Privacy Policy

1. Introduction

Qunzia LLC (“Qunzia”, “we”, “us”, or “our”) operates a bilingual (English/Arabic) service-provider directory for the GCC market, accessible at qunzia.com and related applications (collectively, the “Platform”).

We are incorporated in the Qatar Financial Centre (“QFC”). This Privacy Policy is governed by the QFC Personal Data Protection Regulations (“QFC PDPR”) and, where applicable, Qatar Law No. 13 of 2016 on Personal Data Privacy Protection.

This Policy is published in English and Arabic. The English version is the authoritative one; the Arabic version is provided for convenience, and in the event of any conflict the English version prevails.

By using the Platform you acknowledge that you have read and understood this Policy. If you do not agree, you must not use the Platform.

2. Information We Collect

We collect the following categories of personal data:

2.1 Account and Identity Data

Name, email address, phone number, and profile photo provided when you register through our authentication provider (Clerk, Inc.).

2.2 Business Profile Data

If you register as a Business Provider: business name, description, address, operating hours, service categories, logo, cover images, and verification documents.

2.3 User-Generated Content

Review text, star ratings, dimension ratings (quality, punctuality, value for money, communication), and photos you upload in connection with a review.

2.4 Booking Data

When you book an appointment, whether on the Platform, through an AI voice agent, or through an assistant connector, we process the name and phone number you give, an optional email address, the service, location, and requested time, any note you add, and the booking's reference code and status history. Booking details are shared with the Business Provider you book with so that they can fulfil the appointment.

2.5 Payment Data

When you pay for a promoted placement or a plan, payment is processed by our payment provider, MyFatoorah or Stripe, Inc., depending on the method you choose. We receive only a billing name, email address, the card brand and last four digits where the provider supplies them, and transaction identifiers. Full card details are transmitted directly to the payment provider and are never stored on our servers.

2.6 Platform Communications

Messages exchanged between customers and providers through the Platform's messaging system, and the transactional emails and SMS messages we send you.

2.7 Usage Data

Pages visited, searches, and interactions with the Platform, such as tapping a business's phone number, WhatsApp link, or website. We count these in our own systems. Until you make a choice in the cookie banner, they are counted without cookies: each record carries an identifier derived from your IP address and browser that changes every day and cannot be turned back into either, and your IP address is not stored with it. If you accept analytics cookies, we also use Google Analytics (through Google Tag Manager) and PostHog, listed in Section 6, to understand how the Platform is used.

2.8 Technical and Device Data

IP address, browser type and version, operating system, device identifiers, referring URLs, and error logs, generated when you use the Platform and recorded in our application and hosting logs.

2.9 Cookies and Session Tokens

We use cookies and similar technologies as described in Section 10 below.

2.10 Voice Recordings and Transcripts

When you speak to one of our AI voice agents — by calling a provider's Qunzia number, by requesting a call back, or by starting a voice conversation from a provider profile or our homepage demo — we record the audio and process it with automated speech recognition. From that we derive a written transcript, a short summary, and the details needed to act on your request (for example the name, phone number, service, and appointment time you give). We also keep call metadata: the numbers involved, the time, the duration, and the outcome. Section 14 explains this in full.

3. How We Use Your Information

We use personal data for the following purposes:

• Account management: to create, maintain, and secure your account.
• Platform operations: to display business listings, facilitate customer-provider connections, and publish reviews.
• Bookings: to create, confirm, change, and cancel appointments, and to pass the details to the Business Provider so they can be honoured.
• Payment processing: to bill for and deliver promoted placements and paid plans.
• Transactional communications: account confirmations, booking confirmations and reminders, review notifications, message alerts, and billing receipts.
• Marketing communications: with your prior consent, to send promotional offers and platform updates. You may withdraw consent at any time.
• Analytics and improvement: to understand how the Platform is used and to improve features and performance.
• Moderation and safety: to screen reviews for spam and abuse, investigate reports, detect fraud, and enforce our Terms of Service.
• Legal compliance: to meet obligations under applicable law, including responding to lawful requests from authorities.

