Privacy Policy

Badal Technologies ("we," "us," or "our") operates the Iqra AI platform (accessible via iqra.bot and app.iqra.bot). We are committed to protecting your privacy and ensuring the security of your data.

This Privacy Policy explains how we collect, use, and safeguard your information when you use our Voice AI Orchestration Platform. By using Iqra AI, you agree to the practices described in this policy.

1. Our Role: The Orchestration Platform

It is critical to understand the architecture of Iqra AI to understand your privacy:

1. Iqra AI is a Processor: We provide the infrastructure (Gateway, Logic Engine, and Dashboard) to manage AI agents.
2. You are the Controller: You decide which AI models (e.g., OpenAI, Anthropic) and Telephony providers (e.g., Twilio) to connect.
3. Third-Party Processing: When you connect an integration (e.g., an OpenAI API Key), you authorize us to transmit data to that provider to fulfill your request. We do not control how those third-party providers handle data once it leaves our system; their usage is governed by their respective privacy policies.

2. Information We Collect

We collect data in three categories:

A. Account & Billing Information

• Identity: Name, email address, password (hashed), and business details.
• Billing: Payment history and subscription details. Note: We do not store full credit card numbers. Payments are processed by our secure payment gateway partners.
• Infrastructure: IP addresses, browser type, and device information used to access the dashboard.

B. Platform Configuration (The "Blueprint")

• Agent Logic: Scripts, system prompts, flow configurations, and variable definitions.
• Credentials: API Keys and secrets for third-party providers (e.g., Twilio, OpenAI).
• Security Note: These keys are encrypted at rest. We cannot view your raw API keys after they are saved.

C. Conversation Data (The "Traffic")

• Logs: Call duration, timestamps, cost calculations, and debugging traces.
• Content: Audio recordings and text transcripts of conversations processed by the platform.
• Metadata: Phone numbers (Caller ID), custom variables, and session tags.

3. How We Use Your Information

We use your data solely for the following purposes:

1. Service Delivery: To route calls, generate audio, execute logic flows, and display your analytics dashboard.
2. In-House Analytics: We use internal, self-hosted analytics tools to understand platform usage patterns (e.g., "Total minutes processed globally") to improve infrastructure scaling. We do not share this data with external advertising networks.
3. Communication: To send you transactional emails (invoices, password resets) or product updates.
4. Security & Fraud Prevention: To detect abuse, spam, or illegal activities (as defined in our License Agreement) on the platform.

4. Data Retention and Deletion

Standard Retention

• Active Accounts: We retain your data for as long as your account is active to provide the service.
• Logs: We may retain operational logs (metadata, costs) indefinitely for auditing and billing verification.

Account Deletion & Archives

If you delete your account or specific data (e.g., an Agent):

1. Soft Delete: The data is immediately removed from the live production environment and is inaccessible.
2. Archive Period: The data remains in our secure backup archives for 30 days. This is to prevent accidental data loss and to ensure we can investigate fraud or abuse if reported shortly after deletion.
3. Permanent Deletion: After the 30-day archive period expires, the data is permanently erased from our systems.

5. Third-Party Sub-Processors

Iqra AI allows you to bring your own providers ("BYOK"). By configuring these integrations, you direct us to share data with them. Common categories include:

• LLM Providers: (e.g., OpenAI, Anthropic, Groq) - Receive text prompts to generate responses.
• Voice Providers: (e.g., ElevenLabs, Deepgram) - Receive audio or text to convert speech.
• Telephony Carriers: (e.g., Twilio, Telnyx) - Carry the audio stream to the phone network.

Please review the privacy policies of the providers you choose to connect to your workspace.

6. Security Measures

We implement enterprise-grade security measures to protect your data:

• Encryption: All data in transit is encrypted via TLS/SSL. Sensitive data at rest (API Keys, PII) is encrypted using industry-standard algorithms.
• Access Control: Internal access to user data is strictly restricted to authorized personnel with a legitimate business need (e.g., resolving a support ticket you initiated).
• Isolation: The platform uses strict tenant isolation. One business workspace cannot access the data of another, even if they share the same underlying database cluster.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your data, including:

• Access: The right to request a copy of the data we hold about you.
• Rectification: The right to correct inaccurate data.
• Deletion: The right to request the deletion of your account and associated data.
• Portability: The right to export your scripts and configurations (available via our API).

To exercise these rights, please contact us at contact@iqra.bot.

8. Contact Us

Iqra AI is built and maintained by Badal Technologies, based in the Sultanate of Oman.

If you have questions about this policy or our data practices, please contact us:

• Email: contact@badal.om
• Website: www.badal.om