Privacy policy

Last updated: 1 November 2026

In short: we collect only what we need to run CartLink, CartLink POS and the CartLink AI assistant, Sarah. We do not sell your information, and we do not show ads.

1. Who we are

Happy Front (registration number SP-4887/2015), M. Sharaf, K. Male', Maldives, provides these services. We decide how account information is used.

When a buyer orders from a seller's CartLink, or a shop saves a customer's details in CartLink POS, the seller decides how those customer details are used. We store and handle them for the seller. If you are a buyer with a question about your details, please ask the seller first.

2. What we collect

• Account details: your name, email, phone number, business name and address. Your password is stored in a scrambled form that nobody can read.
• Business data: the products, prices, photos, sales, stock, customers, staff and reports that you add or that the services create.
• Buyer order details: when a buyer orders from a CartLink, their name, phone number, delivery address, the items ordered and any message.
• Messages to Sarah: the questions people ask her and her answers. We keep them so the business can read its conversation log, and so we can improve her answers.
• Payment records: your plan, the amount, the date, your invoices and any transfer slip image you upload. Card payments are made on the Bank of Maldives' own payment page. We never see or store your card number.
• Page-view counts: on our own public pages, we count which page was opened. We store only the page's address, with no cookie, no ID and nothing about the visitor. Signed-in browsers are not counted. If a link carries a short tag, such as ?from=guide, we count the tag too, so we know which link brought people.
• Technical logs: our hosting providers keep short-term records of requests, such as IP address and browser type, for security and to fix faults.

3. Why we use it

• to run the services you use, and to show your shop to buyers
• to bill you and keep financial records
• to send emails you need, such as sign-in emails, order alerts, receipts and downloads
• to answer your support questions
• to keep the services secure and stop misuse
• to improve the services
• to meet our legal duties, such as keeping tax records

4. Who we share it with

We share information only with the companies that help us run the services, and only what each one needs:

• Supabase: our database, sign-in and file storage. Our database is in Mumbai, India.
• Vercel: hosts our website and pages.
• Resend: sends our emails.
• AI providers, such as Google (Gemini) and Anthropic (Claude): write Sarah's answers. They receive the question and the business information needed to answer it.
• Bank of Maldives: processes card payments.
• Google Fonts: supplies the fonts on our pages. Your browser contacts Google to load them.

Because of this, your information may be stored and processed outside the Maldives, including in India and the United States.

A small number of Happy Front staff can see an account's data, only to give support or fix a fault. We also share information when the law requires it, for example a court order.

We never sell your information, and we do not use it for advertising.

5. Browser storage

We keep your sign-in token and your settings in your browser's storage, so you stay signed in. If you came from a tagged link, the short tag is kept there until you sign up. We do not use advertising or tracking cookies.

6. How long we keep it

• We keep your information while your account is open.
• When you close your account, we delete your information, except records the law requires us to keep, such as invoices and payment records. We keep those for as long as the law requires.
• Sellers decide how long their buyers' details are kept, and can delete them.

7. Your rights

You can ask us to:

• show you the information we hold about you
• correct it if it is wrong
• delete it
• give you a copy of it

Write to us at the address below. We reply as soon as we can, normally within 30 days. Buyers should ask the seller first. If the seller cannot be reached, ask us.

8. Security

Information is sent over encrypted connections. Each business can see only its own data, and access rules in our database enforce this. No system is perfectly secure. If a security problem affects your information, we will tell you.

9. Children

Our services are for people aged 18 and over. We do not knowingly collect information about children.

10. Changes to this policy

We may change this policy at any time. We publish the new version on this page with a new date. For important changes, we also tell you by email or in your account.

11. Contact