Privacy Policy

Last updated: April 2026

Overview

Restware ("we", "us", "our") operates the Zid Integrations platform, distributed through the Zid App Store. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using Zid Integrations, you agree to the collection and use of information in accordance with this policy. If you do not agree, please uninstall the application from the Zid App Store.

What Data We Collect

We collect data necessary to provide and improve the service:

  • Store connection data: your Zid store identifier and the connection tokens generated when you install Zid Integrations from the Zid App Store.
  • ERP and accounting system credentials: API keys, tokens, and endpoint URLs you provide to connect your business systems. These are encrypted at rest using bank-grade encryption (AES-256).
  • Sync and execution logs: records of data synced between your systems, including order references, product identifiers, timestamps, and sync status. Personal customer information (names, addresses, phone numbers) is stripped from webhook payloads before storage.
  • Copilot conversations: messages you exchange with our AI assistant. These are stored to maintain conversation history and improve the service.
  • Usage analytics: aggregated, non-personally identifiable data about feature usage, sync volume, and error rates.

How We Use Your Data

  • To provide the service: syncing data between your e-commerce store and your business systems as configured.
  • To diagnose and resolve issues: when a sync fails, we use execution logs to identify the root cause and suggest fixes.
  • To improve the platform: aggregated usage patterns help us prioritize features and improve reliability.
  • To communicate with you: service alerts, sync failure notifications, and product updates.

Data Storage and Security

  • All credentials are encrypted at rest using AES-256 encryption. The application reads credentials through decrypted database views, raw credentials are never stored in plaintext.
  • Personal customer data (names, addresses, phone numbers, email addresses) is stripped from webhook payloads before storage. Fourteen sensitive fields are automatically redacted.
  • All API endpoints are protected with rate limiting. Row-level security is enforced on every database table.
  • Data is hosted on secure, SOC 2-compliant infrastructure providers.

Data Sharing

We do not sell, rent, or trade your data. We do not share your data with third parties for marketing purposes.

We share data only with infrastructure providers necessary to operate the service (hosting, database, workflow orchestration). These providers are contractually obligated to protect your data and use it only as directed.

Data Retention

  • Active subscription: your data is retained and accessible while your Zid Integrations subscription is active.
  • Uninstall: when you uninstall Zid Integrations from the Zid App Store, syncs are paused, webhooks are removed, and your configuration is archived.
  • Deletion on request: you may request complete deletion of all your data at any time by contacting [email protected]. We will process deletion requests within 30 days.

PDPL Compliance

Zid Integrations is designed with the Saudi Personal Data Protection Law (PDPL) in mind. We collect only data necessary to provide the service, store it securely, and provide you with the ability to access, correct, and delete your personal data. We are committed to full PDPL compliance as the regulatory framework matures.

Your Rights

You have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent and uninstall the application at any time

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through the Zid Integrations dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions, data requests, or concerns:

[email protected]