1. Introduction and scope
This Privacy Policy describes how TrustyDr Commerce, operated by TrustyDr ("we," "us"), collects, uses, and protects information in connection with the TrustyDr Commerce platform.
TrustyDr Commerce is operated separately from TrustyDr Healthcare (our related platform for doctor appointments and patient care), which has its own privacy practices. This Policy covers Commerce only.
2. Information we collect
2.1 Account and consent information
When you create an account, we collect your account identifier and, once you accept our Terms of Service and Privacy Policy, we record that acceptance — which document, which version, when, and the language you accepted in.
2.2 Business/organization information
If you register a business on the Platform, we collect your business name, business type, location (province/city), and related organization details, along with information about your staff members (name, role, account status) if you add them.
2.3 Subscription and billing-submission information
If you are a Merchant and subscribe to a paid plan, we collect the plan and billing cycle you select, the amount due, and — because payment is currently made through an offline method you arrange directly (such as a bank or mobile money transfer) rather than through a payment processor integrated with the Platform — the payment method you report and any reference number you provide as proof of payment, for our review. We do not collect or store your payment card or bank account credentials; there is currently no payment processor integration on the Platform.
This section describes a Merchant's own subscription/platform fee paid to TrustyDr — a separate matter from how a Customer pays a Merchant for a product order, described next.
2.4 Order and delivery information
If you place or receive an order through the Platform, order details (products, quantities, price) and delivery information are processed to fulfill that order. For marketplace orders originating through TrustyDr Healthcare's Patient App, delivery-address and customer-identity information is transmitted to TrustyDr Commerce's order-processing system to enable fulfillment.
Payment for your order is made directly between you and the Merchant — not through TrustyDr. After an order is fulfilled, the Merchant's own staff record which payment method was used (for example, cash, card, or an electronic method like ZainCash) and the amount, as an operational record within the Platform's order-management tools. We do not collect or store your card number, bank account details, or electronic-wallet credentials — the Platform only ever records the Merchant-entered payment method, amount, and an optional receipt reference, never the underlying payment credentials themselves.
2.5 Activity and audit records
We keep records of certain actions taken on the Platform (such as who performed a given action and when) for security, accountability, and dispute-resolution purposes.
2.6 What we do not currently collect
We do not use any analytics, advertising, or crash-reporting software on the Platform. The only information we store on your device is a small amount of local data used to remember which business/workspace you last had open, so you don't have to reselect it every time you open the app — this is not used for tracking or advertising.
3. How we use information
We use the information described above to: operate your account and verify your acceptance of our legal terms; enable business registration and staff management; process subscription payment submissions and review them; fulfill and coordinate orders and delivery; maintain security and accountability records; and communicate with you about the Platform.
4. Consent and your acceptance
Your acceptance of our Terms of Service and Privacy Policy is recorded with the version you accepted and a system-generated timestamp — this acceptance record cannot be altered by you or by us after the fact; new acceptances are added, not edited, so a full history is preserved.
Where you provide information to a Merchant as part of placing an order, that Merchant's own handling of your information for purposes outside order fulfillment is between you and the Merchant.
5. Data minimization and security
We collect only the information reasonably necessary for the purposes described in this Policy, and access to sensitive collections (such as billing submissions and audit records) is restricted so that it can only be written by our backend systems, never directly by a client application.
As a digital platform serving users in Iraq, TrustyDr Commerce is also within the scope of the Iraqi Communications and Media Commission's Framework Regulations for Digital Platforms and Services, which requires covered platforms to apply international best practices for personal data protection pending Iraq's own comprehensive data protection law.
We do not make specific claims about encryption standards or security certifications beyond what has been independently verified for our infrastructure providers.
6. Where information is processed
Our Platform is built on cloud infrastructure (Google Cloud/Firebase) and a commerce-processing system (Odoo) that we operate. Your information may be processed and stored outside Iraq as a result.
7. Who we share information with
We share information with:
- Merchants, to the extent necessary for them to fulfill an order you place with them.
- Our infrastructure providers (cloud hosting and our commerce processing system), who process information on our behalf to operate the Platform.
- Authorities, where required by law, or in connection with a data security incident as described in Section 9 below.
We do not sell your information, and we do not share it with advertisers or analytics providers, because we do not currently use any.
8. Retention and deletion
Acceptance-history and audit-log records are retained permanently for accountability purposes. Account data is retained while your account is active.
9. Data security incidents
If a data security incident affecting your personal information occurs, we will notify affected customers and the appropriate Iraqi authorities promptly, consistent with applicable law.
10. Cookies and local storage
We do not use cookies or local storage for advertising or analytics. The Platform stores a small amount of functional data on your device solely to remember your last-used business workspace.
11. Children's privacy
TrustyDr Commerce is intended for use by businesses and adults, not children. We do not knowingly collect information from children.
12. Your rights and choices
You may view your current consent status within the Platform. For questions about your information, or to request that we look into a specific concern, contact us using the details in Section 15.
13. Cross-platform relationship with TrustyDr Healthcare
TrustyDr Commerce and TrustyDr Healthcare are related but separate services with separate data systems. Information entered on one platform is not automatically available on the other, except where a specific, limited integration exists for a defined purpose (for example, a marketplace order placed through the Healthcare Patient App being transmitted to Commerce for fulfillment, as described in Section 2.4).
14. Changes to this Policy
We may update this Privacy Policy from time to time. Where a change is material, you will be asked to review and accept the updated Policy, consistent with our version-tracked acceptance system.
15. Contact
Questions about this Privacy Policy can be sent to support@trustydr.com.