Privacy Policy

1. Who we are

This website, goai.qa, is operated by Go A I for Artificial Intelligence Consultancy W.L.L., a company registered in the State of Qatar under commercial registration number 246530, in Doha, Qatar. In this policy, “we”, “us” and “GoAI” mean that company.

For this website and for a demo enquiry you send us, we are the controller of your personal data: we decide what is collected and why. Write to us about any of it at contact@goai.qa.

2. Two different relationships

GoAI reaches you in one of two ways, and this policy keeps them apart, because who answers for your data is not the same in both.

The website. If you are reading this page or sending us a demo enquiry, you are dealing with us directly, we are the controller, and the rest of this policy describes it. There is very little of it.

The product. If you messaged a business on WhatsApp, Instagram or the phone and an assistant answered, that business is our client. It decides what the assistant is told, what it may look up and how long a conversation is kept. For those messages the client is the controller, we act on its instructions as its processor, and the client's own privacy policy governs the conversation, not this one.

Everything below is about the website, except the clause on conversations we handle for a client, which is about the product.

3. What we collect on this website

The site is a set of static pages. It embeds nothing from anybody else and even the fonts are served from this domain, so opening a page here announces your visit to nobody. What exists is this:

• A demo enquiry, if you send one. The form asks for your name, your business name and a WhatsApp number, and optionally an email address, a business type and a message. Pressing send posts those answers to a small function running on this site, which emails them to us through Resend, our email provider, and keeps no copy of its own. Resend, Inc. is a United States company, so an enquiry leaves Qatar on its way to our mailbox, and the clause below on data that leaves Qatar covers it. What we hold afterwards is an ordinary email. The page tells you whether it sent, and if it did not, it gives you an address to write to instead.
• One thing you did not type, sent with a demo enquiry: how long the page had been open when you pressed send. It is read once on the way through, to tell an automated submission from a person, and it is neither stored nor put in the email.
• Two settings kept by your own browser: the theme you chose, and your answer to the storage notice. They stay on your device and are never sent to us or to anyone else. The Cookie Policy lists them by name.
• Cloudflare Web Analytics, which tells us which pages are read, roughly which country a visit came from, what led you here and how fast the page loaded. It sets no cookie, stores nothing on your device and assigns you no identifier, so it cannot recognise you on a second visit or follow you to another site. There is nothing here to consent to and nothing to switch off, which is why you are not asked. The Cookie Policy explains it in full.
• Whatever request log our hosting provider, Cloudflare, Inc., keeps as a matter of course when it serves a page, which typically includes an IP address, the page requested and the time. Cloudflare is a United States company and serves this site from its global edge network, so a request you make here is answered by whichever of its locations is nearest to you, and that log may sit outside Qatar. We do not use it to build a profile of you and we do not connect it to anything else.

4. Why we use it

• To answer a demo enquiry and arrange the demo. That is the only reason the form exists.
• To keep the site working the way you left it, which is what the two browser settings do.
• To see which parts of this site are read and which are ignored, so it can be made better. That is the only thing the analytics is for, and it happens only with your consent.
• To keep the site available and secure, which is what a server log is for.

We do not use any of it for advertising, we do not sell personal data, and we do not share it for anybody else's marketing.

5. Our lawful basis, and withdrawing consent

Under the Personal Data Privacy Protection Law, personal data is processed with the consent of the individual it belongs to, unless the processing is necessary for a lawful purpose. Sending us a demo enquiry is your consent to us using those details to answer you. The two browser settings are necessary to give you the site you asked for, and neither identifies you. The analytics is neither necessary nor assumed: it runs on your consent alone, given by pressing Allow, and on nothing else.

You may withdraw your consent at any time. For the analytics, the control is on the Cookie Policy page and takes one click: it stops the measurement and deletes the cookies. For anything else, write to contact@goai.qa. We then stop and delete what we hold, unless the law requires us to keep it. Withdrawing does not make what we did beforehand unlawful, and it does not oblige us to keep answering an enquiry whose details we no longer have.

6. What we never collect

We collect no personal data of a special nature. Under the law that means data relating to ethnic origin, children, health, physical or mental condition, religious belief, marital relations or criminal record. Nothing on this site asks for any of it, and processing it in Qatar requires a permit from the competent department that we neither hold nor need.

Please keep such details out of a demo enquiry. If any arrive, we delete them and answer without them.

7. Who else sees it

Almost nobody. A demo enquiry is read by the people at GoAI who answer it. Beyond that, personal data reaches only the providers we need in order to operate at all, each of which acts on our instructions and may not use it for its own purposes:

• Cloudflare, Inc., a United States company, which hosts these pages and serves them from its global edge network.
• Resend, Inc., a United States company, which is the email provider that carries a demo enquiry from this site to our mailbox.
• Cloudflare also runs our analytics, on the same terms and as the same processor. It receives what the Cookie Policy sets out and nothing more.

