Privacy policy
Last updated
September 2026. We respect your privacy and commit to Saudi Arabia’s Personal Data Protection Law.
1 · Information collected
The contact form collects your name, business details, mobile number, requested service and preferred contact time. A customer account stores your email, business profile, supplied knowledge, quotes, payment references and project tasks and deliveries. Card details are not stored. Network fingerprints prevent abuse. Secure cookies maintain owner and customer login; customer sessions expire after one week and hashed verification codes after ten minutes. They are not tracking cookies.
2 · Commission calculator
Calculator inputs stay in your browser. They are not sent to us or stored by us.
3 · Analytics
We use anonymous visit statistics without cookies or personal identifiers. These statistics do not allow us to identify you.
4 · Purpose
We use your details to respond to your enquiry, verify your account and payment, set up and operate your project and manage delivery. We do not send marketing messages unless you explicitly request them.
5 · Providers and sharing
We do not sell your data or share it for marketing. Cloudflare hosts the site, databases and dedicated project resources, and runs Workers AI for WhatsApp text and voice-note transcription. Resend sends email verification codes. Meta handles WhatsApp messages and account connections. Contact-form summaries may be sent to the owner through Cloudflare email to Gmail; when enabled, Google Sheets holds a follow-up copy. When enabled, MyFatoorah processes payments; we retain references without card details. Website voice calls and POS integrations require providers defined for the customer project before activation; they differ from WhatsApp voice notes.
6 · Retention
Contact enquiries are deleted after one year without updates. Abuse-prevention fingerprints expire within a week and dashboard audit logs after six months. Customer account and project records remain while the service is delivered; expired login codes and sessions are removed automatically. On termination or deletion requests, payment references and required records are reviewed and any required retention and reason are explained to the customer. Operational copies in WhatsApp or tracking sheets are also reviewed for deletion.
7 · Your rights
You may request access, correction, deletion or withdrawal of consent at any time. Contact us by WhatsApp or email; we respond within thirty days.
8 · Protection
The site uses HTTPS. Owner access requires a password and customer access a temporary email code. Customer actions are restricted to their account; each project has separate operational resources and data.
9 · Restaurant customer data
Restaurant customer data belongs to the restaurant. We process it on its behalf to run the service and export it in full when the service ends.
10 · Contact
For privacy enquiries: Hamoud Abdulrahman bin Hamoud Al-Anazi, freelance document FL-883138901, Hafar Al-Batin, Saudi Arabia.