Information you provide
We process account and agency details, verified email addresses, team memberships, client contact details, agency branding, platform account identifiers, and the requests and messages you submit. Business enquiries and agency waitlist submissions are stored in Falaq’s workspace.
Access and activity records
Access requests contain the platforms, assets, requested roles, expiry, consent and progress information needed for the handover. We record operational events, verification outcomes, and delivery attempts. Authentication uses session cookies. Public anti-abuse checks may use your IP address and challenge result.
How information is used
Information supports authentication, workspace administration, account-sharing instructions, permission verification, reminders, enquiries, troubleshooting, and abuse prevention. A business enquiry asks Falaq to contact you about the service. Signup or waitlist details are used to process your request for an agency workspace.
Who can access the records
Authorized members of the relevant agency workspace can access records according to their role. A person with an access link can view the information made available through that link; keep it private. Falaq receives business enquiries, waitlist submissions, and privacy requests. Configured service providers process data for the functions listed below.
Credentials and retention
Credentials stored for platform work are encrypted. Client sign-in credentials used only to grant access are eligible for scheduled deletion when they were created at least 24 hours earlier or their grant left its pending state at least 24 hours earlier. Actual removal depends on the scheduled deletion process running. Credentials approved for ongoing work are separate. Removing a credential does not automatically remove access granted inside a third-party platform.
Other records and deletion
Agency, client, request, event, and enquiry records are not covered by this scheduled credential deletion. Request deletion through our data-deletion page. We review the request, verify authority when needed, and explain any records that must remain for security, operational, or applicable legal reasons. This notice does not promise a fixed retention period for every record.
Processing location and third-party platforms
Falaq is based in Kuwait. Service providers and the platforms you connect may process information outside Kuwait. This notice does not promise Kuwait-only hosting. Platform authorizations are also subject to that platform’s notices and account settings.
Questions and requests
Use the data-deletion form for privacy or deletion requests, identifying the email and agency involved without sending passwords or access tokens. We may contact you to clarify the request and confirm your authority.
Service providers
The service configuration includes the following providers for the enabled functions. This list does not specify a hosting region.
- Vercel — Application hosting and request delivery
- Neon — PostgreSQL database hosting
- AWS KMS — Wrapping and managing encryption keys
- Resend — Transactional email delivery
- Cloudflare Turnstile — Bot and abuse protection on public forms