Privacy policy

Two roles

For a store’s account, its team and its billing, we decide how the data is used.

For the data a store keeps about its customers, gold sellers, vendors and sales, the store decides. The store is the controller and we are its service provider (processor). We use that data only to run Al-Mizan for the store, as the store asks and as this policy says.

If you are a customer of a store, the store’s own privacy notice applies. Ask the store first. If you write to us, we pass your request to the store and help it answer.

What we collect

Your account

Your name, initials, work email and password. The password is kept only as a one-way hash by our sign-in provider. If you sign in with Google or Apple, they give us your name and email.

If you turn on two-step sign-in, the secret for your authenticator app. If you set a register PIN, a one-way hash of it.

Your role in the store, what you are allowed to do, and when you last used Al-Mizan.

Your store

The store’s name, address, phone, email, website, logo, opening hours, time zone, tax rate and receipt settings. The plan, trial dates and billing status.

Hardware requests: a contact name, phone, email and shipping address. The devices used with Al-Mizan, such as an RFID reader, printer or cash drawer: model, serial number, battery level and when it was last seen.

What a store keeps in Al-Mizan

Pieces: photos, descriptions, metal, weight, stones, certificates, prices, costs, places in the store and RFID tag numbers.

Sales and payments: what was sold, when, by whom, for how much and how it was paid (cash, card, transfer, store credit, layaway or trade-in). Card payments at the counter go through the store’s own card terminal. Al-Mizan records only that a card was used and any reference the staff types. It never receives card numbers.

Customers: name, phone, email, address, birthday, anniversary, ring size, notes, wishes, purchase history, store credit and loyalty discount.

Repairs: the customer’s name, phone and email, the item and the work, photos, deposits and prices, who picked it up and their signature.

Gold buying: many states require a store that buys gold from the public to record each seller. For each purchase the store records the seller’s name, phone, address and date of birth; the ID type, issuing state, last four characters, expiry date and full ID number; a photo of the ID; and what was bought, how it was tested, what it weighed and what was paid.

The full ID number is encrypted in the database. Only the store owner can see it (in the police report) and the ID photo, and each report is logged. Al-Mizan staff cannot see seller details.

Also: vendors and their contact details, pieces on memo, appraisals, count results, reports, cash counts, and an activity log of who changed what and when, with the values before and after.

When you use Al-Mizan

Our hosting and database providers keep request logs, including IP addresses and browser type. We use them to keep Al-Mizan running, to limit sign-in attempts from one address and to stop abuse.

We note when a store reaches a first step, such as its first piece or first sale, to make getting started easier. We do not track clicks, and we use no analytics or advertising trackers.

If you turn on notifications, your browser gives us a push address and keys. We keep them with your browser type.

Photos and the iPhone and iPad app

Photos are re-encoded on your device before upload. This removes location and camera details.

The app uses Bluetooth only to talk to an RFID reader, and the camera only to photograph pieces and read barcodes. It remembers the last reader on the device.

Why we use it

To run Al-Mizan for the store: keep its inventory, sell, count, print, send receipts and reminders, and show its online catalog.

To keep accounts safe: sign-in, two-step sign-in, bot checks, limits on repeated attempts and the activity log.

To bill the store for Al-Mizan, Care and add-ons.

To help: answer questions, set up hardware and fix problems. A few Al-Mizan staff can open a store’s data to support it, and only after two-step sign-in.

To send service emails to store teams: welcome, invitations, tips during the trial, trial and billing notices, and alerts. We do not send marketing to a store’s customers.

To meet legal duties, such as tax records, and to answer lawful requests.

Beautify and the AI writer

When someone in a store uses Beautify, we send the piece’s photo and its facts (such as category, metal, karat, weight, stones, brand and condition) to our AI partner, OpenAI, which checks the photo and makes the studio photo. When a store turns on the AI writer, OpenAI also writes names and descriptions from the same facts. We never send customer or seller details. Sharing a photo with the price on it is done on your own phone and sends nothing to anyone but the app you share to.

OpenAI handles this data under its own terms, which may let it use what it receives to improve its models. Use Beautify with photos of pieces, not people.

Improving our AI

We use a store’s data to improve Al-Mizan’s AI only if the store signs a separate data licence. For those stores we use piece photos and their Beautify versions, piece details and prices, descriptions, sale lines and count results. Each store is shown under a code, not its name. Customer identity is never included.

A store can end its licence by writing to us. From then on its data is left out.

Who we share it with

We do not sell personal data and we do not share it for advertising. We share it only with the companies that help us run Al-Mizan, each for one purpose:

Supabase: database, sign-in, file storage and server functions, in the United States.

Vercel: hosts the website and the app, and keeps request logs.

Resend: sends our emails, including receipts and “ready for pickup” emails a store sends its customers. Our emails carry no tracking.

Cloudflare Turnstile: checks that sign-up, sign-in and password resets come from a person.

