Die Rechtstexte werden nur auf Englisch und Arabisch veröffentlicht. Diese Seite zeigt den englischen Text; weichen die englische und die arabische Fassung ab, gilt die arabische Fassung. Arabische Fassung lesen
1. Who we are
Mercista (contact: support@mercista.com) provides Mercista. This statement explains what personal data the Software and the Vendor handle, and the rights you have.
2. Your business data stays with you
Invoices, customers, items, suppliers, payments, users and settings are stored locally on your device (IndexedDB and local storage). Mercista has no account, no server and no cloud storage of its own, and it does not send your business data to the Vendor or to anyone else. For the personal data of your own customers, suppliers and staff you enter, you are the data controller: you decide the purpose and means and are responsible for handling it lawfully (notice, consent or another legal basis, accuracy, security, retention, and the rights of the people concerned). The Vendor is not your data processor because it never has access to that data.
3. No tracking
The Software contains no analytics, advertising, telemetry or crash reporting, and sets no cookies. It makes no network connection: fonts and libraries are bundled in the file and the program is blocked from connecting to the internet by its security policy. License checks run offline on your device using a digital signature; no activation server is contacted. The installed desktop version keeps the trial start date and the last-run date on your computer, in the Windows registry and in a small file under C:\ProgramData, so that the trial cannot be restarted by clearing browser data. These two records are not removed when the Software is uninstalled (write to support@mercista.com if you want to know how to remove them). The number of operations used by the trial is kept in the Software's own data. The installed desktop version also reads the computer's hardware identifier from its firmware (the system UUID or the motherboard serial number; the Windows machine identifier only if the firmware offers none) and derives from it a one-way code (the "device code") that is shown in About > License. The hardware identifier itself is not stored or transmitted, and the device code is never transmitted unless you choose to send it to the Vendor to get a device-bound key. One button opens a web page, and only when you press it: «Buy a license» opens the Vendor's website in your browser and puts your device code after a # sign in the address, so the code stays in your browser and is not sent to any server until you press Pay on that page.
4. Data the Vendor may receive from you
If you buy a license, ask for support, or send a device code, the Vendor processes the data you provide (name, company, email, order and payment reference, license key, device code, and your messages) to supply the license, give support, keep accounting records and meet legal obligations. The Vendor keeps a record of every key it issues (name, email, order reference, device code, key identifier and date) and receives an internal email copy of it, in order to prove your license, issue a replacement key if your computer changes, give support and keep accounting records. The legal basis is performance of the contract, your consent where you give it, and legal obligations. Payment details are handled by the payment provider you use at checkout, not by the Software. The Vendor does not sell your data or use it for profiling, and keeps it only as long as needed for these purposes or as the law requires.
5. Features you start yourself
These move data only where you send it: "WhatsApp" opens WhatsApp with a message you review before sending; the cloud-storage window writes an encrypted copy (AES-256-GCM, with a passphrase only you know) into a folder you choose, and your cloud provider's own app syncs that folder under the provider's terms; the e-invoicing window creates XML files that you download or place in a folder watched by the provider or connector you choose. Links such as "Buy" open your browser. Those services have their own privacy policies and may process data outside your country; you are responsible for choosing them.
6. Backups and exports
Backups and exports (JSON/CSV/PDF/XML) are created by you and saved where you choose. They contain your business data in readable form unless you use the encrypted backup or encrypted cloud copy (AES-256) — keep them and the passphrases secure. A lost passphrase cannot be recovered.
7. Security
Passwords of program users are stored only as salted PBKDF2-SHA256 hashes. The optional PIN and user sign-in protect the screen of the program and its permissions; they do not encrypt the data stored on the device, so use disk encryption and encrypted backups for stronger protection and protect the device itself. User actions are recorded in an audit log kept on your device.
8. Your rights
You may ask the Vendor for access to, correction or deletion of the personal data it holds about you, to restrict or object to its use, or to withdraw a consent you gave, by writing to support@mercista.com; the Vendor will answer within a reasonable time and within any period set by the law. You may also complain to the competent data-protection authority. For data inside the Software you can edit or delete any record and delete all data from Settings at any time. People whose data you keep in the Software exercise their rights against you as controller.
9. Security incidents
If the Vendor becomes aware of a breach affecting personal data it holds that is likely to cause serious harm, it will notify the people affected and the competent authority as the law requires. Because your business data is not held by the Vendor, you remain responsible for notifying your own customers or authorities if an incident affects data stored on your devices or backups.
10. Transfers
The Vendor transfers personal data outside your country only when needed to supply the license or support (for example through email or payment providers) and with appropriate safeguards. Data you send to services you choose (section 5) is transferred under your control.
11. Children
The Software is for businesses and is not directed to children.
12. Changes
The Vendor may update this statement and will show the new version in the Software or on its website.
Questions or requests: support@mercista.com.