4. Legal Basis for Processing

Under the QFC PDPR, we rely on the following legal bases:

• Contract performance: processing necessary to provide the Platform services you have requested, including bookings you make.
• Legitimate interests: analytics, fraud prevention, platform security, and product improvement, where these do not override your fundamental rights.
• Legal obligation: where processing is required to comply with applicable law.
• Consent: for marketing communications, non-essential cookies, and the recording of conversations with our AI voice agents. You may withdraw consent at any time without affecting prior processing.

5. Sharing Your Information

5.1 Public Profile Information

Reviews, ratings, and the display name you submit are visible to all users of the Platform. Business Providers' listing information (name, description, address, services, and operating hours) is visible to all users.

5.2 Business Providers You Interact With

When you book, message, or call a Business Provider, the details of that interaction, including your name, phone number, booking details, and the recording and transcript of a call to their Qunzia number, are available to that Business Provider so they can serve you.

5.3 Platform Messaging

Messages are visible only to the sender, the recipient, and Qunzia administrators where necessary for moderation or safety purposes.

5.4 Service Providers

We share data with sub-processors that help us operate the Platform. See Section 6 for the full list.

5.5 Legal and Regulatory

We may disclose personal data to courts, regulators, or government authorities where required by applicable law or to protect the rights, property, or safety of Qunzia, our users, or the public.

5.6 Business Transfer

If Qunzia is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

6. Third-Party Service Providers

We work with the following sub-processors, each bound by contractual data-protection obligations:

Call recordings are additionally stored on servers we control for the retention period described in Section 8. We do not sell or rent personal data to third parties for their own marketing purposes.

7. International Data Transfers

Qunzia is operated from Qatar. Most of the sub-processors listed in Section 6 are based in the United States. When personal data is transferred internationally, we ensure appropriate safeguards are in place, including contractual arrangements equivalent to recognised data-transfer mechanisms, to protect your information in accordance with the QFC PDPR.

8. Data Retention

• Active accounts: personal data is retained for as long as your account is active.
• Account deletion: we delete all identifiable personal data within 90 days of account deletion. This includes your profile, messages, and any data that can be linked to you.
• Bookings: appointment records are retained while the related account is active, and are kept in an anonymised form afterwards where we need them for accounting or dispute-handling purposes.
• Usage records: the records described in Section 2.7 are kept for 13 months and then deleted; after that, only aggregated counts remain.
• Anonymised statistics: aggregated, fully anonymised usage data may be retained indefinitely for research and product improvement.
• Voice recordings and transcripts: retained for as long as the related account is active, and deleted on the same schedule as the rest of your personal data when an account is deleted. You may ask us to delete a specific recording at any time (Section 9). Playback links expire seven days after they are issued.
• Legal compliance records: certain records (e.g., payment records, audit logs) are retained for as long as required by applicable law, regardless of account status.

9. Your Rights

Under the QFC PDPR you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data, subject to our legal obligations.
• Restriction: ask us to restrict processing in certain circumstances.
• Portability: receive your personal data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is consent-based, withdraw your consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at info@qunzia.com. We will respond within 30 days. You also have the right to lodge a complaint with the QFC Authority's Data Protection Office.

10. Cookies and Tracking Technologies

We use the following categories of cookies:

• Strictly necessary: session and security tokens required for login (Clerk), small preference cookies such as your chosen language, and qz_consent, which remembers your cookie choice for 12 months. These cannot be disabled without breaking core Platform functionality.
• Analytics, only if you accept them: Google Analytics cookies (_ga and _ga_<id>, up to 2 years), PostHog cookies (ph_<id>_posthog, up to 1 year), and our own qz_aid (a random identifier, 12 months) and qz_ft (how you first reached Qunzia, such as the referring site or campaign, 90 days).

We do not set advertising cookies. You can change your choice at any time through “Cookie settings” at the bottom of every page; withdrawing consent deletes the analytics cookies above. Most browsers also allow you to refuse or delete cookies; disabling strictly-necessary cookies will prevent you from logging in to the Platform.

11. Eligibility and Minors

The Platform is intended solely for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe we have collected data from a minor, please contact us at info@qunzia.com.

