Privacy Policy

1. Who we are

This website, goai.qa, is operated by Go A I for Artificial Intelligence Consultancy W.L.L., a company registered in the State of Qatar under commercial registration number 246530, in Doha, Qatar. In this policy, “we”, “us” and “GoAI” mean that company.

For this website and for a demo enquiry you send us, we are the controller of your personal data: we decide what is collected and why. Write to us about any of it at operations@goai.qa. Our general address is hello@goai.qa.

2. Two different relationships

GoAI reaches you in one of two ways, and this policy keeps them apart, because who answers for your data is not the same in both.

The website. If you are reading this page or sending us a demo enquiry, you are dealing with us directly, we are the controller, and the rest of this policy describes it. There is very little of it.

The product. If you messaged a business on WhatsApp, Instagram or the phone and an assistant answered, that business is our client. It decides what the assistant is told, what it may look up and how long a conversation is kept. For those messages the client is the controller, we act on its instructions as its processor, and the client's own privacy policy governs the conversation, not this one.

Everything below is about the website, except the clause on conversations we handle for a client, which is about the product.

3. What we collect on this website

The site is a set of static pages. It embeds nothing from anybody else and even the fonts are served from this domain, so opening a page here announces your visit to nobody. The one exception is Google Analytics, and it runs only if you have said yes to it; until then, and after a refusal, no Google code is loaded at all. What exists is this:

• A demo enquiry, if you send one. The form asks for your name, your business name and a WhatsApp number, and optionally an email address, a business type and a message. The form does not post to a server of ours: it opens your own email program with the details filled in, so nothing reaches us until you press send there, and what we hold afterwards is an ordinary email in our mailbox.
• Two settings kept by your own browser: the theme you chose, and your answer to the storage notice. They stay on your device and are never sent to us or to anyone else. The Cookie Policy lists them by name.
• If, and only if, you allow it: Google Analytics, which sets two cookies and tells us which pages are read, which buttons are pressed, roughly which country a visit came from and what led you here. It receives your IP address, truncated before storage, and no name, email address or phone number. Refusing is one click, is remembered, and deletes those cookies. The Cookie Policy names them and explains it in full.
• Whatever request log our hosting provider, Cloudflare, Inc., keeps as a matter of course when it serves a page, which typically includes an IP address, the page requested and the time. Cloudflare is a United States company and serves this site from its global edge network, so a request you make here is answered by whichever of its locations is nearest you and that log may sit outside Qatar. We do not use it to build a profile of you and we do not connect it to anything else.

4. Why we use it

• To answer a demo enquiry and arrange the demo. That is the only reason the form exists.
• To keep the site working the way you left it, which is what the two browser settings do.
• To see which parts of this site are read and which are ignored, so it can be made better. That is the only thing the analytics is for, and it happens only with your consent.
• To keep the site available and secure, which is what a server log is for.

We do not use any of it for advertising, we do not sell personal data, and we do not share it for anybody else's marketing.

5. Our lawful basis, and withdrawing consent

Under the Personal Data Privacy Protection Law, personal data is processed with the consent of the individual it belongs to, unless the processing is necessary for a lawful purpose. Sending us a demo enquiry is your consent to us using those details to answer you. The two browser settings are necessary to give you the site you asked for, and neither identifies you. The analytics is neither necessary nor assumed: it runs on your consent alone, given by pressing Allow, and on nothing else.

You may withdraw your consent at any time. For the analytics, the control is on the Cookie Policy page and takes one click: it stops the measurement and deletes the cookies. For anything else, write to operations@goai.qa. We then stop and delete what we hold, unless the law requires us to keep it. Withdrawing does not make what we did beforehand unlawful, and it does not oblige us to keep answering an enquiry whose details we no longer have.

6. What we never collect

We collect no personal data of a special nature. Under the law that means data relating to ethnic origin, children, health, physical or mental condition, religious belief, marital relations or criminal record. Nothing on this site asks for any of it, and processing it in Qatar requires a permit from the competent department that we neither hold nor need.

Please keep such details out of a demo enquiry. If any arrive, we delete them and answer without them.

7. Who else sees it

Almost nobody. A demo enquiry is read by the people at GoAI who answer it. Beyond that, personal data reaches only the providers we need in order to operate at all, each of which acts on our instructions and may not use it for its own purposes:

• Cloudflare, Inc., a United States company, which hosts these pages on Cloudflare Pages and serves them from its global edge network.
• Our email provider, which carries and stores the enquiry you send.
• Google LLC, which runs Google Analytics for us, and only if you have allowed it. It receives what the Cookie Policy sets out and nothing more, it acts on our instructions, and it is told in every request that it may not use any of it for advertising or personalisation.

