← Back to home

Privacy Policy & Terms of Use

Last updated: April 16, 2026

1. Introduction & Binding Acceptance

Welcome to Qareib ("we", "us", "our", "the Platform"), a software-as-a-service platform operated from the Republic of Iraq. BY CREATING AN ACCOUNT, ACCESSING, BROWSING, OR USING ANY PART OF THE PLATFORM — INCLUDING THE MERCHANT DASHBOARD, PUBLIC STOREFRONTS, APIS, MOBILE INTERFACES, OR ANY ASSOCIATED SERVICES — YOU UNCONDITIONALLY AND IRREVOCABLY AGREE TO BE BOUND BY EVERY PROVISION OF THIS PRIVACY POLICY & TERMS OF USE. This agreement constitutes a legally binding contract between you and Qareib. If you do not agree to any provision, you must immediately stop using the Platform, delete your account, and refrain from any further access. Your continued use after any update to this agreement constitutes your acceptance of the updated terms, regardless of whether you have read them.

2. Definitions

The following terms apply throughout this document:

  • "Platform" means the Qareib web application at qareib.com, app.qareib.com, api.qareib.com, all subdomains, APIs, and any associated mobile or desktop applications, whether existing now or developed in the future.
  • "Merchant" means any User who registers an account to manage a store, inventory, orders, or team members through the Platform.
  • "Customer" means any end-user who interacts with a Merchant's public storefront hosted on the Platform.
  • "Content" means any data, text, images, product listings, prices, descriptions, logos, or other materials uploaded, entered, or generated by Users on the Platform.
  • "Services" means all functionality provided by the Platform, which may change, be reduced, expanded, or discontinued at any time without notice.

3. Data We Collect

We collect and process the following categories of data. By using the Platform, you expressly consent to all data collection described here:

  • Account data: full name, phone number, email address (optional), encrypted password hash, and account role/permissions.
  • Business data: store name, store slug, business address, business type, store logo, currency preferences, and operational settings.
  • Order & transaction data: order details, product names, quantities, prices, delivery addresses, payment method, order status history, and refund records.
  • Customer data: names, phone numbers, addresses, order history, and blacklist status as entered by you or collected through the public storefront.
  • Inventory data: product catalogs, stock levels, warehouse information, stock movements, batch/expiry tracking, and transfer records.
  • Usage & technical data: IP addresses, device identifiers, browser type, operating system, login timestamps, session duration, pages visited, API request logs, and error reports.
  • Communication data: messages sent and received through integrated messaging channels. We currently support Instagram, and we are progressively rolling out support for WhatsApp Business, Facebook Messenger, and TikTok messaging. Each Merchant decides which channels to connect.
  • Instagram integration data: when a Merchant connects an Instagram Business account, we access and store the Instagram User ID, username, profile picture URL, account type, and messaging webhook events. We read direct-message threads (sender, recipient, message text, attachments, timestamps, read receipts) and send messages on the Merchant's behalf. We do not access posts, followers, comments, or any user data outside the Merchant's own conversations.
  • Other messaging-channel integrations (WhatsApp Business, Facebook Messenger, TikTok): when launched, will follow the same scoping principle — we will access only the Merchant's connected business account profile information and the conversation threads required to operate the unified inbox, and never broader user data outside those conversations.
  • Any other data you voluntarily provide to us through any channel.

4. How We Use Your Data

We process your data for any legitimate business purpose, including but not limited to:

  • Providing, operating, maintaining, improving, and developing the Platform and its Services.
  • Creating and managing your account, verifying identity, and authenticating sessions.
  • Processing orders, managing inventory, tracking stock movements, and generating reports.
  • Hosting your public storefront and processing orders placed by your Customers.
  • Sending any notifications we deem necessary, including but not limited to transactional, operational, promotional, and security-related communications.
  • Detecting, preventing, and responding to fraud, abuse, security incidents, and technical issues.
  • Enforcing this agreement and protecting our legal rights.
  • Complying with any applicable legal obligations, court orders, and government requests.
  • Conducting analytics, research, and internal business intelligence on aggregate or individual usage data.
  • Any other purpose we consider necessary for the operation or improvement of the Platform.

5. Data Sharing & Third Parties

We may share your data with any third party necessary to operate the Platform, including but not limited to:

  • SMS service providers for OTP delivery and notifications.
  • Payment gateway providers for subscription billing and transaction processing.
  • Cloud infrastructure, hosting, database, CDN, and monitoring providers.
  • Law enforcement, government authorities, or any party when required or permitted by law.
  • Any party to protect the rights, property, or safety of Qareib, our Users, or the public.
  • Any party in connection with a merger, acquisition, reorganization, or sale of assets.
  • Any other third party we deem necessary to operate the Platform, at our sole discretion.

