Legal

Privacy Policy

Last updated: August 9, 2026

Who we are

Collectji (“Collectji,” “we,” “us,” or “our”) operates a consignment retail and local-pickup platform based in Jordan. Merchants place products in partner stores run by independent Store Keepers; customers reserve or collect those products in person, without needing an account. Merchants who also run a Shopify storefront can connect it to offer “pick up at a Collectji store” as a delivery option to their own online customers.

This Privacy Policy explains what information we collect across our services — the Collectji website, the Merchant, Keeper, and in-store customer applications, and our Shopify integration — and how we use, share, and protect it.

Collectji is operated by نقطة الاساس للبرمجة الحاسوبية, registered in Amman, Jordan. If you have questions about this policy, contact us at support@collectji.com.

Information we collect

What we collect depends on how you use Collectji:

Merchants

When you apply as a Merchant or manage a Merchant account, we collect your business name, contact name, email address, password (stored as a salted hash, never in plain text), phone number, website URL, a description of your products, your estimated monthly order volume, and whether you run a Shopify store. Product listings you create include names, descriptions, categories, condition, SKU, and any photos you upload.

Store Keepers

When you apply to become a Keeper, we collect your name, email address, password (hashed), phone number, a photo of your government-issued ID, a photo of you (to confirm you match the ID), and details of your proposed store location, including its address and map coordinates and photos of the space. Because ID and applicant photos are sensitive, we use them only to verify your identity before approving a store, and access to them is restricted to the review team.

Customers

Reserving a product or scanning an in-store QR code does not require creating an account. To complete a reservation we collect your name and phone number, so a Keeper can confirm and hand over your order. Payment happens in person, directly with the Keeper — see Payments below.

If no pickup point near you is carrying the product you opened, you can tell us which area you are in. The area is the only thing we ask for, and we use it to decide where to open pickup points next. Leaving your name and phone number is optional. If you do leave them, they are visible to the Merchant whose product you were looking at, so that they or we can tell you when you are able to collect it.

If you would rather have the item delivered, we ask for more, because that request is passed to the Merchant as something they can act on: your name, your phone number, a description of how to find you, and roughly when suits you. You can also share your exact location with one tap, which is entirely optional — your browser asks your permission first, and declining changes nothing else about your request. We ask for it once, when you send the request, and never in the background. Collectji does not deliver and does not arrange delivery. The Merchant decides whether to, and contacts you directly. We share those details with that one Merchant, for that purpose only.

In neither case do we use these details for marketing, and we do not share them with anyone else.

Everyone

Our hosting and infrastructure providers automatically log standard technical information needed to operate any web service — such as IP address, browser type, and request timestamps — for security and reliability. We do not use third-party advertising trackers or analytics cookies on any Collectji property.

Photos and location data

Product photos, store photos, Keeper verification photos, and pickup-confirmation photos are stored with our object-storage provider (Cloudflare R2). Store addresses are converted to map coordinates using Google Maps so they can be shown accurately to Merchants and Customers — we only process the address you or your Keeper enters for a store, not your device’s ongoing location. The single exception is a delivery request, where you may choose to share your location once; even then we read it at that moment and never track it in the background.

Payments

Collectji does not process card payments and never sees your card number, CliQ credentials, or bank details. Payment for a reserved product happens directly between the Customer and the Store Keeper at pickup, in cash, via CliQ transfer, or by card using the Keeper’s own payment device. We only record which method was used and the amount, so Merchant payouts and Keeper settlements can be calculated correctly.

Our Shopify integration

If you connect a Shopify store to Collectji, Shopify asks you to approve the specific permissions our app requests before anything is shared. With your approval, we access order, product, inventory, and location data needed to route orders placed on your Shopify store to the Collectji pickup point you’ve chosen, and to keep stock levels in sync. Access tokens for your store are encrypted before we store them.

In line with Shopify’s own requirements, if one of your customers asks Shopify to access or delete their data, or if you uninstall our app, we receive that request automatically and act on it — deleting the relevant records from our systems rather than requiring you to contact us separately.

How we use your information

To operate the marketplace — matching Merchant products to Keeper stores and Customer orders.
To calculate and pay out Merchant and Keeper earnings accurately.
To verify Keeper identity before approving a store, for the safety of Merchants and Customers.
To send transactional emails — such as order-ready notifications and password resets — through our email provider, Resend.
To keep your Shopify store’s inventory and orders in sync, if you’ve connected one.
To keep the Service secure and investigate misuse.

We do not sell your personal information to anyone.

Who we share it with

We share information only with the service providers who help us run Collectji, each bound to use it solely to provide their service to us:

Shopify — only for Merchants who connect a store, as described above.
Resend — delivers our transactional emails.
Cloudflare (R2) — stores uploaded photos.
Google Maps Platform — converts store addresses into map coordinates.
Neon — hosts our database.
Railway — hosts our application servers.

If you use WhatsApp’s share option to send someone a reservation link, that opens WhatsApp on your own device with a pre-filled message — we don’t send anything to WhatsApp or Meta ourselves.

We may also disclose information if required by law, or to protect the rights, safety, or property of Collectji, our users, or the public.

Data retention

We keep account information for as long as your account is active. If a Merchant or Keeper application is rejected, we retain it for a limited period for audit purposes before deleting it. Shopify order, product, and customer data is retained and deleted according to Shopify’s own requirements described above. When a Keeper application is rejected, the ID photo, the applicant photo, and the national ID number are all deleted at that moment — they exist only to verify identity before approving a store, and that purpose ends with the decision. We keep the decision itself (who applied, when, and why it was rejected) for 6 months so we can answer questions about it, and that record contains no photographs. When an account is closed we delete personal information within 90 days, except records we are required to keep for tax or accounting purposes. Where you told us your area because no pickup point was available, or asked for delivery, we keep the area, the reason, and the date so we can plan where to open next, but the name, the phone number, any description of how to find you, and any location you shared are all deleted after 6 months — what is left cannot identify you.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, or to object to or restrict certain uses of it. To exercise any of these rights, email us at support@collectji.com and we’ll respond as required by applicable law. If your data reached us through Shopify, you can also exercise these rights directly with Shopify or the merchant whose store you ordered from.

Children's privacy

Collectji is not directed at children, and Merchant and Keeper accounts require the applicant to be an adult. We do not knowingly collect personal information from children.

Security

We use industry-standard measures to protect your information, including encrypting stored Shopify access tokens and hashing passwords. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected users if we become aware of a breach affecting their data, as required by law.

International data transfers

Some of the service providers listed above may store or process information outside Jordan. Where that happens, we rely on their own safeguards for cross-border data transfer.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify Merchants and Keepers directly.

Contact us

Questions about this policy or your information can be sent to support@collectji.com or info@collectji.com.

Governing law: the laws of the Hashemite Kingdom of Jordan, where Collectji is registered.