Privacy policy

Who we are

This website, alvara.ae, is operated by Alvara, an AI-native vertical software studio based in Dubai, United Arab Emirates. We build vertical software with the people who know the problem best.

Alvara is responsible for the small amount of personal information described in this policy, and is the right party to contact about it. This policy is written by us, about this website. If you want to reach a person about any of it, write to hello@alvara.ae.

What this policy covers

This policy covers alvara.ae, this website, and nothing else. It does not cover the products we build for our clients, which are their systems and carry their own policies, and it does not cover a client engagement, which is governed by the agreement we sign with you.

It also does not cover what happens on someone else’s website once you leave ours. Section 05 lists the ones this site sends you to.

What we collect

This is a static website. It has no accounts, no login, no contact form and no shopping basket, so there is very little to collect. In practice there are four things:

• What you send us by email. If you write to hello@alvara.ae we hold that correspondence, and whatever you chose to put in it, in our mailbox.
• What you give the booking page. The "Book a call" link leaves this site for Google Calendar. Anything you enter there, including your name, your email address and the time you pick, goes to Google and then to us. See section 05.
• One setting stored in your browser. When you use the light and dark switch we save your choice under the key alvara-theme in your browser’s local storage. It is not a cookie, it is never sent to us or to anyone else, it identifies nobody, and clearing your browsing data removes it.
• Ordinary server records. Like every website, ours is delivered by a hosting provider that logs the requests it serves: an IP address, a timestamp, the page requested and the browser’s user agent string. These exist so that pages can be delivered and abuse can be stopped, and we do not use them to build a picture of you.

What we do not do

It is worth being explicit, because most sites cannot say this:

• We set no cookies. Not ours, not anyone else’s. There is no cookie banner on this site because there is nothing to consent to.
• We run no analytics. No Google Analytics, no product analytics, no heatmaps, no session recording.
• We run no advertising and no tracking pixels. Nothing here follows you to another website.
• We do not sell, rent or share personal data with anyone for their own purposes.

If any of that changes, this policy changes with it, and section 09 says how you would find out.

Third parties this site relies on

Three companies are involved in this site working at all. Each has its own privacy policy, and what you give them is held under that policy rather than this one:

• Our hosting provider delivers the pages and keeps the server records described in section 03.
• Google Fonts. The two typefaces on this site are requested from fonts.googleapis.com and fonts.gstatic.com when the page loads. That request discloses your IP address to Google, in the same way visiting any website discloses it to that site. We mention it because it is easy to miss and it is the one thing on this site that reaches a third party without you doing anything.
• Google Calendar handles the "Book a call" link. You only reach it by choosing to.

How long we keep things

Correspondence is kept for as long as it is useful to the conversation or the working relationship it belongs to, and then for as long as we are required to keep business records. Booking details are kept for as long as the meeting and its follow-up are relevant.

Server records are kept on a short rolling window by our hosting provider and are not retained by us separately.

If you would rather we did not keep something, ask, and we will delete it wherever we are not legally required to hold it.

Your rights

You can ask us to do any of the following, at any time, at no cost:

• Tell you what personal data of yours we hold.
• Give you a copy of it.
• Correct it if it is wrong.
• Delete it, where we are not required to keep it.
• Stop using it for a particular purpose.

Write to hello@alvara.ae and we will respond within 30 days. These rights are the ones given by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you are in the United Kingdom or the European Economic Area, you have equivalent rights under the UK GDPR and the GDPR, and you may also complain to your national data protection authority.

Children

This site is aimed at businesses and the people who run them. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us something, tell us and we will delete it.

Changes to this policy

When this policy changes we update the date in the rail beside this text, and the change takes effect from that date. If a change is significant, for example if we start using analytics, we will say so plainly at the top of this page rather than quietly editing a clause.

How to contact us

Everything in this policy, including any request about your data, goes to the same place: hello@alvara.ae. A person reads it.