6. Data Security

We implement commercially reasonable security measures. HOWEVER, YOU ACKNOWLEDGE AND ACCEPT THAT NO SYSTEM IS 100% SECURE AND WE CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR DATA. You use the Platform at your own risk. Measures include:

  • Password hashing using PBKDF2-HMAC-SHA256 with 100,000 iterations and a 32-byte output before storage.
  • OTP codes hashed with PBKDF2-HMAC-SHA256 (100,000 iterations) before storage.
  • HTTPS/TLS encryption for data in transit.
  • Refresh token rotation and reuse detection.
  • Multi-tenant data isolation at the database level.
  • Role-based access control with granular permissions.
  • Rate limiting on authentication endpoints.
  • Continuous monitoring of system logs and access patterns.
  • Account lockout after repeated failed login attempts.

7. Your Data Rights

Subject to applicable law, and at our sole discretion regarding timing and method, you may request:

  • Access: a copy of the personal data we hold about you.
  • Correction: updates to inaccurate personal data.
  • Deletion: removal of your account and personal data, subject to our data retention obligations under law and this agreement.
  • Data portability: export of your data in a standard format, subject to technical feasibility.

Self-service account deletion is available directly inside the Merchant Dashboard at app.qareib.com — sign in, open the user menu in the sidebar, click "Delete account", and confirm with the 6-digit SMS verification code sent to your phone. After confirmation your profile is anonymized, all sessions are revoked, and your phone number is freed for re-use. Step-by-step instructions are also published at https://qareib.com/en/data-deletion. For any other request (data access, correction, portability) or if you cannot use the in-app flow, contact us by email at info@qareib.com, WhatsApp at +964 783 821 5680, or Instagram @qareibofficial. We will respond within 30 business days. We reserve the right to verify your identity, charge a reasonable fee for excessive or repetitive requests, and deny requests that conflict with our legal obligations or legitimate business interests.

8. Cookies & Local Storage

We use essential cookies and local storage (authentication tokens, language preferences, cart sessions). We use Umami for anonymous aggregate analytics without cookies. We reserve the right to add additional cookies or tracking technologies at any time, which will be governed by the then-current version of this policy.

9. Data Retention & Deletion

We retain your data for as long as we deem necessary, which may extend beyond your account's active period. Upon account deletion: personal profile data is removed within 30 days; business records (orders, invoices, financial transactions) are retained for a minimum of 5 years; anonymized analytics data is retained indefinitely; data required for legal proceedings, regulatory compliance, or dispute resolution is retained as long as needed. Instagram conversation data is retained for as long as the Merchant maintains an active connected channel; when the channel is disconnected or deleted, conversation history is purged within 30 days unless required for ongoing dispute resolution or legal obligations. We have no obligation to notify you before deleting data from inactive accounts.

10. User Responsibilities & Acceptable Use

BY USING THE PLATFORM, YOU REPRESENT, WARRANT, AND UNCONDITIONALLY AGREE THAT:

  • You are at least 18 years of age and have full legal capacity to enter into binding agreements under the laws of the Republic of Iraq.
  • All information you provide is accurate, current, and complete. You are solely and fully responsible for any consequences arising from inaccurate, misleading, or incomplete information.
  • You are solely and exclusively responsible for ALL Content you upload, publish, or transmit, including product listings, descriptions, images, prices, and customer communications. We do not review, verify, endorse, or assume any responsibility for your Content.
  • You will not use the Platform for any unlawful, fraudulent, deceptive, or harmful purpose under the laws of any applicable jurisdiction.
  • YOU ARE SOLELY AND EXCLUSIVELY RESPONSIBLE FOR YOUR INTERACTIONS WITH YOUR CUSTOMERS, including but not limited to order fulfillment, product quality, product safety, delivery, returns, refunds, customer service, and any disputes. THE PLATFORM IS A SOFTWARE TOOL ONLY. WE ARE NOT A PARTY TO, AND HAVE NO LIABILITY FOR, ANY TRANSACTION BETWEEN YOU AND YOUR CUSTOMERS OR ANY THIRD PARTY.
  • You will not attempt to reverse-engineer, decompile, disassemble, or derive the source code of the Platform.
  • You will not circumvent, disable, or interfere with any security, rate-limiting, or access-control features of the Platform.
  • You will comply with all applicable local, national, and international laws and regulations.
  • Third-party integrations (Instagram, WhatsApp Business, Facebook Messenger, TikTok, payment gateways, delivery companies) are subject to those third parties' own terms. WE HAVE NO LIABILITY FOR THE ACTS, OMISSIONS, DATA PRACTICES, OR AVAILABILITY OF ANY THIRD-PARTY SERVICE.
  • You are responsible for maintaining your own backups of your Content. We have no obligation to backup, preserve, or recover any of your data.

