How marasem handles your data.
Your name and email, from the Google or Apple account you sign in with; your Saudi mobile number, which you verify with a code before checkout; your delivery addresses, with the point you choose on the map, or your device's location when you ask the map to use it; your cup designs and your order and payment history (the last four digits of your card, never the full number); how far you got in each checkout before paying (the cups, quantities and totals shown, and whether you paid); your design requests with their briefs, messages and files; your order ratings and suggestions; if you apply as a print shop, your shop's details (its contact person, phone, email and city, its Commercial Registration number, contact mobile and WhatsApp number, how it takes orders, what it prints with its minimum orders and capacity, the partner terms and quality policy you accepted and when, and our decision on the application with its reason); and a salted one-way hash of your network address, to count visits, to count your use of the design assistant without signing in, and to limit misuse. Our database never stores the address itself.
To operate the service: signing you in, contacting you about your orders, taking payments and issuing invoices, printing your designs, delivering orders, sending order updates, answering you in the design and support assistants, limiting misuse, and learning where customers stop at checkout, to improve it.
The print shop fulfilling your order sees its artwork, your name and the delivery details, and gives the delivery details to the courier. marasem staff see what their work needs. A design you share is open to anyone with its link, with your first name, and appears in Explore if you list it there and the marasem team approves it. Service providers process data for us: Google (sign-in through Firebase, SMS codes, the map and finding the district and city of the point you choose, and our database and files, stored in Google Cloud in Belgium), Apple (sign-in), MyFatoorah (payments, with your name, mobile and email), Meta (WhatsApp codes and order updates), OpenRouter and fal (what you write to the design and support assistants, and the pictures you give the design assistant), and Sentry (error reports, with your account ID).
We use a sign-in cookie, a device identifier recorded with each sign-in, and, for a print shop that is paused, a cookie that shows its status. This browser also keeps your design drafts, the design assistant's conversations and the artwork you keep from it, your brand kit, your display preferences and your Google or Apple sign-in. Visits are counted without cookies. If you accept analytics, Google Analytics and Microsoft Clarity set their own cookies (section 5), and this browser remembers your answer. No advertising trackers.
We use Google Analytics and Microsoft Clarity to learn how marasem is used and where it can be easier, only if you choose Accept when we ask: the pages you open, the steps of designing and ordering you reach (such as starting a design, the tools you use, adding to the cart and paying, with the cups, quantities and amounts), your device, browser and approximate location, and, in Clarity, recordings of your clicks and scrolling with all text hidden. We never send them your name, phone, email, addresses, your pictures or the text of your designs, and pages that show your designs are not recorded. Google and Microsoft store this data on their servers outside the Kingdom, including in the United States. Until you choose, and if you decline, nothing is collected and the store works the same. You can change your choice at any time from Analytics choice at the foot of the store's pages.
We keep your account data while your account is open. When you ask us to delete your account, we remove your name, contact details, addresses and designs, and keep the records your orders, invoices, payments and design requests need, as the law requires. Daily backups keep removed data for up to 30 days, and a backup taken before an update keeps it until that backup is deleted. Server logs keep your network address and account ID for 30 days, and error reports keep your account ID for up to 90.
You can ask us to access, correct or delete your personal data under the Saudi Personal Data Protection Law (PDPL). Contact us using the details below.
Questions about your data, or a request to delete your account: support@marasem.sa or WhatsApp, both on the Contact us page.