What Muazn keeps, and why

Muazn is a point of sale and inventory service for trading-card shops in Saudi Arabia and the Gulf. Shops are our customers. Their customers' details reach us only because a shop types them in at the counter, or a customer types them into the shop's online catalogue. This page says what we hold, what it is for, where it is kept, who sees it, how long it stays, and how to have it corrected or removed.

Version 2026-10-19, dated 19 October 2026. Shop owners agree to this policy when they set up a shop, and we keep a note of the date and the version they agreed to.

Who we are

Muazn runs the service at , the shop app, the phone till and the back office. Write to us at sylloratcg@gmail.com about anything on this page.

What we collect

The shop's details. The shop's name, a few sentences about it, its address, its phone number and whether that number takes calls, WhatsApp messages or both, its email, its country, currency and plan, and its logo if it uploads one. The shop gives these at sign-up and changes them under Settings. We look at them before they go live.
Staff accounts. The name, email address and password of each shop owner and staff member, and what each person may do in the shop. Passwords are kept only in scrambled form by our sign-in provider; we never see them. The shop's owner makes staff sign-ins and can set a staff member's password.
Customers' details, as shops enter them. A name, a mobile number and an email address, when a shop records who it bought from, sold to or traded with, or when a customer leaves them with a basket on the shop's online catalogue. They are kept against that shop's transactions and shown to that shop alone. The online catalogue asks a shop one thing about a number a customer gives: whether it is already one of the shop's customers, yes or no, and nothing else.
Transactions. Every purchase, sale, trade, return and void the shop makes: the cards, the prices, the time, who at the shop made it, and the customer it names. These are the shop's books.
Baskets and basket codes. A basket a customer fills on a shop's online catalogue, its six-letter code, and a random code the page keeps in the customer's browser so that one phone holds one basket at a time at a shop. The code is made by the page, not from anything about the customer, and the basket keeps only a scrambled form of it.
The camera. When staff press Scan, the picture is read on the device: it is turned into a short numeric fingerprint (or, for a barcode, the digits on the box) in the browser, and only that is sent to us to find the matching card. Pictures are not uploaded and are not kept.
What you agreed to. When a shop owner agrees to this policy and to the Terms and conditions, we keep the date and the version of each.
Technical records. Our hosting providers keep ordinary server logs (an address, a time, the page asked for) for security and fault-finding, for a limited period. Each shop has a log of what was done in it and by whom, which its owner and managers can read. There are no advertising trackers, and no analytics from anyone else, in the apps or on this site.
Visits to a shop's online catalogue. When someone opens a shop's online catalogue, the page keeps two random codes in their browser (one for the device, one for the visit) and sends them to us with the page opened, how the visit began (a QR code, our website or a link) and the time, so the shop can count its visits. Nothing about the person, their device or their network address is kept, and the shop's own staff are not counted.

What it is for

Running the service: signing you in, keeping the shop's records, pricing cards, printing labels, producing reports, listing a shop with a live online catalogue on this site, sending the emails the service needs (a sign-up confirmation, a password reset, the note that a shop is approved), invoicing the shop and answering support requests. Nothing is used for advertising. Nothing is sold or rented to anyone.

Where it is kept

Supabase stores the database and runs sign-in, on Amazon Web Services servers in the region the project was set up in. Daily backups are kept, encrypted, for a limited period.
Vercel serves the apps and this website.
Card price data providers receive the identifiers of cards we ask prices for. They never receive any personal detail.
Our email provider carries the emails the service sends. It sees the address an email goes to and what the email says.
Google Play, if you installed the Android app from it, handles the install under its own policy. The app itself is this service and asks for no permission beyond the camera, when you press Scan.

No one else. We hand over data only when the law requires it.

Who sees it

The shop's own team, each person as far as the owner allows: a staff member sees the screens the owner gave them and no other shop's data at all.
Muazn, when a shop asks for help, or to keep the service running and safe.
Customers of a shop see, on its online catalogue and on this site, what the shop chose to show: its name, its words, its address, its phone and how it is reached, its email, and the cards it has in store at its prices. Never another customer's details.

The shop and its customers' details

A shop decides what it records about its customers and why; Muazn keeps those details for the shop and uses them for nothing of its own. A customer who wants their details seen, corrected or removed can ask the shop, which can do it in the app, or ask us directly: we confirm with the shop that recorded them and act within thirty days.

How long

For as long as the shop's account is open, and for a short time afterwards in backups. Server logs are kept for a limited period and then go. A basket that is not brought to the counter expires within minutes and keeps nothing.

Deleting a shop and an account

A shop's owner deletes the shop and their own account in the app: Settings, Your sign-in, Delete the shop and my account. It asks for the owner's password and the shop's exact name, and then deletes everything the shop holds (its stock, sales, purchases, trades, returns, customers, staff accounts, settings, logs and online catalogue) and the owner's sign-in, unless that sign-in also opens another shop. The staff sign-ins the shop made, which open no other shop, go with it. Nothing can be brought back afterwards. We keep only the shop's name, its country and its plan, and the date, so we know the shop existed; nothing about a person.

A staff member's sign-in is the shop's to remove, under Settings, Team. A staff member who wants their sign-in gone can ask the shop's owner, or write to sylloratcg@gmail.com from the address of the account with the subject "Delete my account"; within thirty days the sign-in is removed and the shop's records of sales, purchases and trades stay with the shop, because they are its books, no longer carrying that sign-in.

Your rights

You can ask what we hold about you, have it corrected, have it removed, or object to how it is used, under the Personal Data Protection Law of Saudi Arabia and the data protection laws of the other Gulf countries, whichever applies to you. Write to us at sylloratcg@gmail.com; we answer within thirty days. Muazn is for businesses and is not offered to anyone under 18.

Changes

If this page changes in a way that matters, we tell every shop by email before it takes effect, and the version and date at the top change with it.