Privacy Policy

Finxa Commerce ("Finxa", "we", "us") is an e-commerce platform operated by Finxa W.L.L, a company registered in the Kingdom of Bahrain. This policy explains what data we collect, why we collect it, and the choices you have. It covers our platform website, the merchant dashboard, the point-of-sale app, and the storefronts we host for merchants.

Two roles: our merchants and their customers

For merchants (people who create a Finxa account and run a store), Finxa is the data controller of your account information. For shoppers (people who buy from a store hosted on Finxa), the merchant you buy from is the controller of your order data — Finxa processes it on the merchant's behalf to run their store. If you are a shopper with a question about your data, contact the store you bought from first; we help merchants fulfil such requests.

What we collect

• Merchant account data — name, email address and sign-in credentials, handled by our authentication provider (Clerk). We never see or store your password.
• Store data — products, orders, customers, discounts, pages, theme settings and anything else a merchant adds to their store.
• Shopper order data — name, email, phone number, delivery address and order contents, collected at checkout on a merchant's storefront and processed for that merchant.
• Payment data — payments are processed by the payment provider the merchant has connected (such as Tap Payments, Stripe, PayPal or Checkout.com). Card numbers go directly to that provider; Finxa never stores full card details.
• Usage data — storefront analytics for merchants (page views, sessions, approximate country derived from IP) and basic analytics on our own website (Google Analytics). Abandoned-checkout details a shopper enters may be used to send cart-recovery emails on the merchant's behalf.

What we use it for

• Providing and improving the platform — hosting storefronts, processing orders, sending order emails.
• Showing merchants analytics about their own stores.
• Transactional email (order confirmations, shipping updates, cart recovery) sent via Postmark.
• Support, fraud prevention, and keeping the platform secure.

We do not sell personal data, and we do not use shopper data to advertise to shoppers.

Service providers

We rely on a small set of processors to run the platform: hosting infrastructure in the EU (Hetzner), Cloudflare (DNS, CDN and DDoS protection), Clerk (authentication), Postmark (email delivery), Amazon Web Services (file and image storage), Google Analytics (website analytics) and the payment providers a merchant connects. Each processes data only as needed to provide their service.

Retention and your rights

• Merchant data is kept while the account is active and deleted on verified request when it closes.
• Order data is kept as long as the merchant's store needs it (and as commercial law requires).
• Abandoned-checkout records are deleted automatically after three months.
• Merchants can export their products, customers and orders as CSV at any time, and can ask us to delete their account and data at [email protected].
• You may request access to, correction of, or deletion of your personal data at the same address.

Cookies

We use cookies that are necessary for the platform to work (sign-in sessions, carts, language and market selection) and analytics cookies on our own website. Storefronts use functional cookies for the cart and the shopper's market/language choice; merchants may additionally enable their own analytics (such as GA4 or Meta Pixel) on their storefront, which is disclosed in that store's own policy.

Security

All traffic is encrypted with TLS, data is stored on servers with restricted access, and payment credentials merchants connect are used only to process their payments. No system is perfectly secure; if we learn of a breach affecting your data we will notify affected users without undue delay.

Contact

Finxa W.L.L, Kingdom of Bahrain · [email protected]. We may update this policy; material changes will be announced on this page with a new date.