Privacy Policy

1.About Edara

Edara is a UAE-based technology company. We provide software and digital services that help businesses manage operations and customer communication, including WhatsApp Business automation, chatbots and automated workflows, customer CRM tools, order, booking, and notification automation, POS and business software integrations, and AI-assisted business solutions.

This policy applies to the Edara website and to information we receive when you enquire about or use Edara services. It is written for visitors, prospective customers, and businesses that work with Edara. It does not invent a specific legal entity name or trade-licence number, and it should be read together with any contract you have with Edara.

2.Information we collect

The information we collect depends on how you interact with Edara. We do not seek to collect sensitive personal information (such as health data, biometric identifiers, or government ID numbers) through the public website unless you choose to include it in a message you send us. Please do not send that kind of information unless we have asked for it in a specific, documented engagement.

Information you submit directly

When you contact us, request a quote, or enquire about a plan, you may provide:

• Name
• Business name
• Email address
• Phone number and country calling code
• Messages, support requests, and other details you include in a form or email
• The solution or WhatsApp plan you are interested in
• Marketing preferences, such as whether you agree to receive updates

Information collected automatically

When you visit the website, your browser and our hosting environment may automatically record technical information that is typical of most websites, such as IP address, browser type, device and operating-system details, approximate location derived from IP address, pages viewed, referring URL, and timestamps. We may also store a language preference in your browser so the site can be shown in English or Arabic.

Information processed when a business uses Edara

If a business customer uses Edara products (for example WhatsApp automation, CRM, or integrations), Edara may process information that the business submits or that is generated in providing the service. That can include account and subscription details, WhatsApp Business identifiers, business profile information, customer and operational records the business uploads or connects, message content and related metadata needed to run automations, and technical logs used to operate and secure the service.

Edara does not treat website analytics from third-party advertising pixels as active on this site unless those tools are separately configured. See “Cookies and analytics” below.

3.How we use information

We use information for the purposes described in this policy, including to:

• Provide, operate, and maintain Edara services
• Respond to enquiries, quotes, and support requests
• Set up WhatsApp automation, CRM, and other integrations you request
• Send service-related communications, such as replies to your enquiry
• Process subscriptions and invoices when those commercial services are in place
• Improve reliability, security, and performance of our website and services
• Monitor usage and diagnose technical issues
• Prevent fraud, misuse, and unauthorised access
• Comply with legal obligations that apply to us
• Send marketing communications only where permitted and where consent or another valid legal basis exists

We do not use the information you submit through this website to train general-purpose AI models. If a specific Edara product later uses AI to assist a business customer (for example drafting a reply inside that customer’s own workflow), that processing is described to the customer in the relevant service terms and is not used in this policy as a claim that visitor form data is used for model training.

4.WhatsApp and Meta services

Edara may integrate with WhatsApp Business Platform and related Meta services so that businesses can send and receive customer messages, use templates, and run automations. Messages you or a business customer send and receive through those channels may be processed by WhatsApp and Meta under their own terms and privacy policies. Edara does not control WhatsApp’s or Meta’s independent processing.

To provide automation, Edara may process message content, phone numbers, timestamps, delivery status, templates, language settings, and related metadata. Businesses that use Edara are responsible for obtaining appropriate customer consent and for complying with WhatsApp Business, Meta, and applicable messaging rules in their markets.

WhatsApp messages may be protected by encryption on the WhatsApp application. Once messages are delivered to a business system, API, or automation platform, they are no longer under Edara’s exclusive control in the same way as a personal chat, and they should not be described as end-to-end encrypted for all business processing. Review Meta’s and WhatsApp’s current documentation for how business messaging works.

Official policies:

• WhatsApp Privacy Policy
• Meta Privacy Policy

5.Customer data processed on behalf of businesses

When a business uses Edara to process its own customers’ information, that business generally decides why the data is collected and how it should be used. Edara processes the information to provide the contracted services and to follow documented instructions from the business, together with the operational steps needed to host, secure, and support those services.

The business customer is responsible for providing its own notices, collecting required consent, establishing a lawful basis, handling customer requests, and meeting its compliance obligations. Businesses must not upload, connect, or instruct Edara to process information they are not authorised to use.

6.Legal bases and consent

Depending on the context, Edara may process information on one or more of the following bases. No single basis applies to every activity:

• Consent, for example where you agree to receive marketing updates
• Contractual necessity, where processing is needed to respond to a request or to provide a service you have asked for
• Legitimate business interests, such as securing the website, improving service quality, and understanding how the site is used, balanced against your rights
• Legal obligations that apply to Edara
• Processing that is reasonably necessary to detect, prevent, or investigate fraud, misuse, or security threats

Where we rely on consent, you may withdraw it using the contact details in this policy. Withdrawal does not affect processing that already took place, and it may not affect processing that continues on another valid basis (for example completing a support request).

