Privacy policy

1. Who we are

DamaSky is operated by [legal entity name] ("DamaSky", "we", "our", or "us"), a company registered in [registration jurisdiction]. We provide a cloud-based business-management platform ("the Service") to businesses across the Middle East and beyond.

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, use the Service, or interact with us. We are committed to complying with [applicable data-protection law — TO CONFIRM WITH COUNSEL] and other applicable data-protection regulations.

2. Data we collect

We collect data in the following ways:

Account and registration data. When you sign up, we collect your name, business name, email address, phone number, and billing information.

Usage data. We automatically collect information about how you interact with the Service, including log data (IP address, browser type, pages visited, timestamps), device identifiers, and feature usage.

Customer data you upload. As a business using DamaSky, you may upload or sync contact records, messages, deals, and other customer information. You remain the data controller for this data; we process it on your behalf as a data processor.

Communications. If you contact our support team or respond to surveys, we retain those communications.

Cookies and similar technologies. We use cookies and analytics tools to understand how visitors use our site and to improve the Service. See Section 5 for details.

3. How we use your data

We use personal data to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription
• Send transactional communications (account confirmations, invoices, security alerts)
• Send product updates, tips, or marketing messages where you have opted in or where we have a legitimate interest — you may unsubscribe at any time
• Respond to support requests and ensure customer satisfaction
• Comply with legal obligations and enforce our Terms of Service
• Protect the security and integrity of the platform

We do not sell your personal data or your customers' data to third parties.

4. Legal basis for processing

We process personal data on the following bases:

• Contract performance — processing necessary to deliver the Service you signed up for
• Legal obligation — processing required to comply with applicable law
• Legitimate interests — improving the Service, preventing fraud, and communicating relevant product updates, where these interests are not overridden by your rights
• Consent — where you have given explicit consent (e.g., for optional marketing communications), which you may withdraw at any time

5. Cookies and analytics

Our website uses:

• Essential cookies — required for core functionality such as session management and security. These cannot be disabled.
• Analytics cookies — help us understand traffic patterns and improve the site. We use [analytics provider, e.g. Google Analytics / Plausible] for this purpose.
• Functional cookies — remember your preferences (language, region, etc.).

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

6. Third-party processors

We share data with trusted third-party service providers only to the extent necessary to operate the Service. These include:

• Payment processing — Stripe, Inc. (payments and billing)
• Cloud hosting — [cloud provider, e.g. AWS / Google Cloud] (infrastructure)
• Email delivery — [email provider] (transactional and marketing emails)
• Analytics — [analytics provider]
• Communication — WhatsApp Business API (Meta Platforms) for messaging features

All processors are bound by data-processing agreements and may not use your data for any purpose other than providing services to us. We do not disclose personal data to third parties for their own marketing or advertising purposes.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. When you cancel your account:

• You may export your data at any time before cancellation
• We will delete or anonymize your account data within [30/90] days of account closure, unless retention is required by applicable law
• Aggregated, anonymized usage statistics may be retained indefinitely

Backup copies may persist for up to [90] days after deletion.

8. Your rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request erasure of your personal data ("right to be forgotten"), subject to legal retention obligations
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@damasky.com. [TO CONFIRM: this email address] We will respond within 30 days.

9. Security

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Role-based access controls
• Regular security assessments
• Strict data isolation between customer accounts

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. We will notify you of any data breach that poses a material risk to your rights, in accordance with applicable law.

10. International transfers

DamaSky serves customers across the Middle East and beyond. Your data may be stored or processed in [data center region — TO CONFIRM] by our infrastructure and service providers. Where data is transferred outside your country of residence, we ensure appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — in compliance with [applicable cross-border transfer rules — TO CONFIRM WITH COUNSEL].

11. Children's data

The Service is intended for business use by individuals aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice in the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

Email: privacy@damasky.com [TO CONFIRM] WhatsApp: +966 570 630 660 Website: www.damasky.com

[Legal entity name], [registered address] [TO CONFIRM]