Privacy Policy

Draft — pending legal review. Last updated: [DATE].

1. Controller and processor

Under the UAE Personal Data Protection Law (PDPL) and equivalent regimes, you — our customer — are the data controller for the personal data that flows through your use of Algo PBX (your contacts, your callers, your agents). [ENTITY] (“Sahara Techs,” “we,” “us”), registered in [JURISDICTION], acts as your data processor: we host and operate the software; we do not decide why your data is collected or how it is used.

2. What we process

  • Call metadata (call detail records — who called whom, when, how long) — retained to support call history, reporting, and billing.
  • Call recordings and voicemail — retained for a fixed, configurable number of days, then permanently deleted by an automated nightly job. Retention is not indefinite by default.
  • WhatsApp/SMS messages and CRM records — contacts, companies, deals, and conversation history you or your agents create.
  • Gateway diagnostic events — technical events from your telecom gateway (call attempts, port/registration state), which can incidentally include phone numbers. These are retained for a fixed 30 days and then permanently deleted.

3. Support access

Our staff do not have standing access to your data. Support access is granted through a time-boxed mechanism: each grant has a mandatory reason, a hard expiry after which access is automatically revoked, and is recorded in an immutable platform audit log — visible to you on request. Absence of an active grant means our support staff can see nothing in your account.

4. Retention and deletion

Recordings and voicemail: deleted after your configured retention window (default set at account creation, adjustable by your admins). Gateway diagnostic events: deleted after 30 days, fixed. On account closure, we retain data only as long as necessary to comply with our own legal obligations or as you direct, then delete it.

5. Your rights

As the data subject’s controller, you are responsible for responding to their PDPL rights requests (access, correction, deletion). We will support you in fulfilling those requests against data we hold on your behalf. To make a request or ask a question, contact algopbx@saharatechs.com.