Legal

Privacy Policy

Last updated: October 27, 2026  ยท  Effective immediately

This document is published in English. Your browser may offer a translation for convenience; the English version is the official text.

๐Ÿ”’ Short version: Your shop data stays under your control. We collect only what is needed to run the service. We don't use tracking cookies, Google Analytics, or advertising trackers. We never sell your data.

This Privacy Policy explains how Sicada ("we", "our", "us"), operated by Nazih Annous, Tbilisi, Georgia, collects, uses, and protects your personal information when you use our service at sicada.app.

1. Information We Collect

Account information: When you register, we collect your name and email address.

Business data: Products, sales records, inventory, and settings you enter into the app.

Review reward (optional): If we offer a review reward and you take part, we collect the link to your public review, any evidence link you add, and the note we record when we check it.

Support Sicada (optional): Settings โ†’ Support Sicada links shop owners to Sicada's own social media pages and software review listings. Opening those links sends us nothing, and you can no longer send us tasks to verify there. If you sent us tasks before, we keep what you sent then โ€” the name or link of your profile on that platform, or the link to your public review, together with your account name and email address โ€” along with when you sent each task, whether we verified or rejected it, and the note we wrote when we checked it; Settings still shows each task's status and, if we could not verify it, that note. We do not access your social media accounts, and we do not send your information to those platforms. We keep this as described in Section 6.

Payment information: We do not store your card details. Payments are processed by Paddle, who handles all payment data securely.

Usage data: Our servers keep standard request logs (such as browser type, approximate location from IP address, and pages visited) to run and secure the service. We do not use Google Analytics or any analytics tool that builds a profile of you or follows you across other sites.

2. How We Use Your Information

3. Data Storage

Your shop data is kept on Sicada's servers and transmitted over encrypted connections (TLS/SSL).

Your shop's product, sales, and settings data belongs to you. We do not access it except for technical support purposes when explicitly requested.

4. Third-Party Services

We use the following third-party services:

Each of these providers has their own privacy policy and security practices. We share only the minimum data necessary for them to operate. We do not use Google Analytics, Google Tag Manager, advertising networks, or any tool that tracks you across other websites.

5. Cookies and Local Storage

Sicada's application does not set any cookies. To keep you signed in, your login token is stored in your browser's session storage and is cleared when you close the tab. Your language and theme choices are stored in your browser's local storage, and some of your shop's data (such as your product list, stock levels and settings) is cached there as well, so the cashier keeps working if your connection drops. None of this is sent to us for analytics or shared with third parties.

Cloudflare, which protects the site, may set a strictly necessary security cookie to distinguish real visitors from automated abuse. Cloudflare Web Analytics, on our marketing pages, sets no cookies at all. We do not use advertising or tracking cookies of any kind.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymised, aggregated data may be retained for analytical purposes.

Review reward: While your account is active, we keep your review-reward submissions. When your account is deleted, your submissions โ€” including the review and evidence links, your name, and our notes โ€” are deleted at the same time. If you received a reward, all that remains in our records is a one-way, keyed fingerprint (HMAC-SHA256) of your email address and of the rewarded review link, with the date it was made. We keep these fingerprints indefinitely, solely to stop the same email address or review from claiming the reward again. They contain no name, account ID or review content, cannot be turned back into the address or link, and can only be compared with an address or link by us, using a secret key. If we ever replace that key, existing fingerprints can no longer be matched. Emails we already sent you about your submission stay in your inbox, and in our email provider's (Resend's) delivery logs under its own retention policy.

Support Sicada tasks: While your account is active, we keep what you sent for each task (including tasks we could not verify, and anything you wrote for tasks that Support Sicada no longer offers), the name and email address stored with it, our notes, the record of when each task was sent and checked, and the record of any reward you received from Support Sicada before it stopped offering one. When your account is deleted, all of this is deleted at the same time. If you never received a reward, nothing about your tasks remains. If you received a reward (a review reward, or one from Support Sicada in the past), the same kind of one-way, keyed fingerprint described above is kept โ€” it is not deleted with your account โ€” for your email address and for each social media profile or review link we verified, solely to stop them from being used again. We keep these fingerprints indefinitely. They contain no name, account ID or written text: nothing you wrote is ever fingerprinted.

7. Your Rights

You have the right to:

To exercise any of these rights, contact us at [email protected].

8. Data Security

We protect your data with encrypted connections (HTTPS/TLS), and passwords are stored only as salted hashes, never in plain text. We do not load third-party advertising or cross-site tracking scripts (see sections 4 and 5). No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

9. Children's Privacy

Sicada is a tool for business owners. Our Terms of Service require account holders to be at least 18, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. The updated policy will be effective from the date of publication on this page.

11. Contact Us

For any privacy-related questions or requests, please contact:

Nazih Annous
Sicada
Tbilisi, Georgia
[email protected]

This policy applies to all users of sicada.app and its associated services.