Lymoun Shop is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform. By using Lymoun Shop, you consent to the practices described in this policy. We encourage you to read it carefully.

We collect information you provide directly to us, as well as data generated automatically when you use the platform.

• Account information: name, email address, phone number, and business details provided at registration.
• Business data: products, inventory, orders, and sales records you create and manage within the platform.
• Usage data: pages visited, features used, session duration, and interaction patterns — collected automatically.
• Device information: browser type, operating system, IP address, and device identifiers for security and diagnostics.

We use the information we collect solely to provide, maintain, and improve the Lymoun Shop platform.

• To operate and deliver the core features of the platform, including inventory management, POS, and reporting.
• To send you important service updates, security alerts, and support communications.
• To analyze anonymized usage patterns and improve platform performance, reliability, and usability.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell, trade, or rent your personal information or business data to third parties. We only share data in the limited circumstances described below.

• Service providers: trusted vendors who assist in operating the platform (e.g., hosting, analytics) under strict confidentiality agreements.
• Legal requirements: when required by law, court order, or governmental authority in Tunisia or applicable jurisdiction.
• Business transfers: in the event of a merger or acquisition, your data may transfer to the successor entity under the same privacy protections.

We retain your data for as long as your account is active or as needed to provide our services and meet legal obligations.

• Active account data is retained for the duration of your subscription and for up to 90 days after account closure.
• You may request deletion of your data at any time. We will action deletion requests within 30 days.
• Anonymized, aggregated data may be retained indefinitely for product improvement and analytics purposes.

You have meaningful rights over your personal data. We are committed to honoring these rights promptly and transparently.

• Access: you may request a full copy of the personal data we hold about you at any time.
• Correction: you may request correction of any inaccurate or incomplete personal data.
• Deletion: you may request deletion of your personal data, subject to any legal retention obligations.
• Export: you may request a machine-readable export of your business data at any time, including upon account closure.

We implement industry-standard technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

• All data is transmitted over encrypted HTTPS connections and stored with encryption at rest.
• Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.
• While we take all reasonable precautions, no system is completely immune to security threats. We will notify you promptly in the event of a breach affecting your data.