Privacy Policy

This Policy is written in English. An official Arabic translation is provided; if they differ, the English version prevails.

1. Who we are

MATAJER AI E COMMERCE L.L.C ("Matajer AI", "we", "us") is a company registered in the United Arab Emirates. Trade licence no. 92494, issued by the Department of Economic Development, Ajman (issued 17 July 2017; Ajman Chamber of Commerce membership no. 102351). Registered address: Office No. 01-03-04, Al Jurf 3, P.O. Box 1234, Ajman, United Arab Emirates. Phone +971 6 521 4090. General contact: contact@matajerai.ae.

Privacy officer: Omar Albandar. Privacy contact: privacy@matajerai.ae.

We are the controller of personal data in our own business records. For data that a customer business brings into the Matajer AI platform (including data received from Meta, TikTok or Snapchat), we process it on that customer's instructions.

2. Scope

This Policy covers the Matajer AI platform (our e-commerce operations system, including its Advertising Center) our Meta app "Matajer AI Ads" (App ID 4658498601062534) our TikTok For Business developer app "Matajer AI Ads" and our Snapchat Marketing API app "Matajer AI Ads", which our subscribers use to connect their own Meta, TikTok and Snapchat advertising assets. It does not cover third-party sites or Meta's, TikTok's or Snap's own services, which have their own policies.

3. Who uses the Meta connection

The connection is for businesses that subscribe to the Matajer AI advertising program. An authorised person of the subscriber logs in with Facebook Login for Business and chooses which of its own business assets to share with us. We access only the assets the subscriber selects, only through Meta's official APIs, and only for the purposes below.

4. Data we receive from Meta

With the subscriber's permission we receive and store:

  • Connection data: the subscriber's Meta business portfolio ID, the business integration access token Meta issues to us (stored encrypted), the permissions granted and the assets selected.
  • Basic profile of the connecting person: Meta user ID and name (public_profile), used only to show who made the connection.
  • Ad accounts: ID, name, currency, time zone, status, balance and amount spent.
  • Facebook Pages and linked Instagram accounts: ID, name and profile picture, used as the identity of ads. We do not read, publish or reply to posts, comments or messages.
  • Pixels / datasets: IDs and names, so ads can be linked to the subscriber's conversion tracking.
  • Campaigns, ad sets, ads and creatives that the subscriber creates or manages through our platform, including the images and videos it uploads, and their delivery status and review issues.
  • Performance insights: spend, impressions, clicks, results and similar ad metrics.
  • Webhook notifications from Meta about the subscriber's ad accounts (for example ads with issues).

We do not request or receive personal profiles of the people who see the ads, Lead Ads form data, custom audiences, product catalogs or WhatsApp data through this app.

5. Data we receive from TikTok

When an authorised person of a subscriber approves our app on TikTok For Business, TikTok gives us an access token (stored encrypted) for the ad accounts that person can manage. With that permission we receive and store:

  • Connection data: the TikTok For Business user ID and display name of the person who connected, the authorised ad account IDs, the permission scopes granted and the access token.
  • Ad accounts and Business Centers: ID, name, currency, time zone, status and balance.
  • Campaigns, ad groups, ads and creatives that the subscriber creates or manages through our platform, including the images and videos it uploads, the TikTok post identities and Instant Pages it uses, and their review status.
  • Pixels: pixel IDs and names, and the website conversion events the subscriber sends through the TikTok Events API (email addresses and phone numbers are hashed before they are sent).
  • Performance reports: spend, impressions, clicks, conversions and similar ad metrics.
  • Notifications from TikTok about the review status of the subscriber's ads.

We do not receive data about the TikTok users who see the ads, lead form data, custom audiences or TikTok organic account content through this app. Sections 9 and 10 apply to TikTok data in the same way as to Meta Platform Data. For this data we act on behalf of the subscriber, as its processor (service provider).

6. TikTok Pixel and tracking on landing pages

Landing pages that we host for a subscriber may use the TikTok Pixel and similar technologies operated by third parties, including TikTok, to collect information about how visitors use the page. This information is used to measure ads and to help show ads. Visitors can opt out of the use of this information for ad targeting through the cookie notice on the page, their browser settings and the ad settings of their TikTok account. Where the law requires consent, the pixel loads only after consent.

7. Data we receive from Snapchat

When an authorised person of a subscriber approves our app "Matajer AI Ads" on Snapchat, Snap gives us an access token and a refresh token (both stored encrypted) for the Snap organizations and ad accounts that person can manage. With that permission we receive and store:

  • Connection data: the Snapchat user ID and display name of the person who connected, the permission scope granted and the tokens.
  • Organizations and ad accounts: ID, name, currency, time zone and status.
  • Campaigns, ad squads, ads, creatives and media that the subscriber creates or manages through our platform, and their review status.
  • Pixels: pixel IDs and names, and the website conversion events the subscriber sends through the Snap Conversions API (email addresses and phone numbers are hashed before they are sent).
  • Performance reports: spend, impressions, swipes, conversions and similar ad metrics.

