Privacy Policy

1. Introduction

Qunzia LLC (“Qunzia”, “we”, “us”, or “our”) operates a bilingual (English/Arabic) service-provider directory for the GCC market, accessible at qunzia.com and related applications (collectively, the “Platform”).

We are incorporated in the Qatar Financial Centre (“QFC”). This Privacy Policy is governed by the QFC Personal Data Protection Regulations (“QFC PDPR”) and, where applicable, Qatar Law No. 13 of 2016 on Personal Data Privacy Protection.

By using the Platform you acknowledge that you have read and understood this Policy. If you do not agree, you must not use the Platform.

2. Information We Collect

We collect the following categories of personal data:

2.1 Account and Identity Data

Name, email address, phone number, and profile photo provided when you register through our authentication provider (Clerk, Inc.).

2.2 Business Profile Data

If you register as a Business Provider: business name, description, address, operating hours, service categories, logo, cover images, and verification documents.

2.3 User-Generated Content

Review text, star ratings, dimension ratings (quality, punctuality, value for money, communication), and photos you upload in connection with a review.

2.4 Payment Data

When you purchase a promoted placement, payment is processed by Stripe, Inc. We receive only a billing name, email, last-four digits of the card, card brand, and transaction identifiers. Full card details are transmitted directly to Stripe and are never stored on our servers.

2.5 Platform Communications

Messages exchanged between customers and providers through the Platform's messaging system.

2.6 Usage and Analytics Data

Pages visited, search queries, feature interactions, session duration, and clickstream data, collected through PostHog, Inc.'s analytics service.

2.7 Technical and Device Data

IP address, browser type and version, operating system, device identifiers, referring URLs, and error logs collected through Sentry, Inc.'s performance-monitoring service.

2.8 Cookies and Session Tokens

We use cookies and similar technologies as described in Section 10 below.

3. How We Use Your Information

We use personal data for the following purposes:

• Account management — to create, maintain, and secure your account.
• Platform operations — to display business listings, facilitate customer-provider connections, and publish reviews.
• Payment processing — to bill for and deliver promoted placement services.
• Transactional communications — account confirmations, review notifications, message alerts, and billing receipts.
• Marketing communications — with your prior consent, to send promotional offers and platform updates. You may withdraw consent at any time.
• Analytics and improvement — to understand how the Platform is used and to improve features and performance.
• Moderation and safety — to investigate reported reviews, detect fraud, and enforce our Terms of Service.
• Legal compliance — to meet obligations under applicable law, including responding to lawful requests from authorities.

4. Legal Basis for Processing

Under the QFC PDPR, we rely on the following legal bases:

• Contract performance — processing necessary to provide the Platform services you have requested.
• Legitimate interests — analytics, fraud prevention, platform security, and product improvement, where these do not override your fundamental rights.
• Legal obligation — where processing is required to comply with applicable law.
• Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting prior processing.

5. Sharing Your Information

5.1 Public Profile Information

Reviews, ratings, and the display name you submit are visible to all users of the Platform. Business Providers' listing information — name, description, address, services, and operating hours — is visible to all users.

5.2 Platform Messaging

Messages are visible only to the sender, the recipient, and Qunzia administrators where necessary for moderation or safety purposes.

5.3 Service Providers

We share data with sub-processors that help us operate the Platform. See Section 6 for the full list.

5.4 Legal and Regulatory

We may disclose personal data to courts, regulators, or government authorities where required by applicable law or to protect the rights, property, or safety of Qunzia, our users, or the public.

5.5 Business Transfer

If Qunzia is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

6. Third-Party Service Providers

We work with the following sub-processors, each bound by contractual data-protection obligations:

We do not sell or rent personal data to third parties for their own marketing purposes.

7. International Data Transfers

Qunzia is operated from Qatar. The sub-processors listed in Section 6 are based in the United States. When personal data is transferred internationally, we ensure appropriate safeguards are in place — including contractual arrangements equivalent to recognised data-transfer mechanisms — to protect your information in accordance with the QFC PDPR.

8. Data Retention

• Active accounts — personal data is retained for as long as your account is active.
• Account deletion — we delete all identifiable personal data within 90 days of account deletion. This includes your profile, messages, and any data that can be linked to you.
• Anonymised statistics — aggregated, fully anonymised usage data may be retained indefinitely for research and product improvement.
• Legal compliance records — certain records (e.g., payment records, audit logs) are retained for as long as required by applicable law, regardless of account status.

9. Your Rights

Under the QFC PDPR you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to our legal obligations.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your personal data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is consent-based, withdraw your consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at info@qunzia.com. We will respond within 30 days. You also have the right to lodge a complaint with the QFC Authority's Data Protection Office.

10. Cookies and Tracking Technologies

We use the following categories of cookies:

• Strictly necessary — session tokens required for login and security (Clerk). These cannot be disabled without breaking core Platform functionality.
• Analytics — PostHog cookies that help us understand how the Platform is used. You may opt out through your browser settings or a cookie preference centre when available.

Most browsers allow you to refuse or delete cookies. Disabling strictly-necessary cookies will prevent you from logging in to the Platform.

11. Eligibility and Minors

The Platform is intended solely for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe we have collected data from a minor, please contact us at info@qunzia.com.

12. Business Providers

If you register as a Business Provider, your business contact information, listing details, and any verification documents you submit will be used to create and display your public business profile. Verification documents are stored securely and are not publicly visible. By submitting a listing you confirm that you have authority to represent the business and that all information provided is accurate.

13. AI Assistant Connectors (ChatGPT & Claude)

Qunzia offers an assistant connector (a Model Context Protocol server) that lets you search the directory and book appointments from AI assistants such as ChatGPT and Claude.

13.1 What we receive

Your conversation with the AI assistant is governed by that assistant's provider (for example, OpenAI or Anthropic) under their own privacy policy — not Qunzia. Qunzia receives only the specific tool inputs the assistant sends on your behalf: search terms and, when you choose to book, the booking details below. Provider search itself is anonymous.

13.2 Booking through the connector

To create a booking we process the customer name and phone number you provide, an optional email address (used only to send a booking confirmation), and the requested service, date, and time. This is the same data we would process for a booking made directly on the Platform, and it is shared with the provider you book with so they can fulfil the appointment.

13.3 Guest and linked bookings

If you book without signing in, we store the appointment under the name and phone number you supply; you can look it up, reschedule, or cancel it using the booking reference code together with that phone number. If the phone number or email matches an existing Qunzia account, the booking is associated with that account so it also appears in your dashboard.

All connector data is handled under the same retention, security, sharing, and data-subject rights described in Sections 5 to 9 of this Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and/or by a prominent notice on the Platform at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

15. Contact and Complaints

For privacy-related enquiries, requests, or complaints, please contact:

If you are not satisfied with our response, you have the right to escalate your complaint to the QFC Authority's Data Protection Office.