with the Privacy Policy and Confidentiality of Information mechanism applicable to the Salla Platform. Accordingly, the Salla Platform notes that this document informs you of the Privacy Policy and Confidentiality of Information in effect on the Salla Platform. The Salla Platform has established this “Privacy Policy and Confidentiality of Information” to explain and determine the confidentiality and privacy mechanism applied on the platform. Therefore, please review it, as by using the Salla Platform, all your information is subject to this policy.
Definitions:
(Salla Platform) refers to the platform owned by Salla Information Technology Application Company, and this definition includes all forms of the Salla Platform on the internet, whether it is an application or a website. This phrase also includes the “Mahally Platform” affiliated with the Salla Platform, in all its forms across the internet, whether an application or a website.
(Merchant) refers to any merchant registered on the Salla Platform to set up their online store, whether a natural or legal person. This definition includes all aspects of the store as long as it conducts its commerce via the Salla Platform, including the store's website or application.
(Practitioner) refers to any e-commerce practitioner who registers on the Salla Platform to establish their online store. This definition covers all aspects of the store as long as they conduct their business via the Salla Platform, including the store's website or application.
(Online Store) refers to the store used by the merchant or practitioner on the Salla Platform, and includes the online store's website or application.
(Consumer) refers to every consumer who purchases a product or service from the online stores registered on the Salla Platform.
(User) this term is used to refer to any person who uses the Salla Platform, whether a merchant, practitioner, or consumer.
Information Obtained and Maintained by the Salla Platform in its Electronic Systems:
Consumer Personal Information: such as name, email address, and national ID or residency permit (Iqama) number.
Personal Information of the Merchant or Practitioner: such as name, email address, national ID or residency permit (Iqama) number, and residential address.
Information about the Store and its Legal Entity: such as the Commercial Registration (CR) number and a copy of the CR, or the Freelance Certificate number and a copy of the certificate, and the bank account certificate (IBAN).
Login Credentials for the Online Store: such as username, password, email address, and the password recovery question and its answer.
Salla Platform uses cookies to improve the user experience and provide customized services.
In the event that the user fails to provide the required information, Salla Platform may attempt to obtain it through other sources.
Information Regarding Store Revenues, Goods, or Services:
Salla Platform is continuously aware of store revenues, as the store utilizes payment gateways provided by the Salla Platform.
Salla Platform is aware of the types of goods or services displayed in the store.
Salla Platform monitors store performance in case there is a need to offer support, advice, or guidance to stores to assist them and enhance their performance.
Information of Store Consumers or Merchant Customers:
As Salla Platform strives to improve the experience of stores and enhance the quality of their operations, it constantly reviews the number of store consumers and their purchasing transactions.
This includes consumer orders, invoices, and shipments, abandoned carts, product reviews and the reviewer's name, wishlists, loyalty points and store wallet transactions, account activity such as the last login date, and statistics categorizing consumers by gender and age group.
Information Sharing:
Naturally, Salla Platform seeks to retain this information in a manner that protects user privacy, and Salla Platform only retains this information with the aim of enhancing platform quality, improving the business performance of stores, and facilitating and streamlining services.
As a general rule, all this information can only be accessed by designated Salla Platform personnel after obtaining permission from the Salla Platform management—such authorization is typically specific, limited, and subject to legal and administrative oversight by Salla Platform.
Since Salla Platform seeks to maintain a safe environment for conducting e-commerce, should Salla Platform observe any irregular or illegal activity conducted by a user—pursuant to the articles, clauses, and provisions of the Terms of Service and the Privacy Policy and Confidentiality of Information—it may share any of this information with the competent authorities to take necessary measures against the violating user, in compliance with the rules and provisions of the regulations in force in the Kingdom of Saudi Arabia, including, but not limited to, the E-Commerce Law, the Personal Data Protection Law, and the Anti-Cyber Crime Law.
A merchant or practitioner who initiates the registration of their store on Salla Platform via success partners thereby grants the success partner through whom registration was made the right to access all information pertaining to the store.
