Privacy Policy

This policy explains what personal data SellSnap handles, why, where it is kept and for how long. It covers sellers and their teams, buyers who order on a Snap, and visitors to sellsnap.me.

1. Who is responsible

SellSnap is operated by Soheyb Boulaa, an auto-entrepreneur registered in Algeria (auto-entrepreneur card no. 109707240144125398, NIF 19718090144116201880). We decide how personal data is used in SellSnap.

Our processing of personal data is declared to the ANPDP, Algeria’s national authority for the protection of personal data, under Law 18-07. Declaration receipt no. —.

Contact: support@sellsnap.me.

Sellers and their teams sign in with Google or Facebook. We never receive or store a password. From the provider you choose, we receive:

your name and your email address, when the account has one;
the account id that the provider gives SellSnap;
from Google only, the link to your profile picture.

Your name and picture link are refreshed each time you sign in. Your picture is loaded from Google whenever it is shown; we never copy it. With a Facebook sign-in, the app shows your initials instead. Your email address is shown masked, to you and to us, and is never used to find or merge accounts.

We also record when you last signed in with each provider, the app language set from your browser at your first sign-in (you can change it), and, if you opened someone’s referral link before signing up, which workspace referred you.

When you sign in, we open a session for that device. It is kept on our servers; your browser only holds a random session id in a cookie on app.sellsnap.me. The session lasts 90 days after you last use it on that device, and logging out ends it.

3. Your workspace

We keep what you create in a workspace: its name, logo, cover and colors and the optional public phone number shown on your Snaps; your Snaps with their photos and videos; team members and their roles; settings; and the Wallet’s Snap credit history. After the beta, we also keep your top-up payments (bundle, amount in DA and the payment platform’s reference) and their receipts.

Your Snaps are public: anyone with the link can see them, including the public phone number if you set one.

4. Notifications

When you turn on notifications on a device, your browser gives us a push subscription for it: an address at your browser’s push service and the keys that encrypt messages to that device. We keep one subscription per device, with the time of its last successful and failed delivery. It is deleted when you turn notifications off on that device, when you log out there, or when the push service tells us it no longer exists.

A notification says what happened and carries ids. An order notification may show the product, quantity, total and wilaya. It never includes a buyer’s name, phone or address. Every notification is also written to the inbox in the app, which stores only ids and counts. You can silence notifications on all your devices; the inbox still fills.

5. Buyers who order on a Snap

You do not need an account. To place a cash-on-delivery order you give your name, phone number, address, wilaya and commune, and choose the quantity, options and delivery method. We also record the page language and give the order a number such as SS-8F4K2M.

The seller who published the Snap, and the team members they allow, see your order so they can call you and deliver. The notification the seller gets never includes your name, phone or address.

To stop duplicate and abusive orders, we keep a keyed hash of your phone number (HMAC-SHA256 with a secret key) with the order, and short-lived counters: a phone number can place only a few orders in 24 hours, and a second order on the same Snap from the same phone within 6 hours is refused.

We never ask for card or bank details: you pay the seller on delivery.

6. Everyone who visits

As with any website, our servers receive your IP address and basic request data. We use IP addresses for short-lived limits that protect the order form and sign-in from abuse; these counters expire within minutes. When you send an order, your browser also solves a small computing challenge that keeps spam out; it does not identify you.

Server logs are kept for 7 days and are never backed up. They never contain a full buyer phone number. We use no third-party analytics.

7. Why we use data

To run SellSnap: sign you in, show Snaps, pass orders to sellers and send notifications.
To keep the service safe: rate limits, duplicate-order checks, anti-spam challenges and blocking abuse.
After the beta, to process top-ups, receipts and refunds.
To grant free Snap credit only once per person.
To answer you when you write to us.

We do not sell personal data, and we do not use it for advertising.

