Privacy policy

The controller of personal data is ALINERO DIGITAL, publisher of Alinero. For any question about your data, you can write to donnees@alinero.com.

Depending on how you use the Platform, we collect:

• Merchant account data: last name, first name, email, phone, password (encrypted), shop information and legal details.
• Activity data: products, orders, the shop’s customers, confirmation calls, usage statistics.
• End-customer data (entered by the merchant for delivery): name, phone, address, governorate.
• Data received from Facebook, if the merchant links their Facebook Page: public comments posted during the Page’s lives (the author’s name, identifier and profile picture, text, date) and the Messenger identifier of customers who write to the Page from a live.
• Data received from TikTok, if the merchant links their TikTok business account: basic information about that account and private messages sent to it by their customers (see article 8).
• Technical data: login logs, IP address, device type, non-reversible technical fingerprints of the device and browser (to fight multiple accounts), cookies (see the cookie policy).

This data is used to:

• provide and operate the service (account, shop, orders);
• ensure security, prevent fraud (in particular creating multiple accounts to obtain the welcome offer) and comply with our legal obligations;
• inform the shop’s customers of the progress of their order (see article 7);
• reduce refused parcels: a return risk score is calculated for each order, based in particular on the delivery history of the customer’s phone number across all Alinero shops (parcels delivered, returned, orders refused). The merchant only sees an anonymous summary, never the name of the other shops nor the details of their orders;
• help a merchant who has linked their Facebook Page to handle orders placed in the comments of their lives: a public reply under the comment, then an order link sent on Messenger to the customer who writes to the Page;
• help a merchant who has linked their TikTok account to handle the orders their customers place by private message (see article 8);
• inform you (notifications, transactional emails, security);
• improve the Platform (aggregated audience measurement).

For end-customer data, the merchant is the controller of its processing (collection, use, information); Alinero acts as a technical processor, hosting and securing this data on the merchant’s behalf. The same applies to the comments on their Facebook lives and to the private messages their customers send them on TikTok (see article 8). Each merchant undertakes to respect their customers’ rights.

Data is kept for as long as necessary for the purposes pursued: for the life of the account. When you delete your account, its data is permanently deleted, including the wallet and its history (see the account deletion page). Login logs are kept for 90 days at most. Private messages received from TikTok that do not lead to an order are deleted no later than 30 days after they are received (see article 8). You can delete your account at any time.

Your data is neither sold nor rented. It may be disclosed to technical providers strictly necessary for the service to work (hosting, sending emails and messages, notifications, artificial intelligence when the merchant uses an AI feature), bound by confidentiality, and to the competent authorities upon lawful request.

When the merchant ships an order, the delivery company they have chosen receives the customer’s name, phone and address, as well as the amount to collect.

Merchants’ card payments (wallet top-ups and purchases of SMS and WhatsApp packs) are processed by the payment provider Flouci: card data is entered with Flouci, and Alinero neither receives nor stores it. Alinero only receives the payment result from Flouci (reference, amount and status).

When a merchant has linked their Facebook Page, the replies posted under the comments of their lives and the Messenger messages sent to their customers, with the order link, are transmitted to Meta, which publishes them on the Page or delivers them to the customer in Messenger.

When a merchant has linked their TikTok account, the replies they send to their customers from Alinero, with the order link, are transmitted to TikTok, which delivers them to the customer in their TikTok messages (see article 8).

Some of these recipients are located outside Tunisia, in particular our host, our email provider, our artificial intelligence providers (United States, European Union), Meta for WhatsApp messages (see article 7) and for linked Facebook Pages, and TikTok for linked TikTok accounts (see article 8). They only receive the data necessary for their service. Meta and TikTok process the messages that go through their platforms according to their own privacy policies.

When the merchant activates them, Alinero sends the customers of their shop messages about the progress of their order (order received, to be completed, confirmed, on its way, delivered…):

• by SMS, through a Tunisian telecommunications operator;
• by WhatsApp, from Alinero’s WhatsApp Business number, through Meta’s WhatsApp Business platform (Meta Platforms Ireland Ltd), which processes these messages according to its WhatsApp Business policy.

Only the customer’s phone number, the shop’s name, the order number and amount, the photo of the product ordered and a personal link to their order are transmitted. The customer’s name and address never appear in these messages.

The customer’s replies (Confirm or Cancel buttons, written messages) are recorded in the history of their order, visible to the merchant. The customer can stop receiving these messages by asking the shop, or by blocking Alinero’s WhatsApp number.

A merchant can link their TikTok business account (TikTok Business) to Alinero, to find the orders their customers place on TikTok in the same place as their other sales channels. This link only goes through TikTok’s official authorisation: the merchant logs in with TikTok and chooses to authorise Alinero. Alinero never receives their TikTok password.

Once the account is linked, Alinero receives:

• basic information about the merchant’s TikTok account: identifier, display name and profile picture, to show which account is linked and attach it to the right shop;
• the private messages their customers send them on TikTok: message content, the sender’s display name, username and TikTok identifier, date sent, as well as the replies sent to them from Alinero.

This data is used only to manage the merchant’s orders: spotting a private message that expresses a purchase request, allowing the merchant to reply to the customer within the 48-hour window opened by the customer’s message, and sending the customer the personal link where they complete their order (delivery address and phone). If the merchant activates the automatic reply, Alinero sends this link in reply to the customer’s message, without waiting for the merchant. The order then follows the same path as the shop’s other orders.

As with the other sales channels, the merchant is the controller of their customers’ data received through TikTok; Alinero acts on their behalf, as a processor (see article 4). This data is only shown in the space of the shop concerned, to the merchant and to the team members they give access to.

Retention. A private message that does not lead to an order is deleted no later than 30 days after it is received. Those attached to an order are kept with it, for the life of the merchant’s account (see article 5).

Disconnecting TikTok. The merchant can disconnect TikTok at any time from their Alinero space: Alinero then deletes the access authorisation provided by TikTok and stops receiving its messages. Those already received follow the periods above.

A customer who has written to a merchant on TikTok can exercise their rights (see article 10) with that merchant, or by writing to donnees@alinero.com. TikTok also processes this data for its own service, according to its privacy policy.

We implement technical and organisational measures to protect your data: encryption of passwords and sensitive data, two-factor authentication for Alinero administration accounts, login logging, access control per shop. No measure is infallible, but we strive to maintain a high level of protection.

In accordance with Organic Law No. 2004-63, you have the right to access, rectify, object to and delete your personal data. To exercise these rights, write to donnees@alinero.com. You can also refer the matter to the INPDP in case of difficulty.

This policy may be updated to reflect legal or technical developments. The date of the last update is shown at the top of the page.