Salla Platform notes that unlawful practices by any user may result in their data being shared with official authorities or certain private entities, such as banks.
The user acknowledges and agrees that Salla Platform may use the information provided by them to send marketing communications.
Security Level of User Confidential Information:
Salla Platform seeks to preserve the confidentiality of the platform users' information; however, given that 100% security cannot be guaranteed in (cyberspace), the Salla Platform team highlights the following:
Salla Platform strives to preserve all user information and ensure that no one accesses it in violation of the policy in force on the Salla Platform.
Salla Platform works to safeguard user information through high-quality electronic and technical protection systems that are continuously and periodically updated.
However, since the internet cannot be 100% guaranteed against potential breaches or viruses that may affect the electronic security systems and firewalls applied on the Salla Platform, Salla Platform advises users to maintain their information in strict confidentiality and not disclose any information that they consider highly sensitive, out of Salla Platform's commitment to protecting, guiding, and advising users.
Salla Platform aims to protect the personal data of its users according to the highest standards. In the event of any security breach leading to unauthorized access to or tampering with personal data, the platform is committed to promptly notifying the competent authorities and informing affected users of the breach details, and the platform will take all necessary measures to address the breach.
Strategic and Logistics Services (Third-Party Services):
The user expressly and in advance acknowledges and agrees that, in certain cases, the “Salla” Platform may need to share certain relevant information with third-party strategic or logistics service providers, including—without limitation—shipping companies, payment solution providers, or technical service providers, to enable them to perform tasks or deliver services related to the store or its associated operations.
This information is shared solely to the extent necessary and to achieve the legitimate purpose related to the service, in accordance with the provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia. The platform is committed to ensuring that relevant service providers maintain information confidentiality and use it exclusively for the specified purpose.
Integration with Google Services (Google Shopping API):
As part of the Salla Platform's commitment to providing integrated services for merchants, practitioners, and consumers, the Integration with Google Services feature has been enabled, specifically with the Google Merchant Center platform, aimed at facilitating product synchronization and managing store data in a secure and organized manner.
1. Granting Permission and Access to Data
When the merchant grants explicit permission via the Google-approved authentication mechanism, Salla Platform accesses specific data from the merchant's Google account, including but not limited to:
Product and inventory data registered in Google Shopping (such as product identifiers, prices, descriptions, and quantities).
Relevant Google Merchant Center account settings.
2. Purpose of Data Processing
This data is used solely for the purpose of enabling technical integration between the merchant's store on Salla Platform and their Google Shopping account, including:
Creating, updating, or synchronizing product listings.
Managing connection and authentication between the two systems.
This is done to ensure catalog data consistency between both platforms and to enhance the performance of the online store.
3. Data Protection and Regulatory Compliance
Salla Platform affirms the following:
Google user data is used solely for the purposes specified above, and in a manner that serves the merchant's legitimate interest in improving their online store experience.
Salla Platform does not sell, rent, or transfer this data to any third party for marketing, commercial, or advertising purposes outside the scope of the provided service.
Data is retained for the period necessary to fulfill the purpose of its collection, in accordance with the general Privacy Policy in force on the Salla Platform, or is deleted upon user request, or upon cancellation of the integration or removal of the application.
Salla Platform complies with all provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia and its Implementing Regulations, including applying the necessary security, confidentiality, and privacy standards to protect data when integrating with any external services.
Integration with AI Assistants (Salla AI Connector):
The merchant may connect their store to an AI assistant, such as ChatGPT by OpenAI or Claude by Anthropic, through the Salla AI Connector. The connection is made at the merchant's discretion, as they log in with their Salla account, approve the permissions granted to the assistant, and can revoke the connection at any time from the connector settings within the AI assistant.
