Privacy Policy

Who we are

1Line lets shop owners in Kuwait run an online storefront at the shop's own address. The 1Line team sets the shop up with the owner, who then manages products and orders from the shop panel or by uploading a product file. Customers order on the storefront, and the owner can pass orders to their own drivers.

What we collect

We only collect what is needed to run the shop, the storefront and its orders.

• Shop owners: name, shop name and details, WhatsApp number, the photos, prices and details you give the 1Line team during setup, the products, prices, stock and settings in your shop, and your sign-in details (we store only a hash of your access code, not the code itself). If you choose to connect Instagram, we also store the access you grant us, encrypted.
• Customers of a shop: the name, phone number, area and address, chosen delivery slot and the items in each order placed on a storefront.
• Location: if a customer taps «Share my location» at checkout, the phone's position is used only for that delivery: to suggest the area, block and street and to give the shop's driver the exact pin. It is saved with that order only, shown to the shop and its driver, never on public pages, and is not used for anything else. Address suggestions are looked up with Google's Geocoding service.
• Product files: if a shop owner uploads a product file (or gives the address of their existing online shop) to import products, the file itself is not kept. The rows read from it are held temporarily on our server for the owner's preview. The preview stops working after 24 hours, and an expired preview is removed from our server the next time an import preview is saved, or earlier if the server restarts. Only the products the owner confirms are added to the shop. When the owner confirms, we keep a record of what the import changed (the products it added and each product's values before and after) in the shop's activity history, so the owner can undo the import within 24 hours. That record holds product details only and is kept while the shop's account is active.
• Drivers: the name and phone number a shop owner adds for their own driver, the delivery details shown on that driver's private link, and the name of the person who received the order, if the driver records it at handover.
• Gift recipients: when a customer sends an order as a gift, they enter the recipient's name, phone number and card message. These are used only to deliver that gift and are shown to the shop and its driver. The shop may print a packing slip that goes inside the gift box: it shows the recipient's name, phone number and delivery address, the card message and a QR code that opens the delivery location on a map. The sender's first name appears on the slip unless the gift is sent anonymously. The customer must make sure the recipient agrees to these details being shared with the shop and its driver for delivery.
• People who apply to the pilot: name, shop name, WhatsApp number, sector, Instagram account, any notes you add, your preferred language and the source of the link you came from (for example an Instagram post).
• Technical information: basic request logs (such as IP address, time and page) kept by our hosting provider for security and troubleshooting.
• Anonymous storefront counts: storefront pages may tell 1Line that a step happened (the shop or a product was viewed, an item was added to the cart, checkout was started, an order was placed) and, from about 1 in 10 visits, how fast the page loaded. We keep only totals per shop per day. No cookie is used, and we store no IP address, name, phone number or anything else that identifies the visitor or their device.

Why we use it

To set up and run your storefront, to take and track orders, to arrange delivery with the shop's drivers, to keep the service secure and to fix problems. We do not sell personal information. 1Line does not use it for advertising and shows no ads. A shop can send its own offers on WhatsApp only to customers who chose to receive them (see «What a shop keeps about its customers» below).

Shop owners and their customers

Each shop is responsible for its own customers' information and for how it uses it. 1Line processes that information on the shop's behalf, only to provide the service to that shop. Each shop's data is kept separate from other shops. If you are a customer and have a question about an order, please contact the shop first. The shop can pass your question to the 1Line team.

What a shop keeps about its customers

1Line stores these for the shop, shows them only to that shop, and never uses them for anything else.

• Offers on WhatsApp (optional): at checkout a customer can tick a box to get offers and news from that shop on WhatsApp. It is never ticked for you. The shop keeps the customer's number with that choice, when it was made, which wording was shown and in which language, so it can show what was agreed. The shop sends offers from its own WhatsApp; 1Line does not send them. To stop, ask the shop: it records the withdrawal and keeps a note so the number is not messaged again.
• Back-in-stock alerts: when a product is sold out, a customer can leave a name and Kuwait mobile number and agree that the shop messages them once on WhatsApp when it is back. The shop sends that one message from its own WhatsApp and marks it sent. The number is not shared with other shops. Requests are kept while the shop's account is active, unless the shop or the customer asks us to delete them.
• Buying on credit («آجل»): if a shop lets a customer buy on credit, it keeps that customer's name and mobile number, the credit limit and payment terms, and a record of orders charged, orders cancelled and payments received (amount, date, method and a short note). There is no interest and no fee; 1Line does not lend or collect money. The customer sees their statement through a private link that expires after 30 days, and we store only its hash. Credit records are kept while the shop's account is active.
• Notes, trade accounts and chat orders: a shop owner may add tags and a private note to a customer, set up a trade account (name, mobile number and trade prices) opened through a private link, or prepare an order from a WhatsApp or Instagram chat (name, mobile number, items, address and note) and send it as a private link to confirm. For these links too, we store only the hash.

WhatsApp and Instagram

1Line does not run a public WhatsApp number yet. When it does, messages to it will go through Meta's WhatsApp Business Platform (Cloud API), so Meta will also process them under its own terms and privacy policy, and we will update this page.

When a shop is set up, 1Line may send the owner's WhatsApp number one message, through Meta's WhatsApp Business Platform, saying the shop is ready and how to add the first product. If the owner replies, the reply is also processed through Meta's platform.

Connecting Instagram is optional. We only read your Instagram content after you approve access through Instagram's own sign-in, and you can disconnect at any time.

