Privacy Policy

1.Who we are

Rqmii (also written “rqmii”) is the brand of Raqmi Alghamira Company For Technologies (شركة رقمي الغامرة للتقنيات), a limited liability company registered in the Kingdom of Saudi Arabia, Commercial Registration No. 1010907597, Unified National Number 7033453833, with its registered office at 3915 King Abdullah Road, 8563 Al Raed District, Riyadh 12354, Saudi Arabia (“Rqmii”, “we”, “us”, “our”). References to “rqmii” anywhere in this policy mean Rqmii.

For all privacy matters, including requests to exercise your rights, contact our data protection contact at [email protected] or write to the address above. Sales enquiries go to [email protected].

If you are in the EU/EEA or the UK, we will appoint a representative under Article 27 GDPR when we begin serving customers there and will publish their details in this section.

2.The two roles we play

Rqmii provides a platform on which businesses (“Subscribers”) build and deploy AI Employees (also called AI Agents, Agents, Digital Employees, Avatar Agents or Digital Humans on our website, dashboard and materials) — AI agents and digital avatars that talk to the Subscriber’s customers, visitors and callers (“End Users”) over websites, WhatsApp, phone and physical kiosks.

If you are an End User, the Subscriber whose AI Employee you spoke with is responsible for the lawful basis, the notice you received and for answering your requests. We will forward any request you send us to the relevant Subscriber and help them respond.

3.Personal data we collect as a controller

Account data. First name, last name, business email address and a hashed password when you create an account. Team members you invite: name and email.

Billing data. Company or organisation name, billing address, billing email, optional phone number and tax or VAT ID. Card payments are processed by our payment provider; Rqmii never stores full card numbers. Invoices are issued through our accounting provider.

Configuration data. The names, voices, avatar images, instructions, knowledge files and integrations you set up for your AI Employees. If you upload an image of a real person for a custom avatar, you confirm you have that person’s consent (see Terms of Service, Section 9).

Usage and device data. IP address, browser and device type, pages viewed, actions taken in the dashboard, credit consumption, log and error data, and approximate location derived from IP.

Communications. Messages you send us by email, contact form, WhatsApp or support channels, and demo-booking details.

Cookies and similar technologies. See our Cookie Policy.

We do not knowingly collect sensitive or special-category data (health, biometric identifiers, religion, political opinions, etc.) from Subscribers, and we ask you not to include it in support requests. The only exception is an image or recording a Subscriber uploads or supplies to create a custom avatar or voice, which is processed solely for that purpose under the consent the Subscriber warrants in Section 9.5 of the Terms of Service.

4.Personal data we process on behalf of Subscribers (End User Data)

Depending on the channel and the Subscriber’s configuration, an AI Employee may process:

• Audio of what the End User says (voice and phone channels), and audio recordings where the Subscriber enables them
• Text transcripts of every conversation
• Video or camera frames when an End User interacts with a digital avatar on a kiosk or screen, used only to run the interaction, never for facial recognition or identification
• Phone number (phone and WhatsApp channels), WhatsApp profile name and message content
• IP address, browser and session identifier (web channel)
• Information the End User chooses to share in the conversation, including contact details captured as leads, appointment details and order details
• Any data pulled from the Subscriber’s connected systems (CRM, calendar, e-commerce) to answer the End User

We process End User Data only on the Subscriber’s documented instructions, for the purpose of running the AI Employee, keeping the Platform secure and meeting our legal obligations. We do not use End User Data for our own marketing and we do not sell it.

5.Why we use personal data and on what legal basis

6.How we use AI — and what we do not do with your data

• We do not use Subscriber Content or End User Data to train general-purpose AI models. Conversations, recordings, leads, knowledge files and avatar images are used solely to deliver the Services to the Subscriber that owns them.
• We may use aggregated and de-identified statistics (for example average call length or error rates) to monitor quality and improve the Platform. This data cannot be linked back to any person or Subscriber.
• If we ever offer a programme to use customer data for model improvement, participation will be opt-in only, under a separate written agreement, and never a condition of using the Services.
• Our AI model, speech-to-text and text-to-speech providers are bound by contract not to use data sent through our Platform to train their models. Those providers may retain requests for a short period (typically no more than 30 days) solely to detect abuse.
• AI Employees generate responses automatically. They do not make legally or similarly significant decisions about End Users without human involvement unless the Subscriber configures and takes responsibility for such use.

7.Where your data is stored and processed

Storage. Subscriber accounts and End User Data are stored in one of two hosting regions, chosen per deployment: Saudi Arabia (Google Cloud, Dammam) or Germany (AWS, Frankfurt). Enterprise Subscribers may select a region under the Data Residency option. Authorised Rqmii engineering and support staff, located in Saudi Arabia or Egypt, may access data remotely only to the extent needed to provide support and maintenance, under strict access controls and written confidentiality obligations.