We disclose personal data to anyone else only where the law requires it, for example on a valid request from a competent authority in Qatar. There is no advertising network and no data broker on this list, and nothing on this site is sold, shared for anybody's marketing, or used to build a profile of you.

8. Data that leaves Qatar

Some of those providers operate outside Qatar, and the product's own processing does too: the assistant's language model, the messaging and telephony providers and the platform it runs on are not all hosted here. A demo enquiry you send from this site is one of them: it passes through Resend, Inc. in the United States on its way to our mailbox.

So personal data may be transferred outside the State of Qatar. Where it is, we transfer it only where the transfer is necessary for the purpose the data was collected for, we require the provider to protect it under terms no weaker than this policy, and we do not make a transfer that would cause you harm or breach the Personal Data Privacy Protection Law. If you want to know which provider handles a particular piece of your data, ask us at contact@goai.qa and we will tell you.

Our analytics is not one of them in the usual sense: Cloudflare serves this site and measures it from the same global edge network, so a visit is counted at whichever of its locations answered you. It sets nothing on your device and records no identifier, so there is nothing about you in it to transfer.

9. How long we keep it

• A demo enquiry: as long as it takes to answer you and arrange the demo, then no longer than 12 months. If you become a client, the agreement between us governs instead.
• The two browser settings: until you clear this site's storage in your browser. They live on your device, so we cannot delete them for you; the Cookie Policy explains how you do it yourself.
• Analytics: nothing is kept on your device at all, because nothing is written there. What Cloudflare holds on our behalf is the page-level counts described in the Cookie Policy, and no record of an individual visit.
• Server logs: for as long as our hosting provider keeps them as a matter of course.

When a period ends we delete the data, or strip it of anything that could link it back to you.

10. How it is protected

Access to enquiries is limited to the people who need it in order to answer them. Traffic to this site and to our own systems is encrypted in transit. Every client of the product sits in its own tenant, with its own data and its own assistant, so one client's material is not reachable from another's. Backups run nightly, are encrypted, and are checked the next morning.

No measure is absolute and we would rather say so than imply otherwise. What we can promise is that we hold less than we could, which is the only protection that never fails.

11. If something goes wrong

If personal data we hold is lost, disclosed or reached by somebody who should not have it, and that could cause you serious harm, we notify the competent department and we notify you, as the Personal Data Privacy Protection Law requires. We will tell you what happened, not merely that an incident occurred.

12. Your rights

Under the Personal Data Privacy Protection Law you have the right to:

• be told whether we hold personal data about you, and to see it;
• ask us for a copy of it;
• have it corrected if it is wrong, or completed if it is missing something;
• have it erased once we no longer have a reason to hold it;
• object to our processing of it, and ask us to stop;
• withdraw a consent you gave, at any time;
• object to your personal data being used for direct marketing, and to any analysis of it carried out for direct marketing;
• complain, to us and to the supervisory authority.

To exercise any of them, write to contact@goai.qa. We answer without undue delay and we do not charge for it. We may first ask you to confirm who you are, which protects you rather than us.

If your question is about a conversation with a business's assistant rather than about this website, see the clause below on conversations we handle for a client.

13. Children

This site is written for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. A child's data is data of a special nature under the Personal Data Privacy Protection Law and needs a permit we do not hold. If you believe a child has sent us personal data, write to contact@goai.qa and we will delete it.

14. Conversations we handle for a client

When a business uses GoAI, its customers' messages are processed by us on that business's instructions. There, the business is the controller and we are its processor, and the business's own privacy policy is the one that governs the conversation. We are not drafting it here, and we will not speak for it.

What that means in practice:

• The business decides what the assistant is told, which of its systems the assistant may read, and how long conversations are kept.
• We use those messages to run the service for that business and for nothing else. They are never used to advertise to anyone, and one client's material never answers another client's customers.
• The assistant reads. It does not book, cancel, charge, refund or change a record; those stay with the business's own staff, in the business's own systems.
• A conversation goes to a person at the business whenever the assistant is asked for something it was not given rules for.
• If you want your messages seen, corrected or deleted, ask the business. If you ask us instead, we pass the request on and help the business answer it; we do not act on your data ourselves except on its instructions.

15. Complaining

If you are unhappy with how we have handled your personal data, tell us first at contact@goai.qa. We would rather fix it than be reported for it.

You also have the right to complain to the supervisory authority in Qatar. The Personal Data Privacy Protection Law is administered by the National Cyber Security Agency. Coming to us first is not a condition of going to them.

16. Changes to this policy

If what we do changes, this page changes with it, and so does the date at the top. Where a change materially affects how your personal data is used, we say so on this page rather than leaving you to compare versions.

17. Contact

Go A I for Artificial Intelligence Consultancy W.L.L., Doha, Qatar.

Anything about your personal data, and anything else: contact@goai.qa.