Privacy Policy

NABZ is operated by NABZ (sole proprietor), based in Lahore, Pakistan. For any privacy question, email support@nabz.pk.

• Account data — your name, email and organisation, handled by our authentication provider so you can sign in.
• Store & order data — for each Shopify store you connect, the order events Shopify sends us: order totals, currency, city, timestamps, line items and the customer name attached to the order.
• Billing data — your plan, subscription status and invoices. Card details are handled by our payment provider and are never stored on our servers.
• Technical data — basic logs needed to run and secure the service.

We use order data solely to provide the service to you: to show your live map and order feed, and to build the historical charts your plan includes. We use account and billing data to run your subscription and to contact you about the service. We do not sell your data, and we do not use your customers’ data to advertise to them.

Order data reaches us from Shopify by webhook when an order is created, and by periodic reconciliation to catch anything missed. We store it in our database and cache so your dashboard is served entirely from our own systems — a request you make never calls Shopify on your behalf. Ingestion continues through every subscription state so that your history stays complete.

• Raw order records are kept for a rolling working window (about 90 days) for the live feed and per-order views.
• Aggregated daily summaries are kept for the retention period of your plan — 90 days, 365 days, or your full history.
• Account and billing records are kept as long as your account is active and as the law requires afterward.

We share data only with the processors that run the service on our behalf — hosting, database and cache, authentication and payment providers — each under contract to protect it, and only as needed to operate NABZ. We may disclose data if the law requires it.

Access to your data is scoped to your organisation and resolved on our servers on every request; a store is never visible to another tenant. We use encryption in transit and follow least-privilege access to your records.

You may ask us to access, correct, export or delete your account and store data. Disconnecting a store stops new data from flowing; email us to request deletion of what we already hold. We respond within a reasonable period.

We may update this policy; we will change the date above and, for material changes, notify you. Continued use after a change means you accept the updated policy.

Privacy requests and questions: support@nabz.pk or via our contact page.