This policy explains how Oomor (“we”) handles personal data when you visit oomor.com or use our products Munadi and Yalla. We keep it short and specific. Questions: privacy@oomor.com.
Who is responsible
For account, billing and website data, Oomor is the controller. For the conversations and orders our products handle on behalf of a business (for example a clinic's callers or a restaurant's customers), that business is the controller and Oomor acts as its processor, following its instructions.
What we collect
- Account data: name, work email, phone number, business name and settings.
- Billing data: plan, invoices and usage. Card details are collected and stored by Lemon Squeezy, our Merchant of Record; we never see full card numbers.
- Conversation data (Munadi): caller phone numbers, call audio recordings, transcripts, WhatsApp and chat messages, and booking details, processed on behalf of our business customers.
- Order data (Yalla): customer names, contact details, delivery addresses and order contents, processed on behalf of our business customers.
- Technical data: IP address, browser type and logs needed to run, secure and debug the Services. oomor.com does not use advertising cookies or third-party trackers.
How we use it
- To provide the Services: answering calls and messages, booking, taking orders, transferring to staff.
- To bill you, provide support, and send service and security notices.
- To keep the Services secure and fix problems.
- To improve the Services using aggregated or de-identified information. We do not use your customers' conversations to train third-party AI models.
Our legal bases are performance of our contract with you, our legitimate interests in running a secure service, compliance with law, and consent where it is required.
Who we share it with
We share personal data only with service providers that help us run the Services, under contracts that restrict their use of it:
- Lemon Squeezy (payments, tax, invoicing, as Merchant of Record);
- telephony and messaging providers (for example SIP carriers and WhatsApp Business by Meta);
- AI model and speech providers that process audio and text to generate responses;
- hosting, email and error-monitoring providers.
We do not sell personal data. We may disclose data if required by law or to protect rights and safety.
International transfers
We are based in Egypt and our providers may process data in other countries, including the European Union and the United States. Where required, we use appropriate safeguards for these transfers.
How long we keep it
- Call recordings and transcripts: 90 days by default, unless the business customer sets a different period.
- Account and billing records: for as long as the account is active, and afterwards as long as tax and accounting law requires.
- Logs: up to 30 days.
Security
Data is encrypted in transit (TLS) and access is limited to staff who need it. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal data and to object to processing. Email privacy@oomor.com. If you were a caller or customer of a business that uses our products, contact that business first; we will help them respond. You may also complain to your local data protection authority.
Children
The Services are for businesses and are not directed at children under 16.
Changes
We will post updates here and change the date above. Material changes will be emailed to account owners.