7.Sharing and disclosure

Edara does not sell personal information. We share information only when reasonably necessary to operate the website and services, including with:

• Hosting and infrastructure providers that serve the website
• WhatsApp and Meta, when a business uses Edara services that connect to those platforms
• Professional advisers, such as lawyers or accountants, where required
• Government authorities or law enforcement where we are legally required to disclose information
• Other service providers that support Edara under contractual obligations, if and when those providers are engaged to operate email delivery, payments, authentication, databases, analytics, or security

This website’s public contact form currently collects enquiry details in the browser so that Edara can follow up. We do not list a specific payment processor, analytics vendor, or email gateway in this policy unless that provider is actually configured for production use. When additional processors are engaged, we expect them to handle information under appropriate contractual and security obligations.

8.International data transfers

Edara is based in the United Arab Emirates. Service providers that host websites, deliver email, or operate cloud infrastructure may process information in countries outside the UAE. Where that happens, Edara takes reasonable contractual, technical, and organisational measures appropriate to the service and to applicable requirements.

This policy does not claim a specific transfer mechanism (such as a named standard contractual clause) unless that mechanism is documented in a particular vendor agreement.

9.Data retention

Edara retains information only for as long as reasonably necessary for the purposes described in this policy. How long that is depends on the type of information, the status of a customer relationship, legal and accounting requirements, dispute resolution, security, and backup cycles.

Business customers may have additional retention duties for their own customer data. When information is no longer required, Edara may delete it, anonymise it, or securely archive it, subject to legal holds and the practical limits of backup systems.

We do not publish fixed retention periods in this policy because they vary by record type and by whether a commercial service is active.

10.Security

Edara uses reasonable technical and organisational safeguards appropriate to the nature of the information and to the systems we operate. For this website, that includes serving pages over HTTPS where the site is hosted with a valid certificate, keeping credentials out of the public codebase through environment-based configuration, and limiting operational access to people who need it to run the site and respond to enquiries.

No method of transmission or storage is completely secure. We do not promise that unauthorised access, hardware failure, or other events can never occur. If we become aware of a security incident that affects your personal information, we will take steps that are reasonable and required under applicable law.

11.Cookies and analytics

The Edara website stores your language preference locally in the browser so English or Arabic can be shown on later visits. That preference is essential to how the bilingual site works.

We use Google Analytics only after you select “Accept analytics”. It helps us understand visits, pages viewed, interactions, and device information. Google receives this usage data and may process it outside the UAE. Analytics is not loaded before acceptance or when you reject it. Advertising storage, advertising user data, Google signals, and ad personalisation are disabled.

We save your cookie choice in local storage (edara-cookie-consent) for 180 days. After acceptance, Google Analytics uses _ga and _ga_* cookies to distinguish visits and sessions, configured to expire after 180 days without renewal. You can change your choice using “Cookie settings” in the footer. Rejecting disables future analytics collection and removes these analytics cookies from this site; it does not erase data already sent to Google. Your language preference remains available.

12.Marketing communications

You may receive marketing messages from Edara only where that is permitted, including where you have consented through our contact form or another valid channel. You can opt out by using an unsubscribe method we provide, by emailing us, or by sending an opt-out request where that channel allows it.

Even after you opt out of marketing, we may still send service or transactional messages when they are necessary — for example to reply to a support request or to confirm a commercial arrangement.

13.Your rights and choices

Subject to applicable law, you may have the right to request access to personal information we hold about you, to ask for correction or deletion, to request restriction of processing or object to certain processing, to withdraw consent, to ask for information about how we process data, and to complain to an appropriate authority.

We may need to verify your identity before fulfilling a request, and some requests may be limited where the law allows (for example where we must keep records, or where another person’s rights would be affected). Send requests to the privacy email listed in “Contact us”. If you are a customer of a business that uses Edara, you may also need to contact that business, because they often control how your information is used in their WhatsApp or CRM workflows.

14.Children’s privacy

Edara’s website and business services are directed to organisations and adults. We do not knowingly collect personal information from children through this website. If you believe a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.

15.Third-party websites and services

The Edara website and products may link to or integrate with third-party services, including social media, WhatsApp, and Meta. Those services have their own privacy practices. Edara is not responsible for how those parties independently collect or use information. You should read their policies before using them.

16.Changes to this policy

Edara may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If a change is material, we may also provide a notice on the website or through another appropriate channel. Continued use of the website after an update means you should read the revised policy.

17.Contact us

For privacy questions, requests, or concerns, contact Edara using the details below. This address is a configuration value that can be updated in one place if Edara’s privacy mailbox changes.

Email: privacy@edara.ae