11. Account Security

You bear full and sole responsibility for your account security:

  • You must use a strong, unique password and never share your credentials.
  • You must keep your phone number current and accessible for OTP verification.
  • You must notify us immediately of any unauthorized access.
  • YOU ACCEPT FULL LIABILITY for all activity under your account, whether authorized by you or not. We are not responsible for any unauthorized access resulting from your failure to secure your credentials.
  • We may suspend, restrict, or terminate your access at any time if we suspect unauthorized use, without prior notice and without liability.

12. Intellectual Property

The Platform — including all source code, architecture, design, documentation, APIs, algorithms, trade secrets, trademarks, logos, and all related intellectual property — is the exclusive property of Qareib and is protected by applicable intellectual property laws. No license, right, or interest in any Qareib intellectual property is granted to you except the limited right to use the Platform as a service during your active subscription. You retain ownership of your Content and grant us a non-exclusive, worldwide, royalty-free, transferable, sublicensable license to host, display, process, cache, and transmit that Content for the purpose of providing and improving the Services. This license survives account deletion for any Content retained under our data retention policy.

13. Third-Party Services & Integrations

THE PLATFORM RELIES ON THIRD-PARTY SERVICES THAT ARE ENTIRELY OUTSIDE OUR CONTROL:

  • SMS providers: for OTP delivery. We are not liable for SMS delivery failures, delays, or costs.
  • Payment gateways: for subscription billing. We are not liable for payment processing errors, declines, or disputes.
  • Meta/Instagram, WhatsApp Business, and Facebook Messenger: for messaging integrations. Subject to Meta's terms which may change without notice.
  • TikTok messaging: subject to TikTok's developer terms. Currently being integrated.
  • Cloud infrastructure and hosting: service interruptions by our hosting providers are outside our control.
  • WE MAKE NO REPRESENTATIONS OR WARRANTIES REGARDING ANY THIRD-PARTY SERVICE AND EXPRESSLY DISCLAIM ALL LIABILITY FOR THEIR ACTIONS, OMISSIONS, OUTAGES, DATA BREACHES, OR CHANGES IN TERMS.

14. Service Availability, Modification & Discontinuation

THE PLATFORM IS PROVIDED ON A STRICTLY "AS AVAILABLE" BASIS. WE DO NOT GUARANTEE ANY LEVEL OF UPTIME, AVAILABILITY, PERFORMANCE, OR CONTINUITY. We reserve the absolute and unconditional right to: (a) modify any feature or functionality of the Platform at any time; (b) suspend or restrict access to the Platform temporarily or permanently; (c) PERMANENTLY DISCONTINUE THE PLATFORM, IN WHOLE OR IN PART, AT ANY TIME, FOR ANY REASON OR NO REASON, WITH OR WITHOUT NOTICE; (d) change pricing, subscription tiers, or billing terms at any time. IN THE EVENT OF PERMANENT DISCONTINUATION, WE SHALL HAVE NO LIABILITY TO YOU WHATSOEVER, INCLUDING BUT NOT LIMITED TO LIABILITY FOR LOST DATA, LOST PROFITS, BUSINESS INTERRUPTION, OR ANY OTHER DAMAGES. You are solely responsible for maintaining independent backups of your data.

15. DISCLAIMER OF WARRANTIES

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AND TO THE EXTENT NOT PROHIBITED BY MANDATORY PROVISIONS OF IRAQI LAW:

