Privacy policy

What we collect

• Your WhatsApp/phone number, optional name, language, and city.
• Booking details: salon, service, preferred time window, notes you give us.
• Call records from our calls to salons: the call may be recorded («المكالمة ممكن تتسجل»). We keep the audio recording and written transcript for 90 days with admin-only access, plus the outcome and summary. We call the salon, not the customer; we do not record calls with customers.
• If you reserve or buy credits: chosen pack, payment method, and the provider's payment ID and status. We never see or store card numbers or wallet PINs.
• Basic technical data: hashed IP address, pages visited, campaign tags (e.g. utm_source).

What we use it for

Making and confirming your booking, sending you booking updates, managing your credits, preventing abuse (for example one free booking per number), and improving the service. We do not sell your data and don't use it for third-party advertising.

Messages

We only message you about your bookings and credits, plus launch/payment-opening notices if you joined the list. Reply STOP / "وقف" any time.

Who processes it for us

Hosting (Render); AI calling, voice and transcription (Vapi, ElevenLabs, and telephony providers); WhatsApp messaging (Meta); payments (First Iraqi Bank / FIB, FastPay, Zain Cash). The salon you book with receives your name and booking details so they can serve you.

How long we keep it

Call audio and transcripts are kept for 90 days with admin-only access, then deleted. Booking and credit records are kept for 12 months, or longer if payment law requires. Waitlist entries are kept until launch plus 6 months unless you ask us to delete them.

Your choices

Ask us to see, correct or delete your data. We'll respond within 14 days.

Security

Admin access is password-protected, phone numbers are masked in logs, and payment secrets are kept server-side.

Operating entity

Al Masar Al Saree, Erbil, Kurdistan Region of Iraq. KRG Ministry of Trade licence no. 22472.