This Privacy Policy explains how Almadar Alearabia For Marketing ("Iskra," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our Service. By using Iskra, you agree to the practices described here.
When you sign up, we collect: your email address, business name, business type, location (if provided), language preferences, and subscription information. Payment card details are processed by Stripe; we never see or store your full card number.
To run your AI Employees, you provide: services you offer, FAQs, business hours, escalation rules, custom prompts, and similar operational details.
When your AI Employee interacts with your customers, we process: conversation transcripts, contact details your customers share (name, email, phone), booking and lead data, and any media exchanged. You are the controller of this data; we act as the processor.
We automatically collect: IP address, browser type, device information, pages visited, and timestamps. We use minimal cookies necessary for authentication and session management.
We do not use your Customer Data to train third-party AI models. We do not sell your data. We do not share customer lists with advertisers.
If you or your end-customers are in the EEA or UK, our legal bases are:
We rely on these sub-processors to deliver the Service:
| Sub-processor | Purpose | Region |
|---|---|---|
| Stripe, Inc. | Payment processing | USA / global |
| Supabase | Application database, authentication | USA |
| Resend | Transactional email delivery | USA |
| Anthropic (Claude) | AI language model | USA |
| Twilio | SMS and voice (when enabled) | USA |
| Railway | Application hosting | USA |
| Cloudflare | DNS, CDN, DDoS protection | Global |
Your data may be processed in the United States, EU, or other jurisdictions where our sub-processors operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
Depending on your jurisdiction, you may have the right to:
Email info@iskra.marketing to exercise any of these rights. We respond within 30 days.
We protect your data using industry-standard measures: TLS encryption for data in transit, encrypted database storage at rest, role-based access controls, regular security reviews, and prompt incident response. No system is 100% secure — we will notify affected users without undue delay if a breach affects your data.
We use a minimal set of essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.
The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18.
We may update this Privacy Policy from time to time. Material changes will be emailed to active subscribers at least 14 days before taking effect.
Privacy inquiries: info@iskra.marketing
Controller: Almadar Alearabia For Marketing, United Arab Emirates