This page explains what data Tifawt Fulfillment (“we”, “us”, “the service”) collects when you use our platform or connect our app from a third-party marketplace such as YouCan, how we use it, and how to contact us about it.
Who we are
Tifawt Fulfillment is a B2B fulfillment platform that helps Moroccan sellers ship cash-on-delivery (COD) orders into Jordan, Saudi Arabia, Syria, and other MENA / GCC markets. We act as a data processor for the order, customer, and shipping data that our seller customers send us.
What data we collect
- Seller account data: name, email, phone, business name, country, and login credentials.
- Order & customer data (per order): customer name, phone number, shipping address, product details, COD amount. This comes from your storefront (e.g. YouCan, Google Sheets, Lightfunnels) or is entered manually.
- Connected-platform tokens: when you authorize Tifawt Fulfillment on YouCan, we store the OAuth access token and refresh token so we can receive order webhooks and re-fetch missed orders. We do not store your YouCan password.
- Operational logs: webhook receipts, sync errors, API call logs — used to debug failed deliveries.
How we use it
- To fulfill the COD orders you send us (deliver, collect cash, return failed deliveries to stock).
- To calculate fees, invoices, and seller wallet balances for the service.
- To communicate with you about your orders and your account.
- To improve the platform via aggregate analytics — never identified user behavior shared with third parties.
Who we share data with
- Shipping carriers (AlShamil, Blink, Brothers, LiveLocation, Spex, Mirsal, etc.) — we share the destination address, customer name, customer phone, and COD amount so they can deliver the package.
- Your connected platforms (e.g. YouCan) — we read orders from your store; we do not push customer data back to them beyond status updates you initiate.
- Service providers (hosting, error monitoring) — bound by data processing agreements.
- We do not sell personal data.
How long we keep it
Order and customer data is retained for the lifetime of the seller account plus 7 years for accounting and tax compliance. OAuth tokens are revoked immediately when you disconnect the integration. Operational logs roll off after 90 days.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing us. Sellers can also disconnect any connected platform (e.g. YouCan) from inside the Tifawt Fulfillment dashboard, which revokes our OAuth tokens.
Security
All data is transmitted over HTTPS. OAuth tokens and webhook secrets are stored encrypted at rest. Access to production data is limited to the engineering team on a least-privilege basis and is audit-logged.
Cookies
The Tifawt Fulfillment dashboard uses a single first-party authentication cookie (HTTP-only, Secure, SameSite=Lax). We do not use third-party advertising or tracking cookies.
Contact
- Email: support@tifawt.app
- Web: https://tifawt.app
- Address: Amman, Jordan
Changes to this policy
We may update this policy as the service evolves. Material changes will be announced inside the dashboard at least 14 days before they take effect.