Privacy policy
MADAR platform · Last updated: 2026-10-21 · اقرأها بالعربية
This page explains what data the MADAR platform collects, why, where it is stored, and who has access to it. We do not sell your data or your customers' data to anyone, and we do not use it for advertising.
Who we are
MADAR is operated by DFX Integrated Computer Solutions (شركة دي إف إكس للحلول الحاسوبية المتكاملة الشخص الواحد (ش.ش.و)), registered in the State of Kuwait under number 2026/16967, at the address Office 15, 3rd Floor, Al Nahda Al Alamiya Real Estate Building, Omar Bin Al-Khattab Street, Block 3, Plot 60000B, Al Mirqab, Al Asimah Governorate, State of Kuwait (دولة الكويت، محافظة العاصمة، منطقة المرقاب، قطعة 3، قسيمة 60000ب، شارع عمر بن الخطاب، مبنى شركة النهضة العالمية العقارية، الدور الثالث، مكتب 15).
The data we collect
Your account data
- Your name, email address and password (stored hashed; we cannot read it)
- The business name and the users you invite
- Your subscription status and invoice history
Your customers' data
When you connect a messaging channel, your customers' messages and details pass through the platform:
- Message content and attachments from WhatsApp, Instagram, Messenger, Telegram and TikTok
- Customers' names, phone numbers, email addresses and their identifiers on those platforms
- What you record yourself: deals, tasks, notes, documents and calls
Your ad account data (MADAR Ads)
When you connect an ad account on Meta, Google Ads or Snapchat, with your explicit permission on that platform's own screen:
- The access token the platform issues, stored encrypted and shown to no one
- The names and identifiers of your ad accounts and Pages, and each account's status and currency
- Your campaigns, ad sets and ads, their budgets, and their performance figures: spend, impressions, clicks and results
- The images and videos you upload for your ads
Technical data
- IP address and sign-in time, for the audit log and for security
- Technical error logs, for diagnosing faults
Why we collect it
| Purpose | Basis |
|---|---|
| Operating the service you subscribed to | Performance of the contract |
| Protecting the account and detecting misuse | Legitimate interest |
| Billing and accounting | Legal obligation |
| Contacting you about the service | Performance of the contract |
Where your data is stored
It is stored on Google Cloud servers in Doha (me-central1), and backed up in encrypted form.
- In transit: encrypted with TLS 1.3
- Backups: encrypted with AES-256-GCM
- Selected sensitive fields: you can enable encryption with your own key (BYOK), so that we cannot read them
Who has access to your data
We share your data only with the providers needed to run the service:
| Provider | Purpose |
|---|---|
| Google Cloud | Hosting, databases and backups |
| Meta | Receiving and sending WhatsApp, Instagram and Messenger messages, and managing your ad campaigns on Facebook and Instagram |
| Google Ads | Managing your ad campaigns on Google |
| Snap | Managing your ad campaigns on Snapchat |
| Telegram | Receiving and sending Telegram messages |
| TikTok | Receiving and sending TikTok messages |
| Anthropic | Suggesting replies and summarising — the conversation text is sent only when a suggestion is requested. Writing the ads report — only aggregated performance figures and campaign names are sent, no personal data |
| Zoho Mail | Sending service email |
| Tap (KNET) | Processing subscriptions |
Each of them processes the data under a contract that restricts its use to the stated purpose alone. We disclose data to a government body only under a binding legal order.
Data from Meta platforms
When you connect a WhatsApp, Instagram or Messenger account, we receive the messages and the senders' identifiers in order to show them in the unified inbox and link them to the customer's record on your account. We use this data solely to provide the service to you; we do not pass it to data brokers, we do not use it for advertising or profiling, and we do not use it to train models.
Data from ad platforms
We use what we read from your ad account solely to carry out what you ask for: showing your campaigns and their performance, creating the campaigns you write, pausing and editing them, and alerting you when spend nears the budget you set. We never create an ad or change a budget except on your instruction or by a rule you set. We do not read your audiences' personal data, we do not sell any advertising data, and we do not use it for other customers' accounts, for our own advertising, or to train models.
You can disconnect any platform at any time from «MADAR Ads → Accounts», and we delete the access token immediately. You can also withdraw the permission in the platform's own settings (on Facebook: Settings → Business integrations).
Retention period
- Your account data and conversations: for as long as your account exists
- After the account is closed: permanently deleted within 30 days — during that period you can change your mind and export your data
- Invoices: kept after the account is deleted as financial records — the business name, invoice number, amount and date only; no conversations and no customers
- Backups: deleted automatically after 30 days
- Audit logs and invoices: kept for the period the law requires
Your rights
At any time you can ask for:
- A copy of your data
- Correction of inaccurate data
- Deletion of your account and its data
- Export of your data in a portable format
Write to us at yalmazeedi@madarme.com and we reply within 30 days.
Children
The service is aimed at businesses, and we do not offer it to anyone under 18.
Changes to this policy
If we change anything material, we will notify you by email a reasonable time before it takes effect. The date of the last update is shown at the top of the page.
Contact
yalmazeedi@madarme.com