We disclose personal data to anyone else only where the law requires it, for example on a valid request from a competent authority in Qatar. There is no advertising network and no data broker on this list. Google is on it as a measurement processor and only with your consent; nothing on this site is sold, shared for anybody's marketing, or used to build a profile of you.

8. Data that leaves Qatar

Some of those providers operate outside Qatar, and the product's own processing does too: the assistant's language model, the messaging and telephony providers and the platform it runs on are named on our home page, and they are not all hosted here.

So personal data may be transferred outside the State of Qatar. Where it is, we transfer it only where the transfer is necessary for the purpose the data was collected for, we require the provider to protect it under terms no weaker than this policy, and we do not make a transfer that would cause you harm or breach the Personal Data Privacy Protection Law. If you want to know which provider handles a particular piece of your data, ask us at operations@goai.qa and we will tell you.

Google Analytics is one of them, and it is the only one on this website that a visitor can switch off. If you allow it, what it collects is sent to Google LLC and held on Google's servers outside the State of Qatar, including in the United States. If you refuse it, or simply do not answer, nothing about your visit leaves this country by that route, because no Google code is loaded.

9. How long we keep it

• A demo enquiry: as long as it takes to answer you and arrange the demo, then no longer than 12 months. If you become a client, the agreement between us governs instead.
• The two browser settings: until you clear this site's storage in your browser. They live on your device, so we cannot delete them for you; the Cookie Policy explains how you do it yourself.
• Analytics, if you allowed it: the two cookies expire two years after your most recent visit, and refusing deletes them at once. What Google holds on our behalf is kept for 14 months from your last activity and then deleted by Google.
• Server logs: for as long as our hosting provider keeps them as a matter of course.

When a period ends we delete the data, or strip it of anything that could link it back to you.

10. How it is protected

Access to enquiries is limited to the people who need it in order to answer them. Traffic to this site and to our own systems is encrypted in transit. Every client of the product sits in its own tenant, with its own data and its own assistant, so one client's material is not reachable from another's. Backups run nightly, are encrypted, and are checked the next morning.

No measure is absolute and we would rather say so than imply otherwise. What we can promise is that we hold less than we could, which is the only protection that never fails.

11. If something goes wrong

If personal data we hold is lost, disclosed or reached by somebody who should not have it, and that could cause you serious harm, we notify the competent department and we notify you, as the Personal Data Privacy Protection Law requires. We will tell you what happened, not merely that an incident occurred.

12. Your rights

Under the Personal Data Privacy Protection Law you have the right to:

• be told whether we hold personal data about you, and to see it;
• ask us for a copy of it;
• have it corrected if it is wrong, or completed if it is missing something;
• have it erased once we no longer have a reason to hold it;
• object to our processing of it, and ask us to stop;
• withdraw a consent you gave, at any time;
• object to your personal data being used for direct marketing, and to any analysis of it carried out for direct marketing;
• complain, to us and to the supervisory authority.

To exercise any of them, write to operations@goai.qa. We answer without undue delay and we do not charge for it. We may first ask you to confirm who you are, which protects you rather than us.

If your question is about a conversation with a business's assistant rather than about this website, see the clause below on conversations we handle for a client.

13. Children

This site is written for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. A child's data is data of a special nature under the Personal Data Privacy Protection Law and needs a permit we do not hold. If you believe a child has sent us personal data, write to operations@goai.qa and we will delete it.

14. Conversations we handle for a client

When a business uses GoAI, its customers' messages are processed by us on that business's instructions. There, the business is the controller and we are its processor, and the business's own privacy policy is the one that governs the conversation. We are not drafting it here, and we will not speak for it.

What that means in practice:

• The business decides what the assistant is told, which of its systems the assistant may read, and how long conversations are kept.
• We use those messages to run the service for that business and for nothing else. They are never used to advertise to anyone, and one client's material never answers another client's customers.
• The assistant reads. It does not book, cancel, charge, refund or change a record; those stay with the business's own staff, in the business's own systems.
• A conversation goes to a person at the business whenever the assistant is asked for something it was not given rules for.
• If you want your messages seen, corrected or deleted, ask the business. If you ask us instead, we pass the request on and help the business answer it; we do not act on your data ourselves except on its instructions.

15. Complaining

If you are unhappy with how we have handled your personal data, tell us first at operations@goai.qa. We would rather fix it than be reported for it.

You also have the right to complain to the supervisory authority in Qatar. The Personal Data Privacy Protection Law is administered by the Ministry of Communications and Information Technology, and its supervision sits with the National Cyber Security Agency. Coming to us first is not a condition of going to them.

16. Changes to this policy

If what we do changes, this page changes with it, and so does the date at the top. Where a change materially affects how your personal data is used, we say so on this page rather than leaving you to compare versions.

17. Contact

Go A I for Artificial Intelligence Consultancy W.L.L., Doha, Qatar.

Anything about your personal data: operations@goai.qa. Anything else: hello@goai.qa.