Privacy Policy

Alma International Trade is responsible for the information described in this policy. For any question, request, or privacy concern:

• Support — rawmaterial.live/contact
• Email — info@alma.com.pk
• Phone / WhatsApp — +92 21 3242 6792
• Hours— Monday to Friday, 9:00–18:00 (Pakistan Standard Time)

• Account details you give us — your name, business email, phone number, company, address, role, and tax registration number (such as an NTN) where it is needed for trade and invoicing.
• Trade information — inquiries, quotes, orders, pricing, payment and shipping details, and documents you or your counterparties upload (such as purchase orders and bank confirmations). These documents may contain personal details of your staff or of the other party.
• Messages — chats and notifications you send or receive on the platform, including the photos and files you choose to attach and replies from our AI assistant (see section 5).
• Technical information — collected automatically, such as your IP address, browser and device type, and cookies needed to keep you signed in.
• Activity— while you are signed in, we record a brief “online” signal so our team can see who is currently active and help you.

We do not ask for sensitive information (such as health, religion, or biometric data). Please do not upload it unless a transaction genuinely requires it.

We publish a mobile app for rawmaterial.live. It shows the same account, orders, pricing, and documents as the website, and it signs you in the same way. The app never asks for your location.

Notifications. If you allow notifications, the app stores a notification token for your device so we can send you updates about your orders, quotes and messages. It is linked to your account and used only for that. The notifications are delivered through Expo's push notification service and your phone's own notification service (Apple's on an iPhone). You can turn notifications off at any time in the app or in your device settings.

Photos and files. The app uses your camera, photo library, or files only when you choose to attach something to a message, and it uploads only the photos and files you pick. It does not use your microphone.

Deleting your account in the app. You can delete your account yourself in the app, under Settings, Delete Account. We ask for your password to confirm it is you, then permanently delete your login and your profile. Your company's trading records (orders, invoices, payments and shipping documents) belong to your company's account and are kept as described in section 9. Messages you sent to our team stay in the conversation, shown as from a deleted user.

Location is collected only from our own staff, and only at the moment they check in or out of attendance. Members of our team who use the attendance feature on our website are asked for their device location when they tap Check In or Check Out. We use it to confirm the person is physically at our office at that moment.

When a check-in or check-out is recorded, we store:

• the coordinates reported by the device and how accurate the device says that reading is;
• the network address the request came from; and
• the time, taken from our own server rather than from the device.

We keep this as the record of the working day, so that attendance and pay can be checked and disputed if needed. We also record attempts that were refused (for example, a check-in from outside the office) together with the same details, so that a person who believes they were wrongly turned away can have it reviewed.

Our website requests location only while the page is open and only for that action. It does not track location in the background, it does not follow your movements between check-in and check-out, and it does not build any location history beyond those individual records. You can refuse the permission, or withdraw it later in your device settings; the rest of the website continues to work, but attendance must then be recorded by an administrator instead.

Customers and suppliers are never asked for location. If you use the website or the app as a customer or a supplier, this part does not apply to you and no location is collected from you at all.

• To create and run your account and keep it secure.
• To process inquiries, quotes, orders, payments, and shipping.
• To communicate with you and provide support.
• To answer your questions in Messages with the help of our AI assistant, as described in section 5.
• To prevent fraud, abuse, and unauthorised access.
• To meet our tax, accounting, customs, and record-keeping obligations.
• To understand the market — we use industry trade data for our own research and to show customers general market insights. Any insights we show are aggregated and do not identify individuals.
• To improve the platform.

We use your information because it is needed to provide the service you or your company asked for, to run our business responsibly, to meet our legal obligations, or with your consent where that applies. We do not use it for advertising, and we do not sell it.

Stella, our AI assistant, answers questions in Messages, the chat between you and our team, and helps our staff in the tools they use. Stella uses an AI model provided by Anthropic, PBC to read a message and write the answer. Replies written by the assistant are shown under the name Stella with an AI tag.

