Privacy Policy

Tornado International Holdings LLC ("the Company", "we") owns and operates two related applications:

• Shater: for Users who want to request craft services.
• Shater Craftsman: for Craftsmen and service providers who receive and fulfill Orders.

Together the applications form one interconnected Platform (the "Platform") that connects Craftsmen specializing in home services, plumbing, carpentry, and industrial work with Users seeking those services. Because both parties' data intersects and is partially shared to fulfill services, this single policy governs your use of both applications, whether you use Shater as a User or Shater Craftsman as a Craftsman.

This policy explains how we collect, use, share, and protect your personal data when you use either application. By using either one, you acknowledge that you have read, understood, and agree to the practices described herein.

Our services target Users and Craftsmen across the Arab region generally. This policy applies to users of both applications in all Arab countries, subject to each country's applicable personal data protection laws where they exist, regardless of where the owning company is incorporated.

A. Information common to both applications

• Account data: full name, mobile number, email address, password.
• Profile photo and basic profile information.
• Location data (GPS) needed to fulfill and track Orders.
• Device data: device type, operating system, device identifier, IP address, app version.
• Usage data: login history, usage times, features used in each application.
• Communications content: messages and calls exchanged between User and Craftsman on the Platform.
• Payment data: processed via the Stripe payment gateway; we do not store full card details.

B. Information specific to Shater Users

• Saved service fulfillment addresses.
• Order details: service type, problem description, attached photos clarifying the work.
• Ratings and reviews of Craftsmen after service completion.

C. Information specific to Shater Craftsman Craftsmen

• Identity documents (national ID / residence).
• Commercial registration or professional license if any, and experience certificates or proofs.
• Professional specialty, years of experience, and bio shown to Users.
• Completed Orders history, financial entitlements, and bank or e-wallet details needed to disburse earnings via Stripe.
• User ratings of the Craftsman.

• Create and manage accounts on the appropriate application (Shater or Shater Craftsman), and verify Craftsman identity for trust and safety.
• Match User Orders on Shater with the nearest and most suitable Craftsmen registered on Shater Craftsman, based on specialty, location, and ratings.
• Enable User–Craftsman communication on the Platform and transfer necessary Order data between the applications to fulfill the service.
• Process payments and commissions, distribute earnings, issue invoices, and track Orders.
• Improve service quality, support customers, and resolve disputes and complaints between the parties.
• Send Order-related notifications (confirmation, status updates, appointment reminders).
• Send promotional offers and updates (you may unsubscribe at any time).
• Detect and prevent fraud or misuse of either application, and protect Users and Craftsmen.
• Comply with laws and regulations applicable in each country of operation.

We do not sell your personal data to third parties. We may share your data only in the following cases:

• Between Shater and Shater Craftsman: when an Order is created, the User's name, contact number, address, and Order details are shared with the matched Craftsman via Shater Craftsman; conversely, the Craftsman's professional profile (name, specialty, rating) is shown to the User via Shater, only to the extent needed to fulfill the service.
• Service providers: such as Stripe for payments and commissions, cloud hosting, SMS and push notifications, only as needed to deliver the service. Payment data processed by Stripe is also subject to Stripe's privacy policy in addition to this policy.
• Government and legal authorities: when required by a court order or official legal process, or to protect our rights and those of Users and Craftsmen.
• In the event of acquisition, merger, or restructuring, your data may transfer as part of company assets subject to the same protection standards.

To ensure service quality and safety, we verify Craftsmen's identity and professional documents via Shater Craftsman before they may offer services on the Platform. These documents are used for verification only. Users on Shater see a general profile with name, specialty, and ratings without official documents being displayed.

We apply reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse, including encryption in transit, internal access controls, and periodic security reviews. However, no electronic system can be guaranteed 100% secure.

If a security breach materially affects your personal data, we will notify you within a reasonable time and notify competent supervisory authorities as required by applicable law in the relevant country.

We retain your data for as long as your account is active on either application, and for as long as needed for the purposes in this policy or to meet regulatory, accounting, or legal obligations. When you delete your account, your personal data will be deleted or de-identified within a reasonable period, except where retention is legally required (such as financial transaction records).

We process your personal data in accordance with the law applicable in the country from which you use the application. Notable Arab frameworks currently include:

• Kingdom of Saudi Arabia: Personal Data Protection Law (PDPL) issued by SDAIA.
• United Arab Emirates: Federal Decree-Law No. 45 of 2021 on Personal Data Protection, plus DIFC and ADGM data protection regimes where they apply.
• Arab Republic of Egypt: Personal Data Protection Law No. 151 of 2020 and its executive regulations.
• Hashemite Kingdom of Jordan: Personal Data Protection Law No. 24 of 2023.
• State of Qatar: Personal Data Protection Law No. 13 of 2016.
• Kingdom of Bahrain: Personal Data Protection Law issued by Decree-Law No. 30 of 2018.
• Sultanate of Oman: Personal Data Protection Law issued by Royal Decree.
• People's Democratic Republic of Algeria: Law No. 18-07 on the protection of natural persons in personal data processing.
• Kingdom of Morocco: Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
• Republic of Tunisia: the organic law on personal data protection.

For Arab countries that, as of the date of this policy, do not yet have a dedicated personal data protection law, we still apply reasonable protection standards consistent with the international good practices described in this policy.

If any provision of this policy conflicts with a mandatory local law, the local law prevails for Users and Craftsmen in that country.

• Access personal data we hold about you and request a copy.
• Correct or update inaccurate data.
• Request deletion of your account and data, as permitted by applicable law, via Shater or Shater Craftsman.
• Withdraw consent to use of your data for marketing at any time.
• Object to or restrict certain processing.

To exercise these rights, contact us using the details at the end of this policy. We will respond and process your request within 30 business days of receipt; complex exceptional cases may take longer, and we will notify you if so.

Both Shater and Shater Craftsman request location access to identify nearby available Craftsmen and facilitate arrival at the service address. You may disable this permission in device settings at any time, though that may affect some features of both applications.

Shater and Shater Craftsman are not directed at children under 18, and we do not knowingly collect personal data from minors. If we learn that a child's data was collected without parental consent, we will delete it promptly.

We may use cookies and similar technologies on our websites to improve experience, analyze traffic, and personalize content. You can control cookies through your browser settings.

Shater and Shater Craftsman operate in multiple Arab countries. Your data may be stored or processed on servers inside or outside the country from which you use the application, with trusted cloud providers, applying appropriate safeguards consistent with applicable law in each country.

We may update this policy from time to time to reflect changes in our practices, expansion into new countries, or operational or legal reasons. You will be notified of material changes via either application or email. Continued use of either application after an update constitutes acceptance of the revised policy.

If you have questions, inquiries, or complaints about this policy or your personal data, contact us at:

• Owner: Tornado International Holdings LLC
• Email: info@tornadomovement.com
• Phone / customer support: [Enter number here]
• Registered address: Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, USA