Stripe: takes payment for Al-Mizan, Care and add-ons on the web. Stripe gets the owner’s email, the store’s name and the card or bank account. We never see the card number.

OpenAI: Beautify and the AI writer, as described above.

Google or Apple sign-in: only if you choose it.

Push services from Apple, Google or Mozilla: deliver the notifications you turned on. Messages are encrypted, so they cannot read them.

GIA: when someone looks up a GIA report, we send only the report number.

Metals.Dev: we fetch market metal prices from it. No personal data is sent.

Sentry, only if we turn on error reports: error details, set to leave out personal data.

We may also share data when the law requires it, to protect people or Al-Mizan from fraud or harm, or as part of a merger or sale of the business, under this policy.

What others can see

A store’s team sees its data as the owner allows. Only the owner sees costs, billing, exports and the activity log.

Receipt links show the store, the pieces, the totals and how it was paid. They never show the customer’s name or contact details. Anyone with the link can open it, so it should go only to the customer. When a store closes, its links stop working.

A store can turn on a public online catalog. It shows only the pieces the store chose, prices only if the store wants, and the store’s name, address, phone, email, website and hours. Search engines may list it.

When staff tap Text, the message is sent from their own phone, not by Al-Mizan.

Where it is stored

Al-Mizan’s data is stored in the United States, in Supabase’s us-west-1 region (Northern California). Some of the companies above may handle data in other countries to do their part. If you use Al-Mizan from outside the United States, your data is moved to the United States.

How long we keep it

While a store has an account, we keep its data so it can use Al-Mizan.

If the trial ends without Al-Mizan being bought, or Care stops, the store becomes read-only. We keep its data so the owner can download it or come back, until the owner closes the store or asks us to delete it.

When the owner closes the store, it becomes read-only at once. 30 days later we delete its data and files. We keep one line: the store’s name, code and closing date.

Gold-buying tickets cannot be deleted by the store, only voided, because the law often requires keeping them. Download them before you close the store if you must keep them longer.

Data downloads are deleted after 7 days. A push address is deleted when the push service says it no longer works.

Your sign-in account stays until you delete it. We keep billing records as long as tax law requires.

Deleted data can stay in our backups for a short time until they are replaced.

How we protect it

Each store’s data is kept apart from every other store by rules in the database, tested on every change.

Data travels over encrypted connections. Files are in private storage and shared through short-lived links, except catalog photos a store publishes.

Passwords and PINs are kept as one-way hashes. Seller ID numbers are encrypted. Card numbers never reach Al-Mizan.

Two-step sign-in is open to everyone, and required for Al-Mizan staff who can see across stores.

No system is perfectly secure. If a breach affects your data, we will tell the affected stores and people as the law requires.

Children

Al-Mizan is made for businesses. It is not meant for anyone under 16, and we do not knowingly collect data from children under 16 for our own use. A store that records a customer under 16 is responsible for doing so lawfully. If you think we hold a child’s data by mistake, write to us and we will delete it.

Your choices and rights

Store owners can download a copy of the store’s data at any time in Settings → Data and privacy: spreadsheet files for pieces, sales, customers and the rest. The store can be closed there too.

Anyone on a team can change their name and PIN, and sign out on every device, in Settings → Your profile. You can delete your account in Settings → Your profile → Delete my account, or by writing to us.

You can turn notifications off in your browser or device settings.

Store customers can ask the store to see, correct or delete their data. We help the store answer.

Depending on where you live, you may have the right to know what personal data we hold about you, get a copy, correct it, delete it, and object to or limit some uses. Write to support@almizan.gold. We confirm who you are before we act, usually through the email on your account. Someone can ask for you with your signed permission. We answer within 45 days, or sooner where the law requires. We will not treat you differently for using your rights.

California

In the last 12 months we collected the kinds of data listed under “What we collect”: identifiers (name, email, phone, address, account ID, IP address), customer records, commercial information (purchases and payments), government ID details of gold sellers (collected for stores, as the law requires), photos and signatures, and internet activity (request logs). We collected them for the purposes under “Why we use it” and disclosed them only to the companies listed above.

We do not sell or share personal data as California law defines those words, so there is nothing to opt out of. We use sensitive personal data, such as ID numbers, only as the law allows.

Europe and the United Kingdom

We use your data because we need it to provide Al-Mizan (contract), for our legitimate interest in keeping it safe, working and improving, to meet legal duties, and with your consent where we ask for it (a data licence, notifications). You can complain to your local data protection authority.

Cookies

We use only the cookies needed to keep you signed in. They are not used for advertising. We use no analytics or advertising trackers, and our emails have no tracking pixels.

The app also keeps a few things on your device: which reader you use, the last values you typed on a piece, a count in progress, and sales made offline until they are sent.

The bot check on the sign-in pages reads signals from your browser to tell people from bots.

Changes

We may update this policy. We will change the date at the top and, for important changes, email store owners before they take effect.

Contact

Questions or requests: support@almizan.gold. Our terms explain the rest of how Al-Mizan works.