In brief: we use personal data to provide, secure, and improve Sallemon. We do not sell personal data or permit cross-app advertising with it. You can ask to access, correct, object to, export, or delete data, subject to lawful retention.
1. Scope and controller
MONAI TELECOM SARL, a Lebanese limited-liability company registered in the Mount Lebanon Commercial Register (Baabda), operates Sallemon and is the controller of the personal data covered by this policy. Its registered headquarters are at Seriani Building No. 41, Central Street, Bourj Hammoud, Metn, Mount Lebanon, Lebanon.
This policy applies to Sallemon customer ordering and mobility services, merchant and driver tools, websites, communications, and support. A merchant, fleet operator, or independent service provider may separately control data it must process for its own legal duties, workforce, products, or records. Its own notice applies to that independent processing.
2. Data we collect
- Account and authentication: name, email, verified mobile number, profile photo, language, identifiers, linked roles, password hash, verification status, login records, and security events.
- Addresses and location: saved addresses, map coordinates, delivery instructions, pickup and destination details, route and service-zone information, and driver location while online or completing assigned work.
- Orders, rides, and operations: products or services, merchant and driver assignments, status history, timestamps, amounts, substitutions, cancellations, returns, ratings, proof records, and support outcomes.
- Payments and wallets: payment method and status, provider references, authorizations, refunds, credits, holds, balances, cash collection, commissions, payouts, and settlements. Sallemon does not store full card numbers or card security codes.
- Merchant and driver compliance: business, identity, vehicle, licence, insurance, permit, eligibility, availability, safety, employment, and verification records, including documents and submitted photos.
- Communications and content: in-app messages, support requests, call-routing events, notification interactions, reviews, and photos, documents, camera, or microphone content you choose to submit.
- Device and activity: app or browser version, device and operating-system information, notification tokens, IP address, cookies, local or session storage, similar essential technologies, network diagnostics, crash reports, searches, favorites, and feature interactions.
- Operational assessments: service eligibility, risk, fraud, dispatch, availability, and quality signals derived from the information above.
3. Where data comes from
We receive data directly from you; automatically from your device when a disclosed feature is used; from customers, merchants, drivers, account administrators, or other parties to a transaction; and from providers used for payments, maps, identity, communications, notifications, storage, security, support, and diagnostics. We may also receive lawful fraud, safety, or compliance information from public authorities or professional advisers.
4. Purposes and legal bases
We process data only when reasonably necessary to:
- create, verify, secure, and maintain accounts and authorized roles;
- show available services and calculate zones, prices, routes, fees, and estimated times;
- form and perform orders, rides, assignments, payments, refunds, returns, and settlements;
- connect transaction participants and deliver account, safety, and service communications;
- provide support, investigate incidents, prevent fraud and abuse, and resolve disputes;
- operate, audit, measure, and improve reliability, accessibility, and service quality; and
- comply with accounting, tax, safety, court, regulatory, and other legal obligations.
Depending on the activity and applicable law, the basis is performance of a contract, your consent, compliance with law, protection of vital interests, or our legitimate interests in operating and securing the platform. Where processing depends on consent, you may withdraw it prospectively without affecting prior lawful processing. Essential data may still be required to provide a requested service.
5. Automated and rule-based operations
Sallemon uses rules and automated tools to determine service-zone eligibility, calculate quotes and estimated times, rank or route dispatch offers, detect duplicate sessions or suspicious activity, and flag records for safety, fraud, or compliance review. Inputs can include location, selected service and vehicle, availability, capacity, account status, prior service performance, and risk signals.
These tools can affect which services or offers are shown and may temporarily restrict activity when a safety, payment, eligibility, or security rule is triggered. Contact support if you believe a material restriction is wrong; we can review the underlying record and correct inaccurate data where appropriate.
