Privacy Policy: Jumla - B2B Wholesale Pricing

Effective date: 4 November 2026

Fadi Abdallah Shehadeh Alfukaha ("we") provides the Jumla - B2B Wholesale Pricing app to merchants on the Salla platform. The app lets a merchant sell wholesale from their own store: register business buyers, give them wholesale prices and minimum orders, and send them quotes.

This policy explains what data we keep, why, for how long, who sees it, and how you can use your rights. It follows Saudi Arabia's Personal Data Protection Law (PDPL).

1. Who is responsible for the data

• Merchant data (the store and its settings): we are responsible.
• Wholesale buyer data: the merchant decides whether to approve or reject each buyer. We process this data on the merchant's behalf, only to run the app.

2. Data we keep

a. Store data (sent by Salla at install):

• The store's Salla id, name, domain and email.
• The store's Salla plan, its subscription status in the app, and the install and uninstall dates.
• The access tokens Salla grants the app, stored encrypted (AES-256-GCM).

b. Merchant settings:

• Notification email and approval mode.
• Price lists, rules and quantity tiers.
• Minimum order and carton sizes.
• Storefront display options and wholesale-only product ids.
• Quote validity and language.
• The ids of the offers and coupons the app creates in Salla.

c. Wholesale buyer data (entered by the buyer in the "Register as a wholesale buyer" form):

• Business name, commercial registration number, VAT number (optional), city and mobile number.
• The buyer's Salla customer id, taken from their store login after we check it with Salla.
• The request status (pending, approved, rejected), its dates, and the merchant's reason if they reject it.

d. Quotes:

• Products, quantities, prices and notes.
• Status, expiry date and payment link.

e. Orders:

• For each new order in the store we keep: the order id, the buyer's Salla customer id, the order total, whether it was a wholesale order, and the linked quote, if any.
• We do not keep shipping addresses or payment details.

f. Technical records:

• Copies of the notifications (webhooks) Salla sends the app. They may include the order or customer details Salla puts in them. We keep them to trace errors.
• Server logs: time, path, IP address and store id.
• Tokens and passwords are never written to logs.

g. In the shopper's browser:

• The app keeps two items in local storage (localStorage): a flag that the shopper is an approved wholesale buyer, and the store's public display settings. This lets prices show quickly.
• We use no cookies, tracking or advertising tools.

What we do not keep:

• Payment data: all payments happen on Salla.
• Passwords.
• The buyer's email address: we read it from Salla's customer record when we send a quote, and we do not store a copy.

3. Why we use it

• To show wholesale prices and the quantity table to approved buyers only, and normal prices to everyone else.
• To let the merchant review, approve or reject registrations, and to add approved buyers to the "جملة" group in Salla.
• To apply minimum orders, prepare quotes and send payment links.
• To send email notifications:
  • to the merchant when a new registration arrives. The email includes the business name, CR, VAT number, city and mobile.
  • to the buyer when a quote is ready.
• To apply the merchant's plan and its limits, fix errors, and protect the service from abuse.

We do not sell data, use it for advertising, or send it to AI services.

4. Who we share it with

• Salla: only as far as the app needs, for example:
  • creating the "جملة" group and adding buyers to it;
  • creating wholesale offers and coupons;
  • reading products, categories and the buyer's email.
• Our hosting provider: Hetzner Online GmbH. Data is stored in Germany (European Union).
• Our email provider: Resend (Ireland) for the app's email, and Zoho Mail for the support mailbox, to send the notifications above.
• Authorities, when the law requires it.

5. Retention and deletion

On uninstall:

• Processing stops and access tokens are deleted at once.
• After 30 days, all of the store's data is permanently deleted, including buyer data. The deletion job runs daily.
• If the merchant reinstalls within those 30 days, their settings come back.

What stays in the merchant's Salla store after uninstall: the "جملة" customer group and the offers and coupons the app created. We lose access to the store when the app is removed, so we cannot remove them. The merchant can delete them in the Salla dashboard.

6. Security

• HTTPS only.
• Access tokens encrypted with AES-256-GCM.
• Each store's data is kept separate from every other store's.
• The signature of every Salla notification is verified.

If a breach affects your data, we will notify you and the competent authority as the law requires.

7. Your rights

Buyers and merchants can:

• know what data we keep about them;
• get a copy of it;
• correct it;
• ask us to delete it.

How to ask:

• Buyers: ask the merchant, or write to us at support@getjumla.com.
• Merchants: write to us at support@getjumla.com.
• We reply within 30 days.
• We may ask for proof that the request comes from the person the data is about.

8. Changes

We post any change on this page and update the effective date at the top.

9. Contact

Fadi Abdallah Shehadeh Alfukaha · support@getjumla.com · Support page