Privacy Policy

1. Who we are

Sarh ("Sarh", "we", "us") operates the Sarh customer app, the Sarh for Vendors app and the related services (together, the "Services"). For any question about this policy or your data, contact us at info@cyberpixel.ae.

2. Information we collect

We collect only what we need to run the marketplace:

• Account details: your mobile number, which you confirm with a one-time code, and your name. Vendors also give their store's details: business name, contact person, phone and WhatsApp numbers, email, address, delivery areas and opening hours.
• Location: the emirate and area you choose, your saved locations (such as Home, Office or Site) and any address note you add. We do not use your phone's GPS.
• Requests and quotes: what you post on the Sarh Board, including descriptions, quantities and photos, and the quotes vendors send.
• Messages: chats between customers and vendors, including the photos and PDF files you attach, and the messages you send to our support team.
• Photos and documents: your profile photo, product photos, store logos and cover photos, and the trade licence and other business documents vendors upload for verification.
• Usage information: the screens and listings you open, your searches and favourites, and taps on Call or WhatsApp. We use it to show vendors their store statistics and to improve the Services. We also record technical data such as the app version, device type and error reports.
• Preferences: your language and notification settings.

We do not collect payment card details. No payments are made in the Sarh apps.

3. How we use your information

• To create your account, confirm your mobile number and keep you signed in.
• To run the marketplace: show your requests to verified vendors, deliver quotes and messages, and let you contact a vendor by chat, phone or WhatsApp.
• To verify vendors before their store goes live and to review listings before they appear in the market.
• To show you products, vendors and requests that are relevant to your area.
• To send the notifications you have turned on, such as new quotes, chat messages and offers.
• To answer support messages and handle reports about listings or users.
• To keep the Services safe: prevent fraud, spam and misuse, and enforce our Terms of Service.
• To produce statistics for vendors (such as views and WhatsApp clicks) and aggregated reports that do not identify you.
• To meet our legal obligations and respond to lawful requests from the authorities.

We rely on your consent, on what is necessary to provide the Services you asked for, and on our legitimate interest in running a safe marketplace, as the PDPL allows. Where we rely on your consent, you can withdraw it at any time.

4. What other people can see

• Vendors see the requests you post on the Sarh Board with your name and area. Your mobile number is shown to verified vendors only.
• When you message, call or WhatsApp a vendor, that vendor receives your name, your number and what you send. They handle it under their own responsibility.
• Customers see a vendor's store profile, products, prices, contact numbers, address and delivery areas.
• Vendors cannot see the prices other vendors quote on the same request.
• The business documents vendors upload are visible to the Sarh team only.

5. Who we share it with

• The vendors and customers you choose to contact, as described above.
• Service providers that host and run the Services for us under contract, including Supabase (database, file storage and sign-in) and the providers that deliver text messages, WhatsApp messages and push notifications. They may use the data only to provide their service to us.
• The authorities, when the law requires it or to protect the rights and safety of our users or of Sarh.
• A buyer or successor, if Sarh's business is reorganised or sold, under the same protections.

We do not sell your personal data and we do not share it with advertisers.

6. Where your data is stored

Your data is stored with Supabase in its Singapore region (ap-southeast-1), outside the UAE. We transfer data there in line with the PDPL's rules on cross-border transfers, and our provider protects it with encryption in transit and at rest and with access controls.

Photos and files attached to chats are kept in private storage. They can only be opened through short-lived links given to the people in that conversation.

7. How long we keep it

• Account details: for as long as your account is open.
• Requests: shown on the Sarh Board for 14 days, then kept in your account history until you delete them or your account.
• Chats and attachments: for as long as the accounts in the conversation exist. When you delete your account, the messages you sent stay with the other person and are shown as sent by a "Deleted user".
• Vendor verification documents: while the store is active, and afterwards for as long as the law requires.
• Support messages and reports: for as long as needed to resolve them and to keep a record of how they were handled.
• Backups and technical logs are deleted on a rolling schedule.

8. Your rights

Under the PDPL you have the right to:

• Get a copy of the personal data we hold about you.
• Correct data that is wrong or out of date. You can edit most of it yourself in the app.
• Delete your data. You can delete your account at any time in the app: Profile → Settings → Delete account (vendors: Store → Settings → Delete account). Deletion is immediate and cannot be undone.
• Object to or restrict some uses of your data, and withdraw any consent you gave.
• Turn notifications off in the app's settings or in your phone's settings.
• Complain to the UAE Data Office if you believe we have not handled your data properly.

To use any of these rights, write to us from Help & support → Contact us in the app, or by email at info@cyberpixel.ae. We may ask you to confirm it is you before we act.

9. When you delete your account

• Your profile, saved locations, favourites and requests are deleted, and so is your sign-in.
• For vendors, the stores and products you own are removed from Sarh.
• Messages you sent stay in the other person's chat, shown as from a "Deleted user", so their conversation is not broken.
• We may keep limited records where the law requires it, such as records of reports or of a business's verification.

10. Security

We protect your data with encryption, access controls and regular review of administrator access. No system is completely secure, so please keep your phone and the codes we send you private. If a breach affects your data, we will inform you and the authorities as the PDPL requires.

11. Children

Sarh is meant for adults: you must be 18 or older to create an account. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Services change. We will show the new date at the top and, for important changes, tell you in the app before they apply.

13. Contact us

Questions or requests about your privacy: info@cyberpixel.ae, or Help & support → Contact us in the app.