Privacy policy
Last updated · Version 2
This page says what the Hi Mico platform actually collects, who receives it, how long it stays and how to delete it. It covers the merchant and their team, the merchant’s customers, and visitors to the merchant’s store.
Who is responsible
- Hi Mico, run by Sahnoune Dahmane, Reghaia, Algeria. For anything about your data: privacy@himico.app.
- A merchant’s customer data belongs to the merchant, and we process it for them. So a customer asks the merchant first, and can also write to us.
What we collect from you and your team
- Name, email, phone and store name, how you heard of the platform if you answer, and each team member’s role.
- Your sign-in method: a code sent to your email, signing in with Google or Facebook, or a password the sign-in provider keeps encrypted, so we never see it.
- Photos of the payment receipts you upload, and your plan’s invoices.
- What you enter for your business: products and their cost, stock and suppliers, expenses.
What we collect about your customers
- What you enter or what arrives from your store and channels: name, phone, wilaya, commune and address, and the order, its amount and its status.
- Their location on the map, if the customer shares it themselves.
- WhatsApp, Messenger and Instagram messages that pass through the platform, and voice messages with their transcription, so the bot can answer them.
A customer’s history across merchants
- We say it plainly: how many orders reached a phone number and how many were returned is built from the orders of every merchant on the platform, and every merchant who receives an order from that number sees it, to estimate the risk of a return.
- Only the summary crosses over, such as “this number returned 4 parcels”: not the other merchant’s name, not what they sell, not how many they have. And what comes from others is shown only when it comes from at least two merchants, so no single merchant can be recognised.
- This summary stays after an account is emptied or deleted, because it is what RTO intelligence learns from.
Visitors to the merchant’s store and landing pages
- The store records a visitor’s browsing — where they click, where they stop — so the merchant can watch it. What the visitor types into fields is sent masked, as stars; the recording is erased after 7 days, and the merchant can switch it off.
- Store events — a visit, a started form, an order — are counted for the merchant’s figures.
- The Meta, TikTok, Snapchat and Google pixels in the store use the merchant’s own accounts, not ours.
- When a customer comes from a Meta form or conversation, we send Meta, with the merchant’s key, the stages of their order — confirmation, delivery — using the identifier Meta itself provided, not their name or phone.
Why we collect it
- So the platform works: confirming orders, shipping parcels, and calculating your profit and stock.
- To protect you: detecting fake orders and estimating return risk.
- To bill your plan and answer your questions.
- We do not sell your data or your customers’ data to anyone, and we do not use it for our own advertising.
Who receives the data
- We rely on providers, each receiving only what its work needs:
- Supabase: the database and sign-in.
- Vercel: hosting the platform.
- Cloudflare: storing images, videos and files.
- Resend: the emails we send you, such as sign-in codes and alerts.
- Google: Google Sheets if you connect a sheet, signing in with Google, and some generation tools.
- Artificial-intelligence providers: Anthropic for bot replies, reading images, analysis, building stores and landing pages, and the MICO assistant · OpenAI, Google, Replicate and fal for images and video · ElevenLabs for transcribing voice messages and for voices.
- Services you connect yourself — Meta, delivery companies, Shopify, YouCan, Lightfunnels, Google Sheets and Telegram — receive data on your instruction; nothing is sent to them before you connect them, and it stops when you disconnect them. Meta, Shopify, YouCan, Lightfunnels and delivery companies work with your own keys, and Telegram alerts go through the Hi Mico bot.
- Telegram: your alerts and summary, if you connected it.
- Meta (WhatsApp, Messenger, Instagram and Facebook): the messages you send and receive, ad lead forms and your ads.
- Shopify, YouCan and Lightfunnels: your store’s orders arrive from them if you connect it.
- The carriers you connect, such as Yalidine, ZR Express, Maystro, E-com Delivery, Osen Express, Zimou and the carriers of the Ecotrack network: the customer’s name, phone, address and the amount to collect, to deliver the parcel.
- We hand your data to no other party, except on an order from an authority that the law obliges us to follow.
Outside Algeria
- These providers are outside Algeria, so your data and your customers’ data are stored and processed outside it — the database in Frankfurt, Germany, and the rest wherever each provider operates.
How long we keep it
- As long as your account exists, its data stays.
- An export file is deleted after 14 days, with at most 20 files per person.
- A visitor’s browsing recording is erased after 7 days.
- “Empty the account”: the data disappears at once, you can restore it for 7 days, and then it is erased.
- A locked or suspended account is erased after a year.
- “Delete my account for good”: the account is closed right away and everyone is signed out of every device; you can cancel for 30 days by signing in, then it is erased with all its data, images, files, staff and sign-ins.
- Your Hi Mico subscription invoices are kept after the account is deleted, for accounting.
- What stays after all of that is the delivery-and-return history of each phone number, described above.
Protecting the data
- Every connection to the platform is encrypted.
- Each account’s data is isolated in the database: one account cannot read another’s.
- Carrier and service keys stay on the server and never reach the browser.
- And each team member sees only what their role gives them.
Your rights
- You may know what we keep about you, have it corrected, ask for it to be deleted, and object to its processing, under Law 18-07 on the protection of natural persons in the processing of personal data, as amended.
- A merchant corrects, exports and deletes from the platform itself, or writes to us.
- A merchant’s customer asks the merchant first, or writes to us with their phone number.
- You may also complain to the National Authority for the Protection of Personal Data (ANPDP · anpdp.dz).
Deleting your data
- Merchants — deleting the account for good: in the app or on the website, sign in ⟶ “Settings” ⟶ “Company” ⟶ “Account management” ⟶ “Delete my account for good”, then type your store name. The account is closed right away and erased after 30 days; you can cancel during that time by signing in. Step by step: app.himico.app/delete-account.
- Merchants without the app or a sign-in: write to privacy@himico.app from your account’s email to ask for it to be deleted for good; we delete it the same way.
- Merchants can also: “Empty the account” (restorable for 7 days, then erased) or “Suspend my account” (erased after a year if you do not return).
- A merchant’s customers: ask the merchant you ordered from to delete it, or write to privacy@himico.app with your phone number.
- If you dealt with us through Facebook or Instagram: write to privacy@himico.app, and we delete what reached us about you through them.
- Shopify stores: deletion requests sent by Shopify are carried out automatically.
- What stays after deletion: your Hi Mico subscription invoices (for accounting), and the delivery-and-return summary of the phone number, as described in “A customer’s history across merchants”.
Changes to this policy
- The version number and date are at the top of the page. When it changes, we ask you inside the platform, as with the terms of use.
Also read Terms of use