Privacy Policy

1. Who We Are

GovClara is operated by Alhawaseeb Information Technology, based in Qatar. We provide IT vendor and contract governance software to organisations in the GCC. For privacy enquiries contact us at hello@govclara.com.

2. Information We Collect

Account information: When you sign up, we collect your name, work email address, and organisation name.

Customer data: Vendor details, contracts, SLA records, KPI logs, incidents, and other data you enter into the platform.

Usage data: Pages visited, features used, and actions taken within the platform, to help us improve the Service.

Payment information: Billing is handled entirely by Paddle.com. We do not store your credit card details.

3. How We Use Your Information

• To provide, operate, and improve the Service
• To send you account notifications and support responses
• To process payments through our payment processor (Paddle)
• To generate AI-assisted insights based on your organisation's data
• To comply with legal obligations

We do not sell your personal data or Customer Data to third parties.

4. Data Storage and Security

Your data is stored in secure cloud infrastructure (Supabase / PostgreSQL) hosted in the EU. We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to production data is strictly limited.

5. AI Features

The AI Assistant feature sends a summary of your organisation's vendor and contract data to Groq (an AI infrastructure provider) to generate responses. This data is used solely to generate your response and is not used to train AI models. No personally identifiable employee information is sent — only aggregated operational data (vendor names, contract values, SLA scores).

6. Third-Party Services

We use the following sub-processors to operate the Service:

• Supabase — database and authentication infrastructure
• Vercel — frontend hosting
• Railway — backend API hosting
• Paddle — payment processing and billing
• Groq — AI inference (AI Assistant feature only)
• Resend — transactional email

7. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days before permanent deletion, during which you may export it. You may request deletion at any time by emailing hello@govclara.com.

8. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, email hello@govclara.com. We will respond within 30 days.

9. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email and by updating the date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy questions: hello@govclara.com