AI processing. Language models, speech recognition and voice synthesis may run on Rqmii’s own infrastructure in the hosting region (self-hosted models, where offered) or be processed by providers located in the United States or the European Union. Data is transmitted in encrypted form, is not stored by these providers beyond short-term abuse monitoring, and is never used for their training.

Other providers. Payment, invoicing, telephony, messaging, CRM and email providers may be located in Saudi Arabia, Egypt, the EU or the United States. A list of our sub-processors, with their locations, is available to Subscribers on request under our Data Processing Addendum.

International transfers. When data leaves the Kingdom of Saudi Arabia, the EU/EEA, the UK or Egypt we rely on: the transfer rules of the PDPL and its Regulations (including SDAIA standard contractual clauses and adequacy decisions where available); EU Standard Contractual Clauses and UK International Data Transfer Addendum, with transfer impact assessments; and the requirements of Egyptian Law 151/2020 and its executive regulations. Copies of the safeguards are available on request.

8.Who we share data with

We share personal data only with:

1. Sub-processors and service providers that host, run, secure, bill or support the Services, under written contracts that restrict them to our instructions (see Section 7)
2. The Subscriber whose AI Employee you interacted with (End User Data belongs to them)
3. Third-party services the Subscriber connects (for example a CRM, calendar or WhatsApp Business account) — the Subscriber controls these integrations
4. Professional advisers, auditors and insurers under confidentiality
5. Authorities, courts and regulators when required by law or to protect rights, safety or property; we will notify the Subscriber before disclosing End User Data unless legally prohibited
6. A successor in a merger, acquisition or asset sale, with notice to you

We do not sell personal data, and we do not “share” it for cross-context behavioural advertising as defined by the CCPA. We have not sold or shared personal data in the preceding 12 months.

9.How long we keep data

10.How we keep data secure

We apply commercially reasonable technical and organisational measures appropriate to the risk of the data we process. These include: encryption of data in transit (TLS 1.2+) and at rest; logical isolation of each Subscriber’s data; role-based access, with team-member permissions you control in the dashboard; rate limiting and a domain allowlist you can set for each AI Employee; configurable disclosure and consent messages; the ability to delete conversations from the dashboard; written security and confidentiality commitments from every provider that handles your data; and regular backups. No system is perfectly secure. If we become aware of a personal data breach affecting your data we will notify affected Subscribers without undue delay, and within the time the applicable law requires (72 hours under GDPR and PDPL), so they can meet their own obligations.

11.Your rights

Depending on where you live you may have the right to: access the personal data we hold about you and receive a copy; correct inaccurate data; delete your data; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); not be subject to a solely automated decision with legal or similarly significant effects; opt out of marketing; and lodge a complaint with a supervisory authority.

Saudi Arabia (PDPL): rights are exercised under the PDPL and its Implementing Regulations; complaints may be addressed to the Saudi Data & AI Authority (SDAIA). EU/EEA and UK (GDPR): complaints may be lodged with your local data protection authority; our EU-hosted data is processed in Germany. California (CCPA/CPRA): you have the rights to know, delete, correct, and to non-discrimination. We do not sell or share personal information, so there is no opt-out to offer. You may use an authorised agent. We respond within 45 days, extendable by 45 days with notice. Egypt (Law 151/2020): rights are exercised under the Law and its Executive Regulations; complaints may be addressed to the Personal Data Protection Centre once operational.

To exercise a right, email [email protected] from the address linked to your account, or state which Subscriber’s AI Employee you spoke with if you are an End User. We may ask for information to verify your identity. We will respond within 30 days (or the shorter period your law requires) and will not charge a fee unless requests are manifestly unfounded or excessive.

12.Children

The Services are offered to businesses. You must be at least 18 years old, or the age of majority where you live, to create an account. We do not knowingly collect personal data from children under 13 (or under 16 where that is the applicable age) through our own websites. Subscribers who deploy AI Employees in settings where minors may be End Users (for example education) are responsible for obtaining verifiable parental or guardian consent where the law requires it and for configuring the AI Employee appropriately. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

13.Health and other sensitive data

The Platform is not designed to receive or store protected health information (PHI) under the US HIPAA, or other special-category or sensitive data, unless this is expressly agreed in a separate written agreement (such as a Business Associate Agreement) with an Enterprise Subscriber. Subscribers must not configure AI Employees to collect such data without that agreement. Routine appointment scheduling, routing of general enquiries, and information an End User volunteers in passing are permitted as set out in Section 4 of the Terms of Service.

14.Changes to this policy

We will post any new version here with an updated “Last updated” date. For material changes we will email Account Owners at least 30 days before the change takes effect. Continued use of the Services after the change takes effect means you accept the updated policy.

15.Contact

Raqmi Alghamira Company For Technologies (Rqmii) 3915 King Abdullah Road, 8563 Al Raed District, Riyadh 12354, Saudi Arabia [email protected]