Privacy Notice

This notice explains how Abtikarat Louis Trading & Services W.L.L. (trading as Louis Innovations, Commercial Registration No. 173808, P.O. Box 82409, Doha, Qatar), the controller of your personal data, processes it when you use QNA-Locator, in line with Law No. 13 of 2016 on Personal Data Privacy Protection.

1. What we collect and why

Account: company email, company name and Qatar mobile number, to create and secure your account (contract). Your mobile number is verified by an SMS code through Firebase, a Google service; we never receive or store the code itself.

Sign-in sessions: a random session identifier in a secure cookie, plus the IP address and browser of each sign-in, to keep you signed in and detect misuse (legitimate interest in security).

API use: for every request, including refused ones, the time, your API key identifier, the endpoint, the result, the IP address, the origin domain of browser calls and the user agent. We use this for security and fraud prevention, to enforce your plan limits, to keep the service reliable, and to record whether and when a paid plan was first used, which ends the 3-day cancellation right under Article 57 of Decree-Law No. 16 of 2010 (contract, legal obligation and legitimate interest in security). You can see your own usage statistics and recent requests in your dashboard. Registered domains: the website domains you register for browser calls.

Payments: the order, amount, plan, the SADAD transaction number and the payment result, and the time and version of the terms you accepted. Card payments are made on SADAD's secure page; we never receive or store card details (contract and legal obligation).

Setup requests: your store platform, store address and the notes you give us, to deliver the service you bought.

2. Who processes data for us

We do not sell personal data. We use these processors, each only for the service it provides to us: SADAD Payment Solutions (payments, Qatar); Firebase by Google (SMS sign-in codes; may be processed outside Qatar under Google's safeguards); our own mail server (receipts, invoices and notices); and our hosting provider (servers). If you choose SMS reminders, an SMS provider registered in Qatar sends them.

3. How long we keep it

Orders, invoices, payment records and daily usage totals: 10 years, as required by Qatari commercial and tax record-keeping rules. Detailed per-request API logs with IP addresses, origin domains and user agents: 13 months, then deleted. Ended sign-in sessions and email confirmation links: 30 days. Account details: while your account is open, then for the record-keeping period above where the law requires it.

4. Your rights

You may ask to access, correct or delete your personal data, object to processing, or withdraw consent you have given, by emailing info@louis-innovations.com from your account email. We answer within 30 days. Records we must keep by law (for example invoices) are kept for the legal period. You can turn SMS reminders off in your dashboard at any time. If you are not satisfied with our answer, you can complain to the Compliance and Data Protection Department of the National Cyber Security Agency (NCSA).

5. Messages

We send service messages (receipts, invoices, plan reminders, setup updates and security notices) by email, in your dashboard and, if you have not opted out, by SMS. We do not send marketing messages without your prior, separate consent.

6. Security

API keys and session identifiers are stored only as one-way cryptographic hashes. All traffic is encrypted with HTTPS/TLS. Payment messages from SADAD are verified with a cryptographic signature before they are accepted. Access to personal data is limited to staff who need it.

7. Governing law and contact

This notice is governed by the laws of the State of Qatar. Contact: Abtikarat Louis Trading & Services W.L.L., P.O. Box 82409, Doha, Qatar. Email info@louis-innovations.com, telephone +974 3371 0925. This notice is available in Arabic and English; if they differ, the Arabic text prevails.