Compliance & hosting in Algeria

At a glance

Hosting in Algeria

The platform runs on servers physically located in Algeria (HOSTARTS · Alger). The following are hosted in Algeria:

• each store’s databases (products, stock, POS sales, orders, customers, suppliers);
• product photos and videos;
• the accounts of merchants and their employees;
• store websites, whether they use a stockili.com subdomain or their own domain name.

The Windows POS software and the Android app synchronise with these same servers.

Protection of personal data

Who is responsible for what

Data processed

• Accounts: name, e-mail, phone, password (stored only in irreversibly hashed form).
• Orders: name, phone, wilaya, commune, delivery address, products ordered.
• POS and management: sales, stock, customers and suppliers entered by the merchant.
• Technical logs: IP address, browser, login dates, for security and fraud prevention.

Purposes and commitments

• Data is used solely to provide the service: online store, POS, delivery, subscription billing, support and security.
• No reselling, no renting of files, no targeted advertising and no profiling by Stockili.
• Only the data that is necessary is collected.
• Access to data is limited to people who need it for the service and who are bound by confidentiality.

Retention periods

• Store data: for the entire duration of the subscription.
• After a store is closed: a final backup is kept for a limited period so that the data can be returned to the merchant, and is then deleted.
• Subscription invoices: for the period required by accounting and tax obligations.
• Technical logs: for a short period, limited to security needs.

Transfers outside Algeria

Store data is stored in Algeria. No personal data is transferred abroad without complying with the conditions of Law 18-07, in particular the authorisation of the National Authority for the Protection of Personal Data (ANPDP).

Optional feature: automatic scanning of supplier invoices sends the photo of the invoice to an artificial intelligence service to read its lines. This feature is only used when the merchant triggers it, and does not involve the store’s customer data.

Advertising tools: if a merchant chooses to enable Meta or TikTok tracking on their store, visit and purchase events (hashed identifiers) are sent to those platforms. Enabling this is the merchant’s decision and responsibility.

Security incident

In the event of a data breach, the merchant concerned is informed without delay, and the competent authorities are notified where required by law.

E-commerce

Law 18-05 requires online merchants to be registered in the trade register, to host their website in Algeria with a “.com.dz” extension, and to inform consumers clearly. Here is what Stockili does and what remains the merchant’s responsibility:

Payment

• Online payment by CIB and Edahabia card via Chargily Pay, an Algerian payment provider connected to the interbank network.
• Card details are entered on the provider’s secure page: no card number is ever seen or stored by Stockili.
• Cash on delivery available for stores.
• Stockili subscriptions billed in Algerian dinars.

Consumer protection & commercial practices

Stockili stores make it possible to display prices, product characteristics, stock availability and terms of sale, in line with consumer information and commercial transparency obligations.

The merchant remains responsible for the conformity, safety and warranty of the products they sell.

Security measures

• Encrypted HTTPS (TLS) connection on all websites and the console.
• Passwords stored with irreversible hashing (bcrypt).
• Two-factor authentication available for administrator accounts.
• A separate database for each store: one merchant’s data is never mixed with another’s.
• Roles and permissions for employees (POS, management, administration).
• Encrypted daily backups, with restore capability.
• Regular security updates for the server and software, firewall and protection against abusive login attempts.

Prevention of information technology offences

• Retention of technical connection data under the conditions laid down by law.
• Cooperation with judicial authorities upon lawful request.
• Prompt removal of reported, manifestly unlawful content and suspension of the stores concerned.

For copyright and counterfeiting, see the legal notice & copyright.

Cookies

Stockili only uses cookies that are necessary for operation: login session, cart, protection against attacks (CSRF) and display preferences. No advertising cookies are set by Stockili.

A merchant may add analytics tools to their store (for example a Meta or TikTok pixel): they are then responsible for them and must inform their customers.

Exercising your rights

Law 18-07 grants you the rights of information, access, rectification and objection regarding your personal data.

• If you are a store’s customer: contact the merchant first (contact details on their store). Stockili helps them respond.
• If you are a merchant or a Stockili user: write to us at noreply@stockili.com. We will reply as soon as possible.
• You may also refer the matter to the National Authority for the Protection of Personal Data (ANPDP).

This page sets out our commitments in plain language; it does not replace the official texts published in the Official Journal of the Algerian Republic.