Privacy policy

01Who we are

Idrak is a software service built in Amman, Jordan. For this policy, "Idrak", "we" and "us" mean the Idrak team operating the service. You can reach us at hello@idrak.jo.

02The law we follow

We handle personal data in line with Jordan's Personal Data Protection Law No. 24 of 2023 and its implementing instructions, as they apply to us. In general terms, that means we process personal data for clear and legitimate purposes, collect only what we need, keep it accurate and secure, and respect the rights of the people the data is about.

As we expand to other countries, we will also follow the data protection laws that apply there.

03What we collect

Account information: your name, email, phone number, business name and role.

Business data you upload: sales, products, stock, purchases, suppliers, customers and employees. This may include personal data about your customers or staff, such as names and phone numbers.

Usage information: which features you use, error logs and basic device information, so we can keep the service working and improve it.

Website forms: if you use the free Health Check, contact form or waitlist, we receive the file or details you submit.

04How we use it

To provide the service: cleaning your data, calculating insights and answering your questions.

To support you, send service emails such as your weekly digest, and keep your account secure.

To improve Idrak in aggregate. We do not sell your data, and we do not use your business data to train public AI models.

05Your business data is yours

For the data you upload about your customers and staff, you are responsible for having a lawful basis to use it, and we act on your instructions as your service provider. Each business's data is kept logically separate. The assistant reads your data through a read-only connection limited to your own business.

06Who we share it with

We use a small number of trusted service providers to run Idrak — for example cloud hosting, database, email delivery and AI model providers. They process data only on our instructions and under appropriate safeguards. Some of these providers may store data outside Jordan; where that happens we take the steps the law requires.

We will disclose data if the law requires it, and we will tell you when we're allowed to.

07How long we keep it

We keep your data while your account is active. If you close your account, we delete or anonymise your business data within 90 days, unless the law requires us to keep it longer. Files uploaded to the free Health Check are used only to run that check.

08Your rights

Subject to the law, you can ask to access, correct, or delete your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. Email hello@idrak.jo and we will respond within a reasonable time.

09Security

We use encryption in transit and at rest, access controls by role, audit logs and regular reviews. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as the law requires.

10Changes

If we change this policy in a meaningful way, we'll tell you by email or in the app before the change takes effect.