AILAR
Start for free
Privacy

Privacy Policy

This policy explains what information AILAR handles, why we use it, when we share it, how long we keep it, and the choices available to you.

Last updated: September 11, 2026

1. Who this policy applies to

This Privacy Policy explains how AILAR handles personal data when you visit ailar.app, use the AILAR portal or scanner, create or manage a workspace, upload records, validate codes, use paid features, or contact us. AILAR is an independent software service operated from the Kingdom of Bahrain.

For account, security, service-usage, billing, and support information, AILAR determines why and how that information is used. When a customer uploads records about its own guests, members, attendees, staff, or other individuals, that customer normally decides the purpose of that data and AILAR processes it to provide the service.

2. Information we collect

  • Account information, such as your name, email address, authentication details, account role, and workspace membership.
  • Workspace and system information, including system names, settings, operator assignments, validation rules, and plan or entitlement information.
  • Customer Data you upload or create in AILAR, including CSV records, unique codes, ticket or membership information, and other fields you choose to include.
  • Validation activity, including the code or record involved, validation result, date and time, workspace, system, scanner or operator identity, and technical attempt identifiers used to prevent duplicate counting.
  • Optional scan location, including latitude, longitude, and accuracy, only when location is enabled and the device grants permission. Validation can continue when location is unavailable or denied.
  • Device, browser, network, security, and diagnostic information needed to operate and protect the service, such as IP address, browser type, timestamps, and error or request information.
  • Billing and subscription information. When paid billing is enabled, AILAR may receive transaction, subscription, customer, tax-location, invoice, and payment-status information from our billing provider. We do not need to store your full payment-card number.
  • Support and communications information when you contact us or send feedback.

3. How we use information

  • Provide, maintain, secure, and improve AILAR and its validation workflows.
  • Authenticate users, separate Admin and Operator access, enforce workspace boundaries, and apply plan entitlements.
  • Validate codes against current records and rules, record scan outcomes, and show activity and reports.
  • Measure included usage, prevent the same technical retry from being counted twice, and manage plan allowances or overage behavior.
  • Detect abuse, fraud, unauthorized access, security incidents, and violations of our Terms of Service.
  • Process subscriptions, trials, invoices, cancellations, billing events, and customer support related to paid plans when billing is enabled.
  • Comply with applicable law, enforce agreements, resolve disputes, and protect the rights and safety of AILAR, our users, and others.
  • Communicate service, security, billing, or policy updates and respond to your requests.

4. Legal grounds for processing

Where applicable law requires a legal basis, AILAR may process personal data because it is necessary to provide the service or perform a contract, because we have a legitimate interest in operating and securing AILAR, because we must comply with a legal obligation, or because you have given consent for an optional activity such as device location. The available legal grounds can vary by jurisdiction.

5. Customer Data and your responsibilities

You control which fields and records you upload to AILAR. You are responsible for making sure you have a lawful reason to collect, upload, use, and validate that data, and for providing any notices or obtaining any permissions required for the people represented in your records.

Avoid uploading information that AILAR does not need for your validation workflow, especially highly sensitive personal data, unless you have determined that the processing is necessary and legally permitted.

6. Service providers and data sharing

AILAR uses service providers to run the product. These providers may process data only as needed to provide their services, support AILAR, comply with law, or protect their systems. Depending on the feature you use, providers may include hosting and infrastructure services such as Vercel, database and authentication infrastructure such as Supabase, authentication providers such as Google when you choose that sign-in method, and billing services such as Paddle when paid checkout is enabled.

If you purchase a paid plan through Paddle, Paddle may act as the authorized reseller or merchant of record and independently process buyer and payment information under its own privacy notice. You can review Paddle's current privacy notice on its official website at paddle.com/legal/privacy.

We may also disclose information when required by law, in response to valid legal process, to investigate fraud or security threats, or as part of a business transfer or reorganization. We do not sell Customer Data for money or use it for third-party advertising.

7. International data transfers

AILAR is operated from Bahrain and uses cloud providers that may process data in other countries. As a result, personal data may be transferred to or stored outside your country. Where required, we rely on appropriate contractual, organizational, or legal safeguards for international transfers.

8. Data retention and deletion

We keep personal data only for as long as reasonably necessary to provide AILAR, maintain security and audit history, resolve disputes, meet legal or accounting obligations, and enforce our agreements. Retention periods can differ by data type and account status.

Free-plan Systems are intended for active use. Under the current Free-plan policy, a Free System that receives no validation attempts for 23 days may enter a warning period and can become eligible for deletion after 30 days without a scan. A new validation attempt resets that inactivity period. When a System is deleted, associated records, activity, imports, and stored source files may also be deleted according to the product's deletion workflow.

If you close an account or delete data, copies may remain temporarily in backups or security logs before being overwritten. Billing, tax, fraud-prevention, or legal records may be retained for longer where required or permitted by law.

9. Cookies and local storage

AILAR may use cookies, browser storage, or similar technologies that are necessary for authentication, security, session continuity, preferences, and core product functionality. We do not describe optional advertising tracking as part of the current AILAR service. If our use of optional analytics or tracking changes materially, we will update this policy and provide any notices or choices required by law.

10. Security

AILAR uses technical and organizational safeguards designed to protect personal data, including authenticated access, workspace isolation, server-side validation, role-based access, and security controls provided by our infrastructure partners. No online service can guarantee absolute security, so you should also protect your credentials, devices, and access to your account.

11. Your privacy rights

Depending on where you live and the law that applies, you may have rights to request access to personal data, correct inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, or request a portable copy of certain information. You may also have the right to complain to a relevant data-protection authority.

If your information is contained in a customer-managed AILAR System rather than in your own AILAR account, the AILAR customer that collected or uploaded the information may be the best party to handle your request. We will assist our customer where reasonably required.

To make a privacy request, contact support@ailar.app. We may need to verify your identity before completing a request.

12. Children

AILAR is a business and operational software service and is not directed to children. People who create or control an AILAR account must be legally able to enter into the applicable agreement. Customers are responsible for ensuring that any information they upload about minors is collected and used lawfully.

13. Changes to this policy

We may update this Privacy Policy as AILAR, our providers, or applicable laws change. We will update the date at the top of this page and, where required, provide additional notice of material changes.

14. Contact

Questions about privacy can be sent to support@ailar.app. You can also review our Terms of Service.