6. Location and device permissions
Customer location is used to select or validate an address, determine availability, calculate a route or fee, and complete a requested service. If location permission is declined, a customer can enter an address manually where that feature is available. Customer background location is not collected unless a feature first explains why it is needed and requests permission.
The Driver app uses precise location, including background location, while an approved driver is online or completing work. This supports dispatch, navigation, service progress, safety, and accurate operational records. Going offline stops ordinary dispatch tracking, subject to short technical delivery and safety records already created.
Camera, photo-library, files, microphone, notification, and calling permissions are requested only when a related feature is used. You can change permissions in device settings, but disabling one may prevent the related feature. Device biometric authentication is performed by the device; Sallemon does not receive the biometric template.
8. Retention and deletion
We keep data for the shortest period reasonably needed for the service, safety, dispute, accounting, fraud, and legal purposes described above. The period depends on the record:
- Active account data: for the life of the account or role. When an eligible deletion completes, credentials, sessions, push registrations, and direct account identifiers are revoked or de-identified. The de-identified account tombstone is normally eligible for purge after 90 days.
- Orders, rides, ledgers, settlements, tax, and audit records: for the applicable statutory, accounting, chargeback, dispute, fraud, or legal-claims period. Identifiers are restricted or de-identified where the record can be preserved without them.
- Operational media and documents: configured windows generally range from 180 days for errand item photos, 365 days for delivery proof, 730 days for return or support evidence and profile-verification submissions, and up to 2,555 days for compliance documents. A legal hold, unresolved claim, or continuing legal duty can extend a period.
- Taxi location: ordinary exact ride-location breadcrumbs are normally removed after 14 days; safety-linked breadcrumbs may be kept for 180 days; exact coordinates attached to a resolved safety event may be kept for up to 365 days before redaction.
- Public merchant and product media: while published or needed for the merchant record, then removed from active storage after release and cleanup; short-lived cached copies may remain until expiry.
- Encrypted backups: rotate on a 14-day schedule. A restored copy remains subject to the same access, deletion, and retention controls before ordinary use.
A unified Sallemon account may contain customer, business, driver, host, or other roles. A deletion request applies to the unified identity. A merchant organization and its lawful transaction records may remain for other authorized owners, workers, customers, or legal obligations.
See Delete your Sallemon account for in-app and web request options.
9. Your rights and choices
Subject to applicable law, including Lebanon Law No. 81/2018, you may ask to be informed about processing; access, correct, update, complete, or delete data; object to or restrict certain processing; withdraw consent; or receive a portable copy where available. You may also challenge a material automated restriction and complain to a competent authority.
Use profile, permission, notification, and account controls where available or contact us. We may verify identity, clarify scope, protect another person's rights, or preserve data that law permits or requires us to keep. Optional marketing can be disabled; essential transaction, safety, legal, and security messages may still be sent.
10. Security and international transfers
We use administrative, technical, and organizational safeguards designed for the nature of the data, including encrypted transport, access controls, credential protection, private storage for sensitive documents, monitoring, audit records, and incident procedures. No internet or storage system is completely secure, so promptly report suspected account misuse.
Some providers may process data outside Lebanon. Where required, we use contracts, access restrictions, security review, and other safeguards intended to preserve appropriate protection during those transfers.
11. Children
Sallemon is not directed to children under 13. A person who cannot lawfully enter the relevant transaction may use a service only through a parent or legal guardian and where permitted by law. We do not knowingly create independent accounts for children who cannot validly provide the required authorization. Contact us if you believe a child's data was provided improperly.
12. Changes and contact
We may update this policy as services, providers, or legal requirements change. The current version and effective date appear at the top. We will provide additional notice before a material change where law requires it.
For privacy questions or requests, email support@sallemon.com. Do not send passwords, one-time codes, full card details, or unnecessary identity documents by email.
Controller: MONAI TELECOM SARL, Seriani Building No. 41, Central Street, Bourj Hammoud, Metn, Mount Lebanon, Lebanon.