8. How long we keep it

A buyer’s name, phone number, street address and phone hash are removed for good 90 days after the order is delivered, cancelled or returned, or 180 days after the order was placed if it is still open, whichever comes first. No copy is kept, and nobody can recover them, us included. The order then shows “Number removed”.
After that, the order keeps its number, status history, product and price details, quantity, options, wilaya and commune, and page language, so the seller’s records stay accurate.
If a seller deletes a workspace, buyer personal data in its orders is removed at once; the order records without that data and the Snap credit history are kept.
A session ends 90 days after its last use, or when you log out on that device.
A push subscription is kept until notifications are turned off on that device, you log out there, or the push service drops it.
Rate-limit and duplicate-order counters expire on their own within 24 hours. Server logs rotate after 7 days and are never backed up.
Backups are encrypted and kept at a second site in Algeria for 28 days: four weekly disk snapshots of the database server, and 28 days of database point-in-time recovery. Deleted photos and videos stay in the nightly copy for 28 days. So data erased from SellSnap leaves every backup within 28 days.
Your account and your sign-in details are kept until you delete your account.

Deleting your account. In the app, go to Settings → Sign-in → Delete my account. You are signed out on every device. If you sign back in within 7 days, the deletion is cancelled. On day 7, SellSnap erases:

your name and photo, your sign-in accounts and their email addresses;
the workspaces you own, with their Snaps, photos and videos, and the buyers’ details on their orders;
your place in other teams.

SellSnap keeps:

the Snap credit history and payment records, for accounting;
order records, without the buyers’ details;
for 2 years, a one-way fingerprint of each sign-in account, so free Snap credit is not granted twice. It cannot be turned back into the account or its email.

Erasure on day 7 is within the 10 days set by Law 18-07, Art. 35.

9. Where data is stored

SellSnap runs on our own servers in Algeria. The app, the database, photos and videos, and the backups are all stored and processed there; photos and videos are served from cdn.sellsnap.me by those servers. No foreign analytics or error-tracking service receives personal data.

Our domain’s DNS is at Cloudflare in DNS-only mode: it answers name lookups, and no request or personal data passes through it.

Personal data leaves Algeria only with the authorisation of the ANPDP (Law 18-07, Art. 44).

10. Services outside SellSnap

Google and Facebook, for sign-in. When you sign in, your browser goes to Google or Facebook, and our server exchanges a one-time code with them to receive the details listed in section 2. They handle your sign-in under their own privacy policies.
Your browser’s push service, for notifications. Notifications reach your devices through the push service of your browser’s maker: Google, Apple, Mozilla or Microsoft. Each message is encrypted for your device; the push service sees where and when it is sent and how large it is. It never carries a buyer’s name, phone or address.
The payment platform, after the beta. When you top up, you pay by CIB or Edahabia on the payment platform’s page. We receive the payment’s status, amount and reference, never your card details.

11. Cookies

sellsnap.me sets one cookie, ss_lang, which remembers your language (Arabic, French or English) for up to a year.
The app at app.sellsnap.me sets ss_sess, which keeps you signed in; a short-lived cookie that protects the sign-in with Google or Facebook and is deleted when you come back; and ss_ref, for 30 days, when you open a referral link.

We do not use advertising cookies, tracking pixels or third-party analytics.

12. Your rights

Under Law 18-07, you have the right to be informed about how your personal data is used, to access it, to have it corrected, updated or erased, and to object to its use for legitimate reasons. Write to support@sellsnap.me.

Sellers can edit most of their data in the app, the owner can delete a workspace, and you can delete your account (section 8). If you ordered on a Snap, you can also contact that seller. You can also complain to the ANPDP.

13. Security

Connections use HTTPS. Sessions live on our servers, and the session cookie cannot be read by scripts. Team members only see what their role allows. Notifications are encrypted for each device and carry no buyer details. A removed phone number cannot be recovered, including by us.

14. Changes

We may update this policy. The new version is published on this page with a new date.

15. Language

This policy is written in English. The French and Arabic pages are translations.

16. Contact

support@sellsnap.me