12. Business Providers

If you register as a Business Provider, your business contact information, listing details, and any verification documents you submit will be used to create and display your public business profile. Verification documents are stored securely and are not publicly visible. By submitting a listing you confirm that you have authority to represent the business and that all information provided is accurate.

A Business Provider that receives bookings or calls through the Platform is an independent controller of the customer data it receives, and is responsible for handling it in accordance with applicable data-protection law.

13. AI Assistant Connectors (ChatGPT & Claude)

Qunzia offers an assistant connector (a Model Context Protocol server) that lets you search the directory and book appointments from AI assistants such as ChatGPT and Claude.

13.1 What we receive

Your conversation with the AI assistant is governed by that assistant's provider (for example, OpenAI or Anthropic) under their own privacy policy — not Qunzia. Qunzia receives only the specific tool inputs the assistant sends on your behalf: search terms and, when you choose to book, the booking details below. Provider search itself is anonymous.

13.2 Booking through the connector

To create a booking we process the customer name and phone number you provide, an optional email address (used only to send a booking confirmation), and the requested service, date, and time. This is the same data we would process for a booking made directly on the Platform, and it is shared with the provider you book with so they can fulfil the appointment.

13.3 Guest and linked bookings

If you book without signing in, we store the appointment under the name and phone number you supply; you can look it up, reschedule, or cancel it using the booking reference code together with that phone number. If the phone number or email matches an existing Qunzia account, the booking is associated with that account so it also appears in your dashboard.

All connector data is handled under the same retention, security, sharing, and data-subject rights described in Sections 5 to 9 of this Policy.

14. AI Voice Agents and Call Recording

Parts of Qunzia are answered by an AI voice agent rather than a person. This section describes what that means for your personal data, and is the notice referred to at the start of every such conversation.

14.1 You are told before anything is processed

Every AI conversation opens by telling you, out loud and in your own language, that you are speaking with an AI assistant and not a person, that the conversation is recorded and processed by AI, and what it is used for. Where a conversation starts on the Platform — the voice widget on a provider profile, the homepage demo, or a call-back request — the same notice is shown in writing before your microphone is used or the call is placed. Continuing the conversation after that notice is how you give consent; if you would rather not be recorded, end the call or close the widget and use the provider's ordinary contact details instead. Declining costs you nothing else on the Platform.

14.2 Where AI voice agents are used

• AI receptionist: a provider's Qunzia phone number is answered by an AI agent that can answer questions about services and take bookings.
• Call back: you ask a provider to call you, and the AI receptionist places the call.
• Voice widget and demo: you start a browser-based conversation from a provider profile or from our homepage demo.
• Concierge calls: at your request, an AI agent calls providers on your behalf, asks your questions, and reports back. The provider it calls is given the same notice.

14.3 What we do with the recording

We use the audio, the transcript derived from it, and the call metadata to carry out what you asked for (answering your question, making or changing a booking, passing your request to the provider), to confirm what was agreed if there is a dispute, and to monitor and improve the quality and safety of the service. Recordings are not used for advertising and are not sold. The provider you called can listen to and read the record of their own calls; Qunzia staff access recordings only for support, safety, and quality purposes.

14.4 Legal basis

Processing voice data is based on your consent, given by continuing the conversation after the notice, and on the performance of the service you asked for. You may withdraw consent at any time by ending the conversation; withdrawal does not affect processing that already took place.

14.5 Sensitive information

Please do not read out payment-card numbers, passwords, national ID numbers, or health details to an AI agent. It does not need them, and anything you say is captured in the recording. If sensitive data does end up in a recording, tell us and we will delete it.

14.6 Your rights over recordings

The rights in Section 9 apply to voice data in full: you may ask for a copy of a recording and its transcript, ask us to correct the details taken from it, or ask us to delete it. Write to info@qunzia.com with the phone number you called from and the approximate date and time, so that we can find the call.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and/or by a prominent notice on the Platform at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

16. Contact and Complaints

For privacy-related enquiries, requests, or complaints, please contact:

If you are not satisfied with our response, you have the right to escalate your complaint to the QFC Authority's Data Protection Office. You can also read the Terms of Service that govern your use of the Platform.