  • THE PLATFORM AND ALL SERVICES ARE PROVIDED "AS IS", "AS AVAILABLE", AND "WITH ALL FAULTS", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.
  • WE EXPRESSLY DISCLAIM ALL IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, RELIABILITY, AVAILABILITY, COMPATIBILITY, AND SECURITY.
  • WE DO NOT WARRANT THAT: THE PLATFORM WILL MEET YOUR REQUIREMENTS; THE PLATFORM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; ANY DEFECTS WILL BE CORRECTED; THE PLATFORM WILL BE FREE OF VIRUSES OR HARMFUL COMPONENTS; OR THE RESULTS OBTAINED FROM USING THE PLATFORM WILL BE ACCURATE OR RELIABLE.
  • YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOUR USE OF THE PLATFORM IS ENTIRELY AT YOUR SOLE RISK. YOU ASSUME FULL RESPONSIBILITY FOR ANY AND ALL DAMAGE TO YOUR BUSINESS, SYSTEMS, DATA, OR OPERATIONS RESULTING FROM YOUR USE OF OR INABILITY TO USE THE PLATFORM.
  • NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY QAREIB, ITS EMPLOYEES, AGENTS, OR REPRESENTATIVES SHALL CREATE ANY WARRANTY.
  • YOU ACKNOWLEDGE THAT YOU HAVE NOT RELIED ON ANY REPRESENTATION, WARRANTY, OR STATEMENT MADE BY QAREIB THAT IS NOT EXPRESSLY SET FORTH IN THIS AGREEMENT.

16. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

  • QAREIB, ITS FOUNDERS, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, CONTRACTORS, AFFILIATES, AND LICENSORS SHALL NOT BE LIABLE UNDER ANY LEGAL THEORY (WHETHER IN CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, WARRANTY, OR OTHERWISE) FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES OF ANY KIND, INCLUDING BUT NOT LIMITED TO: LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, LOSS OF BUSINESS OPPORTUNITIES, LOSS OF GOODWILL, LOSS OF CUSTOMERS, BUSINESS INTERRUPTION, COST OF PROCUREMENT OF SUBSTITUTE SERVICES, OR ANY OTHER INTANGIBLE OR ECONOMIC LOSSES.
  • IN NO EVENT SHALL QAREIB'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THIS AGREEMENT OR YOUR USE OF THE PLATFORM EXCEED THE LESSER OF: (a) THE TOTAL SUBSCRIPTION FEES ACTUALLY PAID BY YOU TO QAREIB DURING THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (b) ONE HUNDRED THOUSAND IRAQI DINARS (100,000 IQD).
  • YOU EXPRESSLY WAIVE AND RELEASE QAREIB FROM ANY AND ALL CLAIMS, DEMANDS, AND DAMAGES OF EVERY KIND AND NATURE ARISING OUT OF OR IN ANY WAY CONNECTED WITH: YOUR CONTENT; YOUR INTERACTIONS WITH YOUR CUSTOMERS; SERVICE INTERRUPTIONS OR OUTAGES; DATA LOSS OR CORRUPTION; UNAUTHORIZED ACCESS TO YOUR ACCOUNT; ACTIONS OF THIRD-PARTY SERVICES; CHANGES TO OR DISCONTINUATION OF THE PLATFORM; OR YOUR VIOLATION OF ANY LAW.
  • THESE LIMITATIONS APPLY EVEN IF QAREIB HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF ANY REMEDY FAILS OF ITS ESSENTIAL PURPOSE.
  • IF APPLICABLE LAW DOES NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES, OUR LIABILITY SHALL BE LIMITED TO THE MINIMUM EXTENT PERMITTED BY SUCH LAW.

17. INDEMNIFICATION

YOU AGREE TO UNCONDITIONALLY INDEMNIFY, DEFEND, AND HOLD HARMLESS QAREIB, ITS FOUNDERS, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, CONTRACTORS, AND AFFILIATES FROM AND AGAINST ANY AND ALL CLAIMS, ACTIONS, PROCEEDINGS, LIABILITIES, DAMAGES, LOSSES, COSTS, AND EXPENSES (INCLUDING BUT NOT LIMITED TO REASONABLE ATTORNEYS' FEES, COURT COSTS, AND EXPERT WITNESS FEES) ARISING OUT OF OR IN ANY WAY CONNECTED WITH: (a) your access to or use of the Platform; (b) your Content; (c) your violation of this agreement or any applicable law; (d) your interactions with any Customer or third party; (e) any claim that your Content infringes any third party's rights; (f) your negligence or willful misconduct; (g) any taxes, duties, or regulatory obligations arising from your business conducted through the Platform. This indemnification obligation is unlimited in amount, survives termination of your account, and applies regardless of the form of action.

