Privacy Policy

ASBBAB operates the wholesale, retail and affiliate marketplace at asbbab.com, the storefronts sellers publish on it, and the seller dashboard. For any question about this policy or your data, contact us at contact@asbbab.com.

• Account data: your name, email address, phone number and password (stored only as a secure hash), and the sessions and devices you sign in from.
• Order and delivery data: the name, phone numbers, wilaya, commune and address you enter at checkout, the products you order, your order notes, and the delivery status reported by the carrier.
• Seller data: store details, products, team members, pickup addresses, bank details (RIP or CCP) when you apply for our delivery service, and an identity document with a selfie when you verify a seller account.
• Messages and reviews: conversations between customers and stores, and the reviews you publish.
• Technical and anti-fraud data: IP address, browser and device type, and a hashed identifier of your browser, used to protect sellers against fake and duplicate orders.
• Visit source: the page you arrived on and the campaign parameters in its link — for example from a Facebook, Instagram or TikTok ad — so a seller can see which ad led to an order.

• To create and run accounts, stores and orders, and to get orders delivered.
• To let sellers and their teams confirm orders by phone and follow deliveries.
• To prevent fraud, abuse and duplicate orders.
• To send order, account and security messages by SMS or email.
• To show sellers statistics about their store, their orders and their advertising.
• To operate and improve features such as search, image search and the store assistant.

Sellers can connect their own Facebook (Meta) or TikTok for Business account in the seller dashboard, under Analytics → Ad reports. Connecting is always the seller's own choice, and the access is read-only: we cannot create, pause or edit ads, change budgets, or publish anything on the seller's behalf.

• What we read: the ad accounts the seller chooses, with their name and currency, and for each campaign, ad set and ad: its name, spend, impressions, clicks, landing page views, Meta's ad quality rankings, and, where available, the ad's image or preview.
• Why: to show the seller what each ad cost next to the orders it produced on ASBBAB — how many were confirmed and delivered — and so the real cost of each delivered order.
• What we store: the access token Facebook or TikTok issues for the connection, the name of the account used to connect, and the ad accounts the seller selected. Ad statistics and previews are only kept in a temporary cache, for at most 24 hours.
• Who can see it: only that store, and the team members the store owner has given access to its analytics. We never share this data with other sellers, sell it, or use it for any other purpose.
• Deletion: when the seller clicks Disconnect, we revoke our access with Facebook or TikTok and immediately delete the access token, the selected ad accounts and all cached advertising data. See the Data Deletion page for details.

• We use essential cookies to keep you signed in securely and to remember preferences such as your language.
• When you visit a store, we remember where your visit came from for up to 30 days, and advertising click identifiers for up to 90 days, so an order can be matched to the ad that brought you.
• Sellers may add tracking pixels from Meta, TikTok, Snapchat or Google to their store. Those services then receive information about your visit and actions such as viewing a product or placing an order. When a seller enables server-side events, we send the order event to that platform with your email, phone number and name hashed (transformed one-way so they cannot be read as text), together with your IP address and browser details. Each platform's own privacy policy applies to the data it receives.

• The seller you order from, and the team members they authorise, receive your order and delivery details so they can process your order.
• Delivery companies receive the name, phone number and address needed to deliver your parcel.
• Service providers that run parts of the platform for us: database and file hosting, SMS and email delivery, online payment processing, and AI services used for search and the store assistant.
• Plugins a seller installs, such as Google Sheets or Telegram, receive the order details that seller chose to send to them.
• Public authorities, when the law requires it.

We do not sell personal data.

Our database is hosted in the European Union, and uploaded files are stored with Cloudflare. Inside ASBBAB, access is limited to what each person's role requires.

We keep account, store and order data while the account is active, and afterwards only as long as accounting and legal obligations require. Advertising statistics are cached for at most 24 hours, and advertising access tokens are deleted as soon as the seller disconnects.

You can ask to access, correct or delete your personal data, or object to how it is used, by writing to contact@asbbab.com from the email address linked to your account. Sellers can disconnect Facebook and TikTok themselves at any time from the dashboard.

Passwords are stored only as secure hashes, connections are encrypted with HTTPS, identity documents are kept in private storage, and advertising access tokens are never sent to your browser. No system is perfectly secure, but we work to protect your data against unauthorised access.

ASBBAB is not intended for minors, and we do not knowingly collect their personal data.

We may update this policy from time to time. When we do, we change the date at the top of this page.