Privacy Policy

Note: This is a translation provided for convenience. The Arabic version is the authoritative text.

Bahth is a search application for stores on the Salla platform. A merchant installs it, and it replaces their storefront’s product search with one that tolerates spelling variation in Arabic. This policy describes what we handle in order to do that.

Who we are

Bahth is operated by USAMA ATIF ABDULLAH BAKKAR Establishment. For any question about this policy or your data, contact bahth@uaab.sa.

What we collect

From the merchant

• Your Salla store identifier, store name and domain.
• An access token issued by Salla when you install the app, and the refresh token that renews it. These let us read your product catalogue and nothing else. The app requests read-only access to products and never write access.

From your catalogue

• Product names, descriptions, prices, images, categories, brands, SKUs and stock status, copied from Salla so that search can run without calling their API on every keystroke.

From your shoppers

• The words they type into your store’s search box, and how many results each search returned.

We do not receive or store a shopper’s name, email address, order history, payment details or account. We do not set cookies on your storefront, and we do not track shoppers between visits or across stores. A search is recorded as text and a result count, with nothing attached that identifies who typed it.

Search text is written by shoppers and we cannot control what they type. If someone types personal information into a search box, it is stored as typed until it is deleted on the schedule below.

Who else processes it

• OpenAI. When a search finds nothing by spelling, we send the search text to OpenAI’s embeddings API so we can look for products that mean something similar. Product names are also sent, once, when your catalogue is indexed. Nothing else is sent, and searches that succeed never reach OpenAI at all. OpenAI states that data submitted through its API is not used to train its models.
• Salla. The platform your store runs on. We read from their API and receive events from them, and their own privacy policy governs what they hold.

We also use an infrastructure provider to host the application and its database, under a contract that permits processing only on our instructions. We do not sell data, share it with advertisers, or give it to anyone else.

Where it is processed

The application and its database run in Europe. The OpenAI API is operated from the United States, so search text that reaches the semantic stage is processed outside Saudi Arabia. If that matters for your business, contact us and we can disable the semantic stage for your store. Keyword search continues to work without it.

How long we keep it

• Search logs: 180 days, then deleted automatically. They exist so that you can see what shoppers looked for and could not find, and older queries no longer serve that purpose.
• Catalogue data: kept while the app is installed, and refreshed from Salla as your products change.
• Store record and tokens: kept while the app is installed. If you uninstall, we stop serving search and retain the record so that a reinstall does not require re-indexing your whole catalogue. Ask us to delete it and we will.

Your rights

Under the Saudi Personal Data Protection Law, and under the GDPR where it applies, you may ask us what we hold about you, ask for a copy, ask for corrections, or ask us to delete it. Write to bahth@uaab.sa and we will respond within 30 days.

Deleting your store’s data removes your store record, your indexed catalogue and all search logs. It cannot be undone, and reinstalling afterwards starts from an empty index.

Security

Access tokens are stored in our database and are never exposed to a browser. Every webhook we accept from Salla is verified by signature before it is acted on. The merchant dashboard is authenticated through Salla itself. We do not have passwords of our own and never ask for one.

Changes

If we change what we collect, who processes it, or how long we keep it, we will update this page and change the date at the top. Material changes will be notified to installed merchants.