18. ASSUMPTION OF RISK & WAIVER

BY USING THE PLATFORM, YOU EXPRESSLY ACKNOWLEDGE, ACCEPT, AND ASSUME ALL RISKS ASSOCIATED WITH YOUR USE, INCLUDING BUT NOT LIMITED TO: the risk of service interruptions, outages, or permanent discontinuation; the risk of data loss or corruption; the risk of unauthorized access to your account; the risk of errors in order processing or inventory tracking; the risk of financial loss arising from reliance on the Platform; and the risk of changes to features, pricing, or terms. YOU VOLUNTARILY AND KNOWINGLY WAIVE, TO THE MAXIMUM EXTENT PERMITTED BY LAW, ANY RIGHT TO BRING ANY CLAIM, DEMAND, OR ACTION AGAINST QAREIB FOR ANY LOSS, DAMAGE, OR INJURY ARISING FROM OR RELATED TO YOUR USE OF THE PLATFORM. This waiver is made freely, voluntarily, and with full knowledge of its consequences.

19. Account Termination

Either party may terminate at any time, subject to the following:

  • You may delete your account at any time. No refunds will be issued for any prepaid subscription fees, whether partial or full.
  • WE MAY SUSPEND, RESTRICT, OR PERMANENTLY TERMINATE YOUR ACCOUNT AT ANY TIME, FOR ANY REASON OR NO REASON, WITH OR WITHOUT NOTICE, AT OUR SOLE AND ABSOLUTE DISCRETION. Reasons may include but are not limited to: violation of this agreement; suspected fraud; security concerns; non-payment; inactivity; business decisions; or any other reason we deem appropriate.
  • Upon termination, your right to access the Platform and all Services ceases immediately and permanently. WE HAVE NO OBLIGATION TO RETAIN, EXPORT, BACKUP, OR MAKE AVAILABLE ANY OF YOUR CONTENT OR DATA after account termination, except as required by mandatory provisions of applicable law.
  • The following sections survive termination indefinitely: Disclaimers, Limitation of Liability, Indemnification, Assumption of Risk & Waiver, Governing Law, and any accrued payment obligations.

20. Governing Law, Dispute Resolution & Waiver of Claims

This agreement is governed exclusively by the laws of the Republic of Iraq. ANY DISPUTE ARISING OUT OF OR RELATED TO THIS AGREEMENT MUST FIRST BE SUBMITTED TO MANDATORY GOOD-FAITH NEGOTIATION FOR THIRTY (30) DAYS. If unresolved, the dispute shall be submitted to the exclusive jurisdiction of the competent courts in Baghdad, Republic of Iraq. You irrevocably consent to the personal jurisdiction of such courts and waive any objection to venue. YOU AGREE THAT: (a) any cause of action must be commenced within ONE (1) YEAR after it accrues, or it is permanently barred; (b) you waive any right to participate in any class action, collective action, or representative proceeding against Qareib; (c) all claims must be brought in your individual capacity only; (d) any dispute resolution shall be conducted on an individual basis and not on a class-wide or representative basis.

21. Force Majeure

Qareib shall not be liable for any failure or delay resulting from circumstances beyond our reasonable control, including but not limited to: acts of God, natural disasters, epidemics, pandemics, war, armed conflict, terrorism, civil unrest, riots, government actions, sanctions, embargoes, power outages, internet or telecommunications failures, cyberattacks, DDoS attacks, third-party service outages, labor disputes, supply chain disruptions, or any other event beyond our reasonable control. During any force majeure event, our obligations under this agreement are suspended without liability.

22. Severability & Entire Agreement

If any provision is held invalid or unenforceable, it shall be modified to the minimum extent necessary or severed, and the remaining provisions shall continue in full force. This agreement constitutes the entire agreement between you and Qareib regarding the Platform and supersedes all prior or contemporaneous agreements, representations, and understandings. Our failure to enforce any provision does not constitute a waiver. Section headings are for convenience only and have no legal effect.

23. Changes to This Agreement

We reserve the absolute right to modify this agreement at any time. Changes take effect upon posting to the Platform. While we will make reasonable efforts to notify you of material changes, YOU ARE SOLELY RESPONSIBLE FOR REVIEWING THIS AGREEMENT PERIODICALLY. Your continued use after any change constitutes irrevocable acceptance. If you do not agree to any change, your sole remedy is to stop using the Platform and delete your account.

24. Children's Data

The Platform is not directed at children under 18 years of age. We do not knowingly collect or process personal data from anyone under 18. If we discover that we have collected personal data from a child under 18, we will delete it as soon as practicable. Parents or legal guardians who believe their child has provided personal data to us may request deletion through any of the contact channels listed below.

25. Contact

For questions or requests regarding this agreement: