Legal

Privacy Policy

Last updated 9 May 2026

This policy explains what data Alpha Store FZ-LLC processes when you, or a customer of one of our partner institutions, interacts with the Alpha Store mini-app. It is written in plain language and reviewed annually by our DPO.

Data we collect

When you interact with the mini-app we receive a signed reference token from the partner bank (no name or account number), the product detail, time, and amount. We never request a card number, because the bank pays on your behalf.

How we use it

Data is used to deliver your product, prevent fraud, and provide aggregated reporting to the partner institution. We do not sell or rent end-user data, ever.

Retention

Transaction receipts: 7 years by law. Fraud logs: 24 months. Everything else is purged within 90 days.

Your rights

Access, rectification, erasure, portability, objection. Request any of these via privacy@alpha-store.online and we'll respond within 30 days.

Cross-border transfers

Your data is processed and stored in Iraq. Encrypted backups in a UAE data center under a certified data processing agreement.

Contact our DPO

Data Protection Officer: dpo@alpha-store.online — Baghdad office.