How ALYR handles your data

Who this is about

ALYR is software that businesses in Qatar use to take orders, bookings and payments on WhatsApp and to keep their records. Two groups of people have data in ALYR:

• The businesses that use ALYR (our clients) and their staff. For this data, alyr software W.L.L. is responsible.
• The customers of those businesses, who message them on WhatsApp or open an order, booking or payment page. For this data the business decides how it is used, and ALYR processes it on the business's behalf, as Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016) describes.

What we hold

About a business and its staff:

• names, email addresses and phone numbers, and the business's name, address and type;
• the sign-in codes we email, and a record of who did what in ALYR;
• the price agreed with ALYR and the payments made for it.

About a business's customers: their WhatsApp number or WhatsApp user ID, the name they show on WhatsApp, their messages with the business, their orders, bookings and credit balances, the status of their payments, and whether they agreed to be messaged or asked to stop. We never hold card numbers: payments are taken by the business's own payment provider, and we keep only its reference and status.

About visitors to alyr.qa: nothing. The site has no analytics, no advertising and no cookies. If you choose light or dark mode, that choice is kept in your own browser and never sent to us.

What we use it for

To run ALYR for the business: answer and record messages, take orders and bookings, send the messages the business asks for, and keep its records. To support the business, keep ALYR secure and fix faults. We may count totals that identify no business and no person, to run and improve ALYR.

We do not sell data, use it for advertising, or message a business's customers for ourselves. A business can send marketing messages only to people who agreed to receive them, and anyone who writes STOP is not messaged again.

WhatsApp and Meta

Every WhatsApp message goes through Meta's official WhatsApp Business Platform. When a business connects its WhatsApp number to ALYR, Meta shares that account's messages, phone numbers and message templates with ALYR so ALYR can send and receive messages for the business. We use that access only to run ALYR for that business. Meta also handles these messages under its own terms and privacy policy.

Who else receives it

Only the services ALYR needs to work, each for its own part:

• Google Cloud, Doha region, Qatar: ALYR's servers and database, where the data above is kept.
• Meta (WhatsApp Business Platform): the WhatsApp messages and the numbers and names that come with them, outside Qatar.
• Cloudflare: the website and the pages customers open from WhatsApp, passing through its network, outside Qatar.
• Resend: the emails ALYR sends, such as sign-in codes, weekly reports to a business owner, and receipts or invoices a business emails to its customer, in the European Union.
• Zoho: ALYR's own mailboxes, which hold the emails people send us, outside Qatar.
• The business's own payment provider and, if the business connects it, its own sales or accounting system.

We share data with anyone else only when the law requires it.

How long we keep it

For as long as the business uses ALYR. When a business stops, it can ask for a copy of its records within 30 days. 60 days after it stops, we delete its data, except what the law requires us to keep, such as our invoices to it. Copies in our backups are gone within 35 days after that.

Your rights

You can ask to see the data we hold about you, to correct it or to delete it.

If you are a customer of a business that uses ALYR, ask the business first: it decides about your data. You can also write to us and we will help the business answer you. To stop a business's messages, reply STOP in the chat.

If you are a business or a member of its staff, write to hello@alyr.qa. We answer within 30 days.

Deleting your data

To ask us to delete your data:

• Write to hello@alyr.qa from the email address or phone number we know you by, and say what you want deleted.
• If you connected a WhatsApp Business account to ALYR through Facebook, you can also remove ALYR in your Facebook settings, under Business integrations. That stops ALYR's access; write to us as well if you want the data deleted.
• We confirm by email when it is done, within 30 days.

If you are a customer of a business, we delete your data with the business's agreement, because the records are the business's.

How we protect it

Each business's records are kept apart inside the database itself, so one business cannot see another's. Connections are encrypted. Only the people at ALYR who need to see data can, and they are bound to keep it confidential. If a breach affects a business's data, we tell the business without delay.

Changes and contact

When this policy changes, we update this page and its date. Questions about your data go to hello@alyr.qa; security reports go to security@alyr.qa.

alyr software W.L.L., commercial registration 255539, Doha, Qatar.