Granting Permission and Access to Data
Once the connection is established, the assistant can view store information authorized by the merchant, including products, orders, customers, shipments, and reports. It can also perform modifications requested by the merchant, such as updating a product's price. The AI assistant prompts for the merchant's confirmation before executing changes.Information Shared with the Assistant
When a merchant inquires about a specific order, customer, or cart, the information sent to the assistant may include the consumer's personal data described in this policy, such as name, contact information, delivery address, and map location. For orders paid via bank transfer, the information may include the transfer receipt and the receiving store's bank account, with the account number masked except for the last four digits. Lists and reports typically display consumer names and cities, and contact details are not displayed unless requested by the merchant. Date of birth, gender, and last login date are only sent when requested by the merchant.Information That Is Never Shared
Salla never sends passwords, access tokens, or other credentials, nor does it share full bank account or IBAN numbers, consumers' IP addresses, device data, or usable digital codes. Private links that could allow anyone to open a consumer's order, checkout page, or downloads are never sent, except for the abandoned cart recovery link, order invoice, and its shipping label, which are only sent when the merchant opens that specific cart or order.Purpose, Recipients, and Processing Location
The AI service provider receives this information solely to respond to the merchant's request and processes it in accordance with the agreement entered into between the merchant and that provider. The AI service provider, as well as the infrastructure hosting the connector, may process this information outside the Kingdom of Saudi Arabia. Any transfer or disclosure of personal data outside the Kingdom of Saudi Arabia is carried out in accordance with the applicable requirements of the Personal Data Protection Law in the Kingdom of Saudi Arabia, its Implementing Regulations, and the regulations governing the transfer of personal data outside the Kingdom.Data Retention Period
The connector retains previews of pending changes for a maximum period of 15 minutes, cached report results for a maximum period of 90 days, and connector activity logs, including executed changes, for a maximum period of 12 months, for security, troubleshooting, auditing, and dispute resolution purposes related to those changes. Information received by the AI service provider is retained in accordance with the agreement entered into between the merchant and that provider.Responsibility
The merchant determines what to share through the AI assistant and with which provider. Merchants are responsible for using consumer information obtained in this manner in compliance with their obligations toward their customers.
Users' Rights Regarding Personal Data:
Salla Platform is committed to protecting the privacy of its users and providing clear mechanisms to exercise their rights regarding personal data, including the exercise of the following rights:
Right of Access: The user has the right to access their personal data held by the Salla Platform.
Right to Obtain a Copy: The user can obtain a copy of their personal data that has been collected and processed by the Salla Platform.
Right to Rectification: The user has the right to amend or update their personal data to ensure its accuracy and completeness.
Right to Destruction: The user has the right to request the deletion or destruction of their personal data if it is no longer needed for processing.
Right to Withdraw Consent: The user has the right to withdraw their consent to the processing of their personal data at any time.
Terms and Conditions of Using Salla Platform:
All obligations of Salla Platform, all obligations of users, and all rights arising from the relationship between the user and Salla Platform are (set out in the Terms of Service). Please note that all transactions conducted between the merchant and the consumer are entirely independent of the Salla Platform as an entity, and Salla Platform holds no responsibility for them, as such transactions constitute an independent contractual relationship subject to the agreement entered into between the merchant and the consumer.
These rules constitute the “Privacy Policy and Confidentiality of Information,” established to ensure the credibility and trust that Salla Platform is keen to offer to all users.
For further details regarding the processing of your personal data and how to exercise your rights, you may contact the Personal Data Protection Department at Salla Platform for Information Technology Company using the contact details provided below:
Name: Cyber Security Department
Email: dataprotection@salla.sa
Available in
Saudi Arabia
United Arab Emirates
Kuwait
Qatar
Bahrain
Oman
Salla partners
Resources and support
All rights reserved to Salla Holding Company © 2026
+966 920031659
Mecca, Saudi Arabia
info@salla.sa
Available in
Saudi Arabia
United Arab Emirates
Kuwait
Qatar
Bahrain
Oman
Salla partners
Resources and support
All rights reserved to Salla Holding Company © 2026
+966 920031659
Mecca, Saudi Arabia
info@salla.sa
Available in
Saudi Arabia
United Arab Emirates
Kuwait
Qatar
Bahrain
Oman
Salla partners
Resources and support
All rights reserved to Salla Holding Company © 2026
+966 920031659
Mecca, Saudi Arabia
info@salla.sa