Privacy Policy

Landing Island ("Landing Island", "we") is a software platform that lets merchants build Arabic-first landing pages and online stores, take orders, and manage them. This policy applies to https://landingisland.com, to the merchant dashboard, and to every service connected to them.

We handle two very different categories of data, and the distinction matters because your rights differ between them:

Merchant data

The data you create when you sign up and use the platform. We are the controller of it, and this policy is the full account of how we handle it.

Storefront buyer data

End-customer data that reaches us through a merchant's store — name, phone, address, order details. The merchant is the controller; we are only a processor acting on their instructions. We do not market to those buyers, do not sell their data, and do not repurpose it for ourselves.

If you bought from a store built on the platform and want to access or delete your data, contact that store first — we act on their instruction regarding your data.

We collect the minimum needed to run the service, and we do not ask for data we do not use:

Account data

Name, email address, password (stored hashed — we cannot read it), and a phone number if you provide one.

Store data

Store name, subdomain, logo, colour/currency/shipping settings, products and their images, and landing-page content.

Order data

Buyer name, phone, address, order contents and status. Stored isolated per store; no other merchant can reach it.

Payment data

We never store card numbers. Wallet top-ups and subscriptions run through an external payment provider, and all we receive back is a transaction id, amount, status and the last four digits of the card.

Technical data

IP address, browser and operating system, pages visited and when. Used for security, abuse prevention and fault diagnosis.

AI input content

The product description and images you upload to generate a landing page. Sent to the AI model providers listed below solely to generate that text and those images.

• To run the service: create your account, serve your storefront, receive orders and show them to you.
• To generate AI content from the input you provide.
• To bill: deduct per-order fees from your balance, manage subscriptions, issue receipts.
• For security: detect fake orders, prevent abuse, and defend against intrusion attempts.
• For operational messages: account confirmation, low-balance alerts, incident notices. These are necessary and cannot be switched off while your account is active.
• To improve the product using aggregate statistics that identify no individual.

We do not sell your data or your buyers' data to anyone, and we do not use your buyers' data to market our own services to them.

We process data on the basis of: performance of the contract you enter when you subscribe; our legitimate interest in securing the platform, preventing fraud and improving the service; legal and accounting obligations; and your explicit consent where it is required (for example analytics cookies).

We rely on specialist providers to run parts of the service. Each receives only the minimum data needed for its function:

Supabase

Database, file storage and authentication.

Vercel

Application hosting and content delivery.

Anthropic (Claude)

Generating landing-page copy from the description you enter.

Replicate and Google (Gemini)

Generating and enhancing product imagery.

Dodo Payments

Processing wallet top-ups and subscription payments.

Resend

Sending operational email.

We may also disclose data in response to a binding legal request, to defend our legal rights, or in a merger or acquisition — in which case this policy continues to govern your data until the people it concerns are notified of any change.

A merchant can install their own tracking tools (Meta Pixel, TikTok Pixel, Google Analytics and similar) on their storefront. Those tools operate for that merchant alone, and the merchant is responsible for disclosing them and obtaining any consent required on their store. We do not control the data those tools send to their owners.

• Essential cookies: keep your session, active store and chosen language. The service does not work without them.
• Preference cookies: remember interface choices such as language and layout.
• Analytics cookies: used to understand platform usage in aggregate. You can disable them in your browser without breaking your account.
• On the platform's public pages, we may use Google Analytics, Google Ads and Meta Pixel to measure visits and merchant registrations after you consent. You can decline or change your choice using Privacy settings. These platform IDs are not installed in merchant storefronts.

• Account and store data: for as long as your account is active, then deleted within 90 days of permanent closure.
• Order data: kept while the store is active, since it is the merchant's commercial record; deleted with the store.
• Billing records and invoices: kept for the period accounting and tax obligations require.
• Security logs (IP addresses, sign-in attempts): up to 12 months.

• Encryption in transit over HTTPS on every connection, without exception.
• Per-store isolation at the database level, so no merchant can reach another merchant's data.
• Passwords stored hashed; no member of our team can read them.
• Limited internal access: production data is reachable only by those who need it to do their job.

No system is 100% secure. If a breach affects your data we will notify you without undue delay, describing what happened and the steps we have taken.

• Access a copy of the data we hold about you.
• Correct anything inaccurate.
• Delete your account and its data, except where a legal obligation requires us to retain some of it.
• Export your store and order data in a readable format.
• Object to, or restrict, certain kinds of processing.

To exercise any of these, write to support@landingisland.com. We respond within 30 days at the latest, and may ask you to verify your identity first to protect your account.

Some of the providers listed above operate servers outside your country. By using the platform you acknowledge that your data may be processed in those countries; we contract with those providers on terms that preserve the level of protection.

The service is intended for adult merchants and is not directed at anyone under 18. If we learn an account belongs to a minor we will close it and delete its data.

We may update this policy as the service or legal requirements change. The last-updated date is shown at the top of this page, and we will notify you of any material change by email or in the dashboard before it takes effect.

For any question or complaint about this policy or about how we process your data, write to support@landingisland.com, call +20 106 526 8185, or write to the postal address shown on our Contact page.