1. INTRODUCTION
Ahlan, Inc. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
2. INFORMATION WE COLLECT
Information You Provide
- Email address, username, password (hashed)
- Profile information (picture, bio, phone number)
- Communications (messages, audio, video calls)
- Payment information (via secure processors)
- Support tickets and feedback
Information Automatically Collected
- IP address (masked for privacy), browser type, device information
- Usage data (pages accessed, interactions, translation frequency)
- Session cookies and authentication tokens
- Location data (approximate from IP, precise with permission)
3. HOW WE USE YOUR INFORMATION
- Create and manage your account
- Process translations and video calls
- Provide customer support and security features
- Detect suspicious activity and prevent fraud
- Analyze usage patterns to improve the service
- Send notifications, billing info, and marketing (opt-in)
- Comply with legal requirements
4. DATA PROTECTION
- In Transit: TLS 1.3 encryption
- At Rest: AES-256-GCM encryption
- Database: Encrypted password fields, 2FA secrets
- Access: Role-based access, MFA for admins, 30-min session timeout
- Training: Annual security training for all staff
5. DATA RETENTION
- Account data: Until account deletion
- Communications: Until user deletion (owner-encrypted)
- Audit logs: 1 year (legal requirement)
- Payment records: 7 years (tax requirement)
- Session data: 30 days
- Backups: 90 days
6. YOUR PRIVACY RIGHTS
GDPR Rights (EU Users)
- Right to access your personal data (30 days)
- Right to correction of inaccurate data (7 days)
- Right to erasure (7-day recovery period)
- Right to restrict processing (30 days)
- Right to data portability (JSON/CSV export)
- Right to object to processing
- Right to lodge complaint with your Data Protection Authority
CCPA Rights (California)
- Right to know what data is collected (45 days)
- Right to delete personal information (45 days)
- Right to opt-out (we do NOT sell data)
- No discrimination for exercising rights
7. COOKIES & TRACKING
- Essential: Session, authentication, security cookies (required)
- Analytics: Google Analytics (anonymized, opt-out available)
- Preferences: Theme, language, accessibility settings
- We respect "Do Not Track" headers and have no fingerprinting
8. THIRD-PARTY SERVICES
- Email: SendGrid (verification, password reset)
- Payments: Stripe (subscription processing)
- Storage: AWS S3 (encrypted)
- Analytics: Google Analytics (anonymized)
- Monitoring: Sentry (error tracking)
Each service has its own privacy policy. We have data protection clauses with all vendors.
9. DATA BREACHES
If your data is compromised:
- Investigation within 24 hours
- Affected users notified within 72 hours
- Regulatory authorities notified if required
- Public disclosure if affecting > 500 users
- Clear guidance on next steps provided
10. CHILDREN'S PRIVACY
- Service not intended for children under 13
- COPPA compliant (no marketing to children)
- Parental consent required for ages 13-17
- Report children's accounts to legal@ahlan.app
11. CONTACT US
For privacy inquiries, contact:
Email: privacy@ahlan.app
Address: Ahlan, Inc., San Francisco, CA 94105
Response Time: 30 days (GDPR standard)