Privacy policy

Who we are

This website, alvara.ae, is operated by Alvara L.L.C-FZ, an AI-native vertical software studio registered in the Meydan Free Zone, Dubai, under licence number 2652895. Our registered address is Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. In this policy, "Alvara", "we", "us" and "our" mean Alvara L.L.C-FZ. We build vertical software with the people who know the problem best.

Alvara is responsible for the small amount of personal information described in this policy, and is the right party to contact about it. This policy is written by us, about this website. If you want to reach a person about any of it, write to hello@alvara.ae.

What this policy covers

This policy covers alvara.ae, this website, and nothing else. It does not cover the products we build for our clients, which are their systems and carry their own policies, and it does not cover a client engagement, which is governed by the agreement we sign with you.

It also does not cover what happens on someone else’s website once you leave ours. Third parties this site relies on lists the ones this site sends you to.

What we collect

This is a static website. It has no accounts, no login, no contact form and no shopping basket, so there is very little to collect. In practice there are five things, and one of them only happens if you agree to it:

• What you send us by email. If you write to hello@alvara.ae we hold that correspondence, and whatever you chose to put in it, in our mailbox.
• What you give the booking page. The "Book a call" link leaves this site for Google Calendar. Anything you enter there, including your name, your email address and the time you pick, goes to Google and then to us. See Third parties this site relies on.
• How you used the site, but only if you accept cookies. If you accept, we collect which pages you visit, roughly where in the world you are, what brought you here, what you clicked, and what device and browser you used. That is joined into a picture of a visit, and of your return visits. No name is attached to it unless you separately write to us. See Cookies and your choice for how to change it.
• One setting stored in your browser. When you use the light and dark switch we save your choice under the key alvara-theme in your browser’s local storage. It is not a cookie, it is never sent to us or to anyone else, it identifies nobody, and clearing your browsing data removes it.
• Ordinary server records. Like every website, ours is delivered by a hosting provider that logs the requests it serves: an IP address, a timestamp, the page requested and the browser’s user agent string. These exist so that pages can be delivered and abuse can be stopped, and we do not use them to build a picture of you.

Cookies and your choice

The first time you arrive, this site asks whether you are willing to accept cookies for analytics. Nothing is set and nothing is sent anywhere until you answer. If you decline, the analytics code is never loaded at all: not loaded and switched off, simply never loaded.

If you accept, we use PostHog to understand how the site is used. It sets cookies and stores an identifier so that two visits from you are recognised as the same person rather than as two strangers. That is the whole reason it needs cookies.

Declining is exactly as easy as accepting, one click on the same panel, and we do not ask again either way.

You can change your mind whenever you like: reopen the cookie choice. Declining after having accepted also deletes the analytics cookies already in your browser.

Your browser's own controls work too, and if you have Do Not Track switched on we honour it whatever you clicked.

What we do not do

It is worth being explicit about where the limits are:

• We set no cookies unless you accept them. Decline and this site stores nothing but your light or dark preference.
• We record no sessions. Session replay is switched off, so nobody watches a recording of your visit, and there are no heatmaps.
• We run no advertising and no tracking pixels. No ad network, no retargeting, no social pixels. Nothing here follows you around other websites.
• Analytics alone tells us nothing about who you are. There is no account and no login on this site, so there is no name attached to any of it.
• We do not sell, rent or share personal data with anyone for their own purposes.

If any of that changes, this policy changes with it, and Changes to this policy says how you would find out.

Third parties this site relies on

Four companies can be involved in this site working, and one of them only if you accept cookies. Each has its own privacy policy, and what you give them is held under that policy rather than this one:

• Our hosting provider delivers the pages and keeps the server records described in What we collect.
• PostHog, and only if you accepted cookies. It receives the usage described in What we collect and processes it on our behalf. We use their European hosting, so that data is held in the EU rather than being sent to the United States. If you declined, PostHog receives nothing at all, because it is never loaded.
• Google Fonts. The two typefaces on this site are requested from fonts.googleapis.com and fonts.gstatic.com when the page loads. That request discloses your IP address to Google, in the same way visiting any website discloses it to that site. We mention it because it is easy to miss and it is the one thing on this site that reaches a third party without you doing anything.
• Google Calendar handles the "Book a call" link. You only reach it by choosing to.

How long we keep things

Correspondence is kept for as long as it is useful to the conversation or the working relationship it belongs to, and then for as long as we are required to keep business records. Booking details are kept for as long as the meeting and its follow-up are relevant.

Server records are kept on a short rolling window by our hosting provider and are not retained by us separately.

If you would rather we did not keep something, ask, and we will delete it wherever we are not legally required to hold it.

Your rights

You can ask us to do any of the following, at any time, at no cost:

• Tell you what personal data of yours we hold.
• Give you a copy of it.
• Correct it if it is wrong.
• Delete it, where we are not required to keep it.
• Stop using it for a particular purpose.

Write to hello@alvara.ae and we will respond within 30 days. These rights are the ones given by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you are in the United Kingdom or the European Economic Area, you have equivalent rights under the UK GDPR and the GDPR, and you may also complain to your national data protection authority.

Children

This site is aimed at businesses and the people who run them. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us something, tell us and we will delete it.

Changes to this policy

When this policy changes we update the date in the rail beside this text, and the change takes effect from that date. If a change is significant, for example if we start using analytics, we will say so plainly at the top of this page rather than quietly editing a clause.

How to contact us

Everything in this policy, including any request about your data, goes to the same place: hello@alvara.ae. A person reads it.