Privacy Policy

This Privacy Policy explains how Qalyb (“Qalyb”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards Personal Data when you visit qalyb.ai or use any Qalyb service (the “Service”).

Qalyb is operated from the Sultanate of Oman. We process Personal Data in accordance with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree No. 6/2022) (the “PDPL”), its Implementing Regulations issued by the Ministry of Transport, Communications and Information Technology (MTCIT), and other applicable laws of Oman.

1. Who we are

Qalyb is an AI voice and chat agent platform that enables businesses to build, deploy, and operate conversational AI agents across voice, chat, and messaging channels (WhatsApp, web widget, telephony, and others). For the purposes of the PDPL, Qalyb acts as a Data Controller for data we collect about our customers (account holders) and as a Data Processor for data that our customers process through the Service (for example, conversations between a customer's end users and the AI agent configured by that customer).

Contact: contact@qalyb.ai

2. Personal Data we collect

We collect the following categories of Personal Data:

• Account data: name, email address, password (hashed), organization name, role, billing address, and tax identifier when provided.
• Usage data: log data, IP address, browser and device information, pages viewed, features used, error reports, and performance telemetry.
• Conversation data: messages, transcripts, audio recordings, and metadata exchanged between an AI agent and the end users a customer connects to it. This data belongs to the customer who configured the agent; we process it on their behalf.
• Integration data: credentials, tokens, and configuration details for third-party services (such as WhatsApp Business Platform, telephony providers, and CRMs) that customers choose to connect to the Service.
• Payment data: handled by our payment processors. We do not store full card numbers on our servers.

3. How we use Personal Data

We process Personal Data on the following lawful bases under the PDPL:

• Performance of a contract — to provide, maintain, and support the Service that you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, debug, improve quality, and develop new features, provided these interests do not override your rights.
• Legal obligations — to comply with Oman law, including tax, anti-money-laundering, and lawful requests from competent authorities.
• Consent — for marketing communications, optional analytics, and any other purpose that requires explicit permission under the PDPL. You can withdraw consent at any time.

4. Conversation data and AI processing

When an end user interacts with an AI agent built on Qalyb, the message (text, voice, or media) is transmitted to the language model and speech-processing providers we have integrated for that customer. These providers process the data on our behalf under data processing agreements. We retain conversation transcripts only for the period the customer specifies in their account, after which they are deleted or anonymized. We do not use a customer's conversation data to train general-purpose foundation models.

5. Sharing and disclosure

We share Personal Data only with:

• Sub-processors contracted to deliver parts of the Service (cloud hosting, language models, speech-to-text, text-to-speech, telephony, messaging, analytics, error monitoring, payments). A current list is available on request.
• Customers, where the data relates to their account (for example, conversations on agents they configured).
• Authorities, where required by Oman law, by court order, or to protect the rights, safety, or property of Qalyb, our users, or others.
• Successors, in the event of a merger, acquisition, or sale of assets, subject to your rights under the PDPL.

We do not sell Personal Data.

6. International transfers

Qalyb's primary infrastructure is hosted in Google Cloud's Middle East region. Some sub-processors process Personal Data outside the Sultanate of Oman. Where this happens, we rely on transfer mechanisms permitted by the PDPL, including transfers to jurisdictions recognized as providing adequate protection, contractual safeguards, and your explicit consent where required.

7. Retention

We retain Personal Data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained for the life of the account plus a reasonable period thereafter. Conversation data follows the customer's configured retention period and is deleted on request.

8. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit (TLS) and at rest, access controls, audit logging, secrets management, and routine security reviews. No system is perfectly secure; if we become aware of a Personal Data breach that meets the notification threshold under the PDPL, we will notify the competent authority and affected data subjects without undue delay.

9. Your rights

Subject to the PDPL, you have the right to:

• access the Personal Data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data, where applicable;
• restrict or object to certain processing;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• request data portability, where technically feasible;
• lodge a complaint with the MTCIT or other competent authority in the Sultanate of Oman.

To exercise any of these rights, contact contact@qalyb.ai. We will respond within the period required by the PDPL.

10. Children

The Service is intended for businesses and is not directed to children under the age of 18. We do not knowingly collect Personal Data from children. If you believe a child has provided us with Personal Data, please contact us and we will delete it.

11. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and understand how features are used. You can control cookies through your browser settings. Disabling certain cookies may impair the Service.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated through the Service or by email.

13. Contact

For privacy questions, requests, or complaints, write to contact@qalyb.ai.