Payment proofs, reviews, gifts and WhatsApp messages

• Payment proofs: if a customer pays by WAMD, bank transfer or a payment link, they may upload a screenshot of the transfer on their order page. It is re-saved without its hidden photo data (EXIF), kept in a private storage bucket in me-central1 (Doha) and shown only to the shop through a link that expires after 5 minutes. A screenshot can show part of the payer's bank details, so only the shop and 1Line's systems can open it.
• Review photos: photos a customer adds to a product review stay private until the shop approves them; approved photos are copied to the shop's public pages.
• WhatsApp messages: if a shop owner replies to a message from 1Line or writes to 1Line on WhatsApp, we keep the ID of each message the bot receives (to avoid handling it twice), the time a shop owner last wrote (for Meta's 24-hour rule), short-lived bot steps (up to 30 minutes) and, if an owner writes to the 1Line team through the bot, that message. Product photos the owner sends become product photos. If a delivery of our message fails, we count the error code per day, without the phone number.
• Order alerts to shop owners: if the owner switches them on, we send the owner's own WhatsApp number a message for a new order that arrives within 24 hours of the owner's last WhatsApp message to 1Line (order number, total, area, payment method and a link). The customer's name and phone are not in it. We record when and by whom it was switched on.
• Gift orders: the recipient can share their delivery location through a private link. It is stored on that order only, shown to the shop and its driver, and never on public pages. The location can be changed only from the browser that answered first, or after the shop clears it. The link expires after 7 days.

How long we keep payment proofs

• Payment proofs and review photos are kept with the order while the shop's account is active, unless the shop or the customer asks us to delete them. We are preparing automatic deletion of proofs after an order is closed and will update this page when it is live.

Deleting your data

Instructions for asking us to delete your data, including data from Meta's apps (WhatsApp, Instagram), are on our data deletion page.

The data deletion page

Where it is stored

We use these service providers to run 1Line:

• Google Cloud Run: runs the application, in Google's me-central1 region (Doha, Qatar).
• Google Cloud SQL: the Postgres database, in the same region.
• Google Cloud Storage: product photos, in the same region.
• Encrypted nightly backups of the database, kept in a private Google Cloud Storage bucket in the same region.
• Fonts: the fonts are self-hosted on 1Line's own servers, so opening a page sends no request to Google Fonts or any other font service.

How long we keep it

• Shop, product and order information is kept while the shop's account is active.
• Backups are kept for 35 days and then deleted automatically.
• When a shop sends an order to its driver, the WhatsApp message we prepare for the shop contains only the area, the delivery time and the amount to collect. The customer's name, number, address and location are on a private delivery link instead. That link stops showing them as soon as the order is delivered or cancelled, and expires after 3 days at most. We store only a scrambled form (hash) of the link, not the link itself. When several orders go out with the same driver, they share one link that closes as soon as the last one is delivered and expires after 24 hours at most.
• When a customer types their mobile number at checkout, the shop keeps their name, number and cart (never the address or notes), even if the order is not sent, so the shop owner can send one reminder from their own WhatsApp. Saved carts are deleted after 30 days. A customer's private order-status link expires after 30 days and, like the driver link, only its hash is stored.
• A shop owner can ask us to delete their shop. We then delete its information from the live service; copies in backups disappear when those backups expire within 35 days.

1Line account (حساب 1Line)

A 1Line account is optional. It lets you use one sign-in at every 1Line shop. Sign-in to 1Line accounts is not open yet; when it opens, this page will say how you sign in. We keep your name, email, mobile number (marked unverified until we can confirm it), the addresses and map pins you save, the shops you follow (and whether each may message you), the orders linked to your account, and the name of the payment method you last chose (for example WAMD; never card, bank or IBAN details). We store only scrambled forms (hashes) of sign-in codes and session tokens.

A shop sees only what you send it with an order to that shop: never your other shops, your other addresses or your follows. Your profile is held by 1Line for you. On your account page you can download all of it as a file, or delete your account at any time; orders you already placed stay with each shop.

Payments

Each shop chooses how it takes payment: WAMD, bank transfer, the shop's own payment link, or cash on delivery. The money goes straight to the shop; 1Line does not receive or hold it. A pre-order deposit is part of the product price and is paid directly to the shop; 1Line holds no money. Card payments through 1Line are not live yet. When they are, payment details will be entered with the payment provider, not stored by 1Line, and we will update this page.

Cookies

We use only the cookies needed for the site to work: a sign-in session cookie for shop owners, a sign-in cookie for 1Line accounts (called "__session", on each shop address you sign in to), and a "lang" cookie that remembers whether you chose Arabic or English. If you set the delivery location for a gift, your browser also keeps a cookie called "gl_edit" for 7 days. It is a random key that lets only this browser change your answer; it works only on that gift's link and holds no personal information. We do not use advertising or tracking cookies, and counting storefront visits uses no cookies at all.

Your rights

You can ask to see the information we hold about you, to correct it, or to delete it. Until 1Line has a public email address, shop owners can ask the 1Line team member who set up their shop, and customers can ask the shop they ordered from, which can pass the request to the 1Line team. A shop decides about its own customer records, so a customer's request may be handled by that shop.

Changes

If we change this policy, we will update this page and the date at the top. For important changes, we will tell shop owners on WhatsApp.

Contact

1Line does not have a public email address or WhatsApp number yet. Until it does, shop owners can tell the 1Line team member who set up their shop, and customers can contact the shop they ordered from, which can pass the request to the 1Line team.