Privacy Policy
rmz.digital · Last updated: October 18, 2026 · العربية
Who we are
rmz (rmz.digital) is an analytics and reporting tool for online stores. It measures advertising performance against the store's actual sales, not the figures reported by ad platforms.
This policy explains what data we collect, why, how we protect it, when we delete it, and your rights over it. rmz is responsible for this data to the extent this policy describes.
Analytics and reporting only
rmz reads data in order to show it to you in reports. It does not create or modify campaigns, change budgets, or touch the settings of your ad accounts or your store.
Data we collect
- From your store platform when you install the app: the store's name and URL, the name and email address of the person who installed it, and an access permission that lets us read the store's data.
- From orders: order number, date and status, amounts, discounts and coupon code, products and quantities, and the customer details needed to link the order to its source: their customer ID on the store platform, email address, phone number, city and country, and gender where provided. We do not collect payment or card details.
- From visits to your store: the pages a shopper views and where the visit came from (the campaign, ad or link), IP address, browser and device type, what they add to the cart and buy, and their email or phone if entered in their account or at checkout, so the visit can be linked to the order.
- From your ad accounts, if you connect them: names of campaigns, ad groups and ads, their status and budgets, spend, impressions, clicks and conversions, and ad creatives. This is advertising performance data, not data about individuals.
- From your team: the name, email address and role of each member you invite.
Why we use it
We do not sell any data, do not use it for advertising, and do not use one store's data to serve another.
- To attribute each order to the campaign, channel, influencer or coupon it came from.
- To show you ad spend against actual sales, return on ad spend, and the customer's journey before purchase.
- To run your account, invite your team and contact you about the service.
Your store's customer data
Data about your store's visitors and customers belongs to you. We process it on your behalf for a single purpose: your store's reporting. To recognise a visitor across visits, rmz places cookies on your store that last up to one year. You are responsible for informing your customers of this in your store's privacy policy.
Google user data
When you connect Google Ads we ask for your permission on Google's own consent page, and we use it only to read your campaign reports and show them in your dashboard.
We do not sell or share Google user data with anyone, do not use it for advertising, and do not use it to develop, improve or train generalized AI or machine-learning models. No one on our team reads it except with your permission for support, for security reasons, or to comply with the law.
rmz's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share it with
- Cloud hosting and database providers we rely on to run rmz, who process data only on our behalf.
- Data may be stored or processed on these providers' servers outside Saudi Arabia, in line with the law's rules on data transfers.
- Government authorities where the law requires it.
How we protect it
- All connections are encrypted.
- Access permissions to your store and ad accounts are stored encrypted.
- Each store's data is kept separate and is accessible only to that store's team members according to their role.
Retention and deletion
- We keep data while rmz is installed in your store.
- When you disconnect an ad platform we delete its access permission immediately. You can also revoke access in the platform's own settings (for Google, at myaccount.google.com/permissions).
- When you uninstall rmz, which also ends your subscription, we immediately delete all of the store's data: visits, orders, ad data, access permissions and team members. A minimal store record (name and URL) and the login account remain so rmz works if you reinstall it; we delete these on request.
- You can ask us to delete all of your data at any time, and we complete the request within 30 days.
Your rights
Under Saudi Arabia's Personal Data Protection Law, you have the right to:
- Know what we collect about you and why, as this policy explains.
- Access your data and obtain a copy of it.
- Ask us to correct or complete inaccurate data.
- Ask us to delete it.
- Withdraw your consent to any ad platform connection at any time.
How to exercise your rights
Email us at support@rmz.digital and we will respond within 30 days. If a request concerns data about one of your store's customers, the customer contacts the store and we help you fulfil the request.
If you believe our processing of your data breaks the law, you may file a complaint with the Saudi Data & AI Authority (SDAIA).
Changes
We may update this policy as the service changes, will update the date above, and will notify you in the rmz dashboard of any material change.