Privacy Policy

Effective date: 13 May 2026Last updated: 13 May 2026

1. Who this policy is for

This Privacy Policy explains how Lazga (“we,” “us”) collects, uses, and protects information. It applies to:

• Visitors to lazga.vercel.app
• Subscribers (businesses using the Lazga platform) and their employees who access our dashboard
• End customers (individuals who interact with our subscribers’ restaurants/businesses via WhatsApp or other channels routed through Lazga)

Different parts of this policy apply differently to each group. We’ll be clear about which is which.

2. Who controls your data

Lazga is operated by شركة لازقا للتسويق (Lazga Marketing Company), a company registered in Jordan, with offices in Amman, Jordan.

For data we collect about our subscribers and website visitors, we are the data controller.

For data about end customers (your restaurant’s customers) that flows through the Lazga platform, our subscriber (the restaurant) is the data controller. We act as their data processor.

For any privacy questions, contact: info@lazga.ai

3. What we collect

3.1 From website visitors

When you visit our marketing website:

• Technical data: IP address, browser type, operating system, pages visited, referral source, time spent on pages
• Cookies: small data files stored on your device. See Section 8 for details.
• Voluntary submissions: if you fill out a contact form or sign up for a newsletter, we collect what you submit (name, email, message)

3.2 From subscribers

When your business subscribes to Lazga, we collect:

• Business information: name, address, branches, hours, menu, contact details, owner/manager names
• Account credentials: email, password (encrypted), authentication tokens
• Payment information: payment card details are processed by our payment partner (HyperPay) — Lazga itself does not store full card numbers. We retain last 4 digits and card brand for display purposes only.
• Communication history: support tickets, emails, WhatsApp messages with our team
• Platform usage: how you use the dashboard, which features, when you log in, errors encountered

3.3 From end customers (processed on your behalf)

When end customers interact with our subscribers’ restaurants/businesses via Lazga’s AI agent:

• Identifiers: WhatsApp phone number, name (if provided)
• Conversation content: messages exchanged with the AI agent
• Booking/reservation details: date, time, party size, special requests
• Preferences: dietary requirements, language preference, repeat behavior

We process this data on behalf of the subscriber business. The subscriber business is responsible for ensuring their customers are informed of and consent to this data processing.

4. How we use the data

4.1 To run the service

The primary use of all collected data is to provide the Lazga platform:

• Operate the AI agent on behalf of subscribers
• Display reservation and conversation data in subscriber dashboards
• Process payments and send invoices
• Provide customer support
• Authenticate users and prevent unauthorized access

4.2 To improve the platform

We may analyze platform usage to:

• Identify bugs and improve performance
• Understand which features are most valuable
• Improve the AI agent’s responses
• Train and refine our AI models (see Section 5)

4.3 To communicate with subscribers

We may contact subscribers about:

• Service updates and important changes
• Billing matters
• Support tickets
• Optional product updates and newsletters (with the ability to unsubscribe)

4.4 To comply with the law

Where required, we may use or disclose data to:

• Comply with legal obligations under Jordanian or other applicable law
• Respond to lawful requests from authorities
• Enforce our Terms of Service
• Protect the rights, safety, or property of Lazga, our users, or the public

5. AI training and aggregated data

We may use aggregated, anonymized data from the platform to train and improve our AI models. Aggregated, anonymized means:

• Data is combined across many subscribers and customers
• All identifying information is removed (no business names, no customer phone numbers, no individual conversations attributable to a specific party)
• The result cannot be reverse-engineered to identify any specific person or business

We do not train our AI on a single subscriber’s data in a way that would let another subscriber benefit from it, nor do we share specific subscriber content with other subscribers.

If you are a subscriber and prefer to opt out of having your data used for aggregated model improvement, contact us at info@lazga.ai.

6. Who we share data with

We share data only with the partners we need to operate Lazga. We do not sell data to third parties.

6.1 Service providers

• Hosting: Vercel (United States) and Supabase host our application and database
• AI infrastructure: Anthropic (Claude) provides the underlying AI models that power our agent
• Payment processing: HyperPay handles payment transactions
• Communication: WhatsApp Business / Meta provides the messaging infrastructure
• Observability: Sentry for error monitoring and performance tracking

Each of these providers is bound by their own privacy obligations and operates under data processing agreements where applicable.

6.2 Legal requests

We may disclose data when required by a court order, subpoena, or other legally binding request from a competent authority.

6.3 Business transfers

If Lazga is acquired, merged, or sells assets, your data may transfer to the new entity. We will notify subscribers in advance if this happens.

7. International data transfers

Some of our service providers are located outside Jordan (e.g., the United States, European Union). When we transfer data internationally, we rely on standard contractual safeguards to protect it. By using Lazga, you consent to this transfer.

8. Cookies and tracking

Lazga uses cookies and similar technologies on our website to:

• Keep you logged in
• Remember preferences
• Measure website performance and traffic
• Improve the user experience

You can control cookies through your browser settings. Blocking certain cookies may affect site functionality (for example, you may not stay logged in).

We do not use cookies for advertising or remarketing.

9. Data retention

• Subscriber data: retained while you are an active subscriber, plus 90 days after cancellation to allow re-activation. After 90 days, data is deleted unless we are required to retain it by law (e.g., financial records).
• End customer data: retained as long as the subscriber’s account is active, then handled per the subscriber’s retention preferences and applicable law.
• Marketing site visitor data: retained for up to 24 months, then aggregated or deleted.
• Payment records: retained as required by Jordanian financial and tax law (typically 7 years).
• Support communications: retained for up to 3 years.

10. Security

We use industry-standard practices to protect your data:

• Encrypted connections (HTTPS) for all data in transit
• Database encryption at rest
• Access controls — Lazga employees access subscriber data only when needed for support or operations
• Regular backups
• Monitoring for unauthorized access (via Sentry and infrastructure logs)

No system is perfectly secure. If we discover a data breach affecting your information, we will notify affected parties without undue delay, in accordance with applicable law.

11. Your rights

You have the following rights regarding your data:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Deletion: ask us to delete your data (subject to legal retention requirements)
• Objection: object to certain uses of your data
• Portability: request your data in a portable format
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at info@lazga.ai. We will respond within 30 days.

If you believe we have not handled your data appropriately, you may file a complaint with the competent Jordanian authority.

12. Children

Lazga is a platform for businesses, not for individual children. We do not knowingly collect personal data from anyone under the age of 18. If a subscriber’s customer base includes minors (e.g., a restaurant frequented by families), the subscriber is responsible for ensuring their data handling complies with applicable child-protection laws.

If you believe a minor has provided us data, contact us at info@lazga.ai and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do:

• The “Last updated” date at the top of this page changes
• Significant changes will be notified to active subscribers by email at least 14 days before they take effect
• Minor changes (clarifications, formatting) may be made without notice

Continued use of Lazga after an update constitutes acceptance of the updated policy.

14. Contact us

For any questions, requests, or concerns about your privacy:

Lazga
Email: info@lazga.ai
Address: Amman, Jordan

This Privacy Policy is provided in English. An Arabic translation may be available; in case of any discrepancy between the English and Arabic versions, the English version prevails.