Privacy Policy

1. Who we are

Al Akhdar Trading CRM ("we", "us") runs www.mominagha.com, a customer-relationship tool for physical commodity trading teams. This policy covers the public website and the CRM that team members sign in to.

2. What we collect

• Account details: your name, e-mail address, role and department, set by you or your administrator, and a profile picture link if you add one.
• What your team records: Leads (company, contact name and title, e-mail, phone, address, country, products, quantities, terms, prices and margins), matches, Sales, comments, tasks, reminders, notes and the documents and files you upload.
• Sign-in and security information: the IP address and browser of each signed-in session, security events such as a sign-in from a new device, and the passkeys or two-factor settings you choose to set up.
• Activity history: who created, changed, approved or deleted a record, and when. The CRM keeps this as an audit trail.
• Contact messages: the name, e-mail address and message you send through the Contact page.
• Visit statistics: our hosting provider counts page visits without cookies and without identifying you.

3. How we use it

• To run the CRM: show your team its records, suggest Buyer and Seller matches, send the in-app alerts and e-mail copies you choose, and keep documents with their Leads and Sales.
• To keep accounts safe: manage sessions, warn you about new-device sign-ins and keep the security log you can see in Settings.
• To keep a record of changes, so a team can see who did what.
• To answer contact messages and support requests.
• To keep the service working and fix faults.

We do not sell personal information, we do not show advertising, and we do not use advertising networks.

4. AI features

AI match analysis: when someone asks for it, the two Leads' company names, product categories and summaries, quantities, units, countries and trading terms are sent to our AI provider, Cerebras, which writes the analysis. The result is saved with that pair.

5. Who processes it for us

We use these providers to run the service. They process information only to provide their service to us:

• Supabase: database and sign-in.
• Cloudflare (R2): storage of uploaded documents and files.
• Vercel: hosting of the website and cookie-free visit statistics.
• Resend and Pingram: sending e-mails such as sign-in links and alert copies.
• Cerebras: the AI match analysis, only when someone asks for it.
• Sentry: error reports, if error tracking is switched on.

If your team switches on sign-in with Google or GitHub, that company confirms who you are when you use it. Inside your organisation, other team members see records according to the roles your administrator sets. We may also disclose information when the law requires it.

6. How long we keep it

We keep your team's records while its account is active. A deleted Lead or Sale is hidden but kept with its history for the audit trail. An administrator can ask us to remove data for good by writing to us.

7. Your choices and rights

• See and correct your profile in Settings, Profile.
• Download the records you can see in Settings, Data Export.
• Choose which alerts reach you, and whether they are also e-mailed, in Settings, Notifications.
• Ask us for a copy of your information, or to correct or delete it, by writing to support@mominagha.com.

Depending on where you live, data-protection law may give you further rights, such as objecting to some uses. Tell us and we will answer within the time the law sets.

8. Security

Connections to the site are encrypted (HTTPS). The database itself enforces who may read and change each record, and accounts can add two-factor codes and passkeys. No system is perfectly secure, so please keep your sign-in details to yourself and tell us straight away if you think your account has been misused.

9. Children

The service is for businesses and is not meant for anyone under 18.

10. Changes to this policy

When we change this policy we update the date at the top of this page.