Privacy policy

At a glance

Hosted in AlgeriaServers in Algiers with HOSTARTS · Alger. Databases, photos, orders: everything stays in Algeria.

Law 18-07Personal data protected, never resold, no targeted advertising.

HTTPS everywhereEncrypted connection on stockili.com, its subdomains and custom domains.

Accounts: name, e-mail, phone, password (stored only in irreversibly hashed form).
Orders: name, phone, wilaya, commune, delivery address, products ordered.
POS and management: sales, stock, customers and suppliers entered by the merchant.
Technical logs: IP address, browser, login dates, for security and fraud prevention.
Sign-up: landing page and referring site of the visit (search engine, social network, link), to understand how the service is discovered.

For a store’s customers, the data controller is the merchant; Stockili acts as a processor. Details are on the Compliance & hosting in Algeria page.

The mobile app is reserved for merchants and their employees who have an account. It does not allow creating an account.

Camera: scan barcodes, take photos of products and supplier invoices. Images are only sent when you save them.
Photos and microphone: choose photos or record product videos, only when you ask.
Notifications: a notification identifier (Google Firebase Cloud Messaging) lets us alert you about new orders. You can turn them off in your phone settings.
Device: a random identifier specific to the app is used to secure your session and sync stock.
On the phone: the sign-in token is kept in the device’s encrypted storage.

The app does not collect your location, contacts or text messages, and contains no ads or advertising trackers.

Data is used solely to provide the service: online store, POS, delivery, subscription billing, support and security.
No reselling, no renting of files, no targeted advertising and no profiling by Stockili.
Only the data that is necessary is collected.
Access to data is limited to people who need it for the service and who are bound by confidentiality.

Data is only shared with providers needed for the service, and only for that service:

HOSTARTS · Alger — hosting of the servers in Algeria.
Chargily Pay — CIB and Edahabia card payments. No card data is held by Stockili.
Delivery companies — recipient’s name, phone and address, when the merchant ships a parcel.
Google Firebase — delivery of notifications to the mobile app.
Artificial intelligence service — reading supplier invoices, only when the merchant starts a scan.

Store data: for the entire duration of the subscription.
After a store is closed: a final backup is kept for a limited period so that the data can be returned to the merchant, and is then deleted.
Subscription invoices: for the period required by accounting and tax obligations.
Technical logs: for a short period, limited to security needs.

Merchant: request the closure of your store by writing to noreply@stockili.com from the account’s address. The store, its database, its photos and the employee accounts are deleted.
Employee: ask the store manager to remove your access, or write to us.
Subscription invoices are kept for accounting obligations; any final backup is deleted at the end of the return period.

Law 18-07 grants you the rights of information, access, rectification and objection regarding your personal data.

If you are a store’s customer: contact the merchant first (contact details on their store). Stockili helps them respond.
If you are a merchant or a Stockili user: write to us at noreply@stockili.com. We will reply as soon as possible.
You may also refer the matter to the National Authority for the Protection of Personal Data (ANPDP).

The service is intended for professionals and not for people under 18. Any change to this policy is published on this page with its update date.