We do not receive data about the Snapchat users who see the ads, and we do not build profiles, segments or audiences from Snap data. Sections 9 and 10 apply to Snapchat data in the same way as to Meta Platform Data. For this data we act on behalf of the subscriber, as its processor (service provider). Snap's own processing of personal data is described in the Snap Privacy Policy: https://values.snap.com/privacy/privacy-policy

8. Snap Pixel and Conversions API on landing pages

Landing pages that we host for a subscriber may use the Snap Pixel, the Snap Conversions API and similar technologies. Third parties, including Snap, may use cookies, web beacons and similar technologies to collect or receive information from these pages and elsewhere on the internet, and may use that information to provide measurement services, ad targeting and other advertising services. Visitors can opt out of the use of this information for ad targeting through the cookie notice on the page, their browser settings and the ad preferences in their Snapchat account settings. Where the law requires consent, the pixel loads only after consent.

9. How we use it

Only to provide the service the subscriber asked for: show its connected assets in its Advertising Center; create, edit, pause, resume and delete its campaigns, ad sets, ads and creatives; upload its media; report spend and performance; alert it about rejected or problematic ads; check that the connection is still valid; and secure, support and troubleshoot the service.

10. What we never do

  • We do not sell, rent or license Meta Platform Data.
  • We do not share one subscriber's data with another subscriber. Each Advertising Center is isolated.
  • We do not use Meta Platform Data for profiling individuals, building audiences, ad targeting outside the subscriber's own instructions, credit, insurance, employment or housing decisions, or surveillance.
  • We do not use Meta Platform Data to train or improve artificial-intelligence models, and our AI features do not receive it. The AI features of the platform (product classification, product-image understanding and a staff assistant, provided by OpenAI) work only on product information and on what staff type or upload themselves. No ad account, campaign, Page, insight or other Meta Platform Data is sent to OpenAI or any other AI provider.
  • We do not transfer Meta Platform Data to data brokers or advertising networks.
  • The same rules apply to data we receive from TikTok and Snapchat: we do not sell it, share it between subscribers, use it to profile individuals or build audiences, send it to any AI provider, or transfer it to data brokers.

11. Legal basis

We process this data to perform our contract with the subscriber and on the basis of the consent the subscriber gives in Meta's login dialog, TikTok's authorization screen or Snapchat's authorization screen, in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, the Meta Platform Terms, the TikTok For Business Developer Terms, the Snap Business Services Terms and the Snap Developer Terms.

12. Service providers (sub-processors)

We use the following providers to run the platform. They process data only on our instructions and under confidentiality and security obligations:

ProviderPurposeLocation
HostingerApplication servers and database (ERP)Hostinger data centres (outside the UAE)
CloudflareDNS, network security, and media/backup object storage (R2)Global network
VercelHosting of the web interfaceGlobal network
New RelicApplication logs and monitoringUnited States
Google (Workspace)Business emailGlobal
OpenAIAI features for product data and the staff assistant. Receives no Meta, TikTok or Snapchat dataUnited States

We may add or replace providers; the current list is kept on this page and material changes are notified to subscribers.

We may disclose data where required by UAE law or a competent authority, or to Meta, TikTok or Snap where required by their terms.

13. International transfers

Some providers above process data outside the UAE. We use them only where the transfer is permitted under the UAE PDPL and protected by contractual safeguards.

14. Security

Access tokens and secrets are encrypted at rest; all traffic uses HTTPS; access is limited to authorised staff on a need-to-know basis; webhook messages are verified with Meta's signature; TikTok notifications are accepted only on unguessable addresses and matched to the subscriber's own ads. We notify Snap without delay of any security incident affecting Snap data, as Snap's terms require. If a breach affects your data we will notify you and the competent authority as required by law.

15. Retention

We keep Meta, TikTok and Snapchat data while the connection is active, and we never keep Snapchat data for longer than 36 months, even while the connection is active. When a subscriber disconnects, removes our app in Meta, TikTok or Snapchat, cancels its subscription or asks for deletion, we delete or irreversibly anonymise the platform data of that connection within 30 days, except records we must keep by law (for example invoices), which are kept only as long as the law requires.

16. Your rights

Subject to UAE law you may ask to access, correct, delete, restrict or object to processing of your personal data, or for a copy in a portable format. Email privacy@matajerai.ae. We reply within 30 days.

17. Disconnect and deletion

18. Children

The service is for businesses only and is not directed at anyone under 18.

19. Changes

We will post changes on this page with a new "Last updated" date and notify subscribers of material changes.

20. Contact

MATAJER AI E COMMERCE L.L.C · Office No. 01-03-04, Al Jurf 3, P.O. Box 1234, Ajman, United Arab Emirates · privacy@matajerai.ae · +971 6 521 4090