1. Information We Collect

A. Information Provided Directly

• Contact and Inquiries: Name, business email address, phone number, company name, and details provided when booking calls or submitting project briefs.
• Project Data: Business logic, brand guidelines, or operational workflow details shared with us for software execution.

B. Automatically Collected Data

Technical data including IP address, browser type, operating system, device metrics, and interaction analytics collected via website cookies.

2. How We Use Your Data

We use the information collected to:

• Deliver, configure, and maintain custom web applications and AI workflow integrations.
• Communicate project updates, invoices, and support responses.
• Optimize website performance, design usability, and analytics.

3. Enterprise AI Data Governance and Privacy Guarantee

• Zero Public Model Training: When configuring custom AI models, RAG systems, or API workflows, Al Masar utilizes enterprise privacy standards. Your proprietary data, confidential documents, and customer inputs processed via third-party AI APIs (for example OpenAI and Anthropic) are configured to prevent inclusion in public base-model training datasets.
• Input and Output Ownership: You retain complete ownership over all input data submitted to your custom AI applications and all output data generated by your custom workflows.

4. Data Sharing and Third-Party Infrastructure

We do not sell, rent, or trade your personal or business data. Data is shared with external platforms only as strictly necessary to host and power your application, including:

• Cloud Hosting and Storage: Vercel, Netlify, Supabase.
• AI and API Providers: OpenAI, Anthropic, or specialized vector database providers.
• Communication and Analytics: Email transaction services (for example Resend) and analytics platforms.

All third-party services are evaluated to ensure compliance with modern data processing and confidentiality standards.

5. Personal Data Rights in Kenya

Where applicable, personal data is handled in accordance with Kenya's Data Protection Act, 2019 and applicable regulations. Subject to the law and its exceptions, you may ask to be informed about how your personal data is used, request access to or correction or deletion of it, object to its processing, and withdraw consent where processing is based on consent.

To make a request or raise a privacy concern, contact us at contact@getalmasar.com.

6. Cookies and Tracking

We use functional and performance cookies to enhance navigation and site performance. You can control or disable cookie settings directly within your web browser preferences.

7. Updates to This Policy

We reserve the right to modify this Privacy Policy at any time. Any revisions are reflected with an updated Last Updated date at the top of this document.

8. Data Deletion Request

If you want Al Masar to delete your personal data, you can submit a deletion request at any time.

To process your request quickly and securely, please follow these steps:

1. Send an email to contact@getalmasar.com with the subject line: Data Deletion Request.
2. Include your full name, phone number, and the email address used when contacting or working with Al Masar.
3. Briefly describe what data you want deleted (for example: contact form data, consultation records, or project communication history).
4. Wait for identity verification instructions. We may request limited details to confirm ownership before deleting data.
5. After verification, we process eligible deletion requests within a reasonable timeframe in line with legal and operational obligations.

If certain records must be retained for legal, security, or contractual reasons, we will inform you clearly.

9. Contact Us

For privacy-related queries or data access requests:

• Email: contact@getalmasar.com