Massar — Privacy Policy

Last updated: October 6, 2026

Massar (“the App”) is operated by Massar, a fulfillment, warehousing and local-delivery company in Egypt. The App connects a merchant’s Shopify store to Massar so that the merchant’s orders can be picked up or fulfilled and delivered. This policy describes what information the App receives, how it is used, who it is shared with, and the rights of merchants and their customers.

Information we collect

When a merchant installs the App and links it to their Massar brand, we receive the following through Shopify’s APIs and order webhooks:

• Order information: Shopify order ID and number, line items (product, variant and SKU identifiers, titles, quantities, prices and weights), order totals and outstanding balance, currency, payment and fulfillment status, tags, timestamps and cancellation details.
• Customer delivery and contact information: recipient name, shipping address (and the billing address when no shipping address is given), phone number, email address and the order note.
• Store information: shop domain and name, and the access permissions the merchant granted. For brands that use Massar’s warehouse and opt in to inventory sync, product, variant and location identifiers and inventory quantities.

We do not receive payment card details, and the App does not track browsing behavior.

How we use the information

• Creating and updating the delivery order in Massar, and printing waybills.
• Picking, packing and last-mile delivery to the customer’s address.
• Contacting the customer about their delivery (calls, SMS or WhatsApp messages about the order and its delivery status).
• Collecting cash on delivery and reconciling merchant payouts.
• Updating the Shopify order with fulfillment and tracking information, and (when enabled) keeping Shopify inventory in step with warehouse stock.

We do not sell or rent personal information, and we do not use it for advertising.

Who we share it with

We share personal information only with the service providers needed to run the service, each receiving only what its task requires:

• Render (hosting and database, EU region) stores and processes all App data.
• Delivery partners: when an order is assigned to a partner carrier in Egypt (for example Enjad, Meem Express or Track Express), the recipient name, address, phone number, items and cash-on-delivery amount are sent to that carrier to deliver the order.
• Meta (WhatsApp Business Platform) delivers order and delivery-status messages to the customer’s phone number and carries the customer’s replies.
• Anthropic (Claude AI) processes delivery addresses and customer WhatsApp messages to interpret addresses and assist with delivery questions. It is not used to train AI models on this data.
• Google Firebase sends notifications about assigned deliveries to Massar staff and couriers.

Orders placed in Shopify development (test) stores are never sent to delivery partners, and no customer messages are sent for them.

Data retention and deletion

Order and delivery records are kept while the merchant uses Massar and afterwards as needed for delivery disputes, accounting and legal obligations. Database backups held by our hosting provider roll over on a short cycle. We honor Shopify’s mandatory privacy webhooks:

• customers/redact removes the customer’s name, contact details, addresses, delivery evidence and order-related messages from their orders, keeping only the financial figures required for bookkeeping, and stops later webhooks from restoring them.
• customers/data_request prepares a copy of the customer’s data for the merchant.
• shop/redact, sent after a merchant uninstalls, removes the store’s customer personal data and its access token.

Uninstalling the App immediately stops order sync and revokes our access to the store.

Security

All data is transmitted over HTTPS. Webhooks are verified using Shopify’s HMAC signatures, Shopify access tokens are never sent to the browser, and access to Massar systems is restricted to authenticated staff with role-based permissions. Each merchant account can see only its own orders.

Your rights

Merchants and their customers may request access to, correction of, or deletion of personal data we hold. Customers can make a request through the merchant (which triggers the Shopify privacy webhooks above) or by contacting us directly.

Contact

For privacy questions or requests, visit our support page or contact us at mohammadsalemeissa8@gmail.com.