When the assistant answers a message you send in Messages, we send Anthropic:

• your message, and up to six earlier messages in that chat, so it can follow the conversation;
• the information from your own account that is needed to answer, such as your orders and shipments, quotes, the prices on your price list, and the names of your documents. The assistant can look up only what your own account can already see; and
• if you are a vendor and send a price sheet or a trade document in Messages, that file, so the assistant can read its prices or file it with the right order.

The same model also reads the text of your message to help our team prepare an inquiry for you, and translates the assistant's replies when you write in another language. Our staff also use the assistant in their own tools to look up and update records: what they type, the files they give it (such as proforma invoices or payment slips), and the records needed for the task are sent to Anthropic in the same way, and can include information about customers and vendors, such as company and contact names, orders, prices, and payments.

Anthropic processes this information as our service provider, only to carry out these tasks for us. Under our commercial terms with Anthropic, it does not use this information to train its AI models. Anthropic keeps it only for a limited period for safety and abuse monitoring, and then deletes it.

Our team can see the assistant's replies in your conversation and can step in to correct or add to them. AI answers can be wrong. Prices, quotes, and orders are governed by our team's confirmation, not by the assistant's answer. If you would rather the assistant did not reply to you, contact us and we will turn its replies off for your conversation; our team will then answer you directly.

We use cookies and similar storage to sign you in, keep your session secure, remember your preferences, and measure how the site is used — visits, pages read, and the link or search that brought you here. We do not use advertising cookies or third-party analytics trackers, and we do not track you across other websites. There is no setting on the site to turn cookies off; your browser can still block them, but sign-in will not work. See our Cookie Policy for more.

We share information only as needed to run the service:

• With the parties to your trade — a buyer and the relevant supplier can each see the shared order and its documents. Each party only sees what it is entitled to.
• With the providers that run our platform — they may only handle your information to provide their service to us:
  • Supabase, which hosts our database, sign-in, and file storage;
  • Vercel, which hosts our website and servers;
  • Anthropic, PBC, which provides the AI model behind our assistant, Stella (see section 5);
  • Resend, which sends our emails;
  • Expo and Apple, which deliver the mobile app's push notifications, and your web browser's push service, if you turn on website notifications;
  • Cloudflare, whose Turnstile check protects our sign-in and sign-up forms from automated abuse; and
  • shipment-tracking services, which receive container, booking, or tracking numbers so we can show where a shipment is.
• When required by law — with authorities, regulators, or courts where we are required to comply, or to protect our legal rights.
• In a business transfer — if our business is reorganised, merged, or acquired, your information may transfer with it, subject to this policy.

We do not sell your personal information, and we do not share it for advertising.

We and our providers may store and process information in countries other than your own, including the United States, where several of the providers in section 7 (among them Anthropic) are based. Wherever your information is handled, we take reasonable steps to keep it protected and to handle it in line with this policy.

We keep information for as long as your account is active and as long as we need it for the purposes above — including tax, accounting, and legal record-keeping (generally a few years after a transaction). When we no longer need it, we securely delete or anonymise it.

We protect your information with encryption in transit, access controls, and data isolation, so that each party can only reach its own data. No system is perfectly secure, but we work hard to keep yours safe. If you believe your account is at risk, please contact us straight away.

You can:

• Access the information we hold about you and get a copy.
• Correct anything that is wrong or incomplete.
• Delete information we no longer need to keep.
• Object to or limit certain uses of your information.
• Withdraw consent where we relied on it.
• Opt out of marketing messages at any time.

To make a request, email info@alma.com.pk. We may need to confirm your identity first, and we will respond as quickly as we can. Using these rights will never count against you. We do not make decisions that significantly affect you using automated processing alone. If you are unhappy with how we have handled your information, you can also raise it with the data-protection authority in your country.

The platform is for businesses and for people aged 18 or over. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will remove it.

If a security incident affects your personal information, we will act promptly to contain it and will notify you and any relevant authorities where we are required to do so, or where the incident poses a significant risk to you.

Our site may link to other services (for example, a WhatsApp “click to chat” link). Those services have their own privacy policies, and we are not responsible for them.

We may update this policy from time to time. When we do, we will change the date above, and for important changes we will let you know. The current version is always available at rawmaterial.live/privacy.