Privacy policy
Last updated: 2026-09-21
This English translation is provided for convenience. The Arabic text is the authoritative version, and the legal review is still in progress — where the two differ, the Arabic version governs.
Who we are
Aamer is a platform specialised in taking restaurant orders by phone and WhatsApp. This policy explains how we collect, use and protect personal data, following the principles of the Saudi Personal Data Protection Law (PDPL). This policy is subject to periodic legal review.
Data we process
- Account data for the restaurant: name, email, phone number, and the branches you add.
- Operational data needed to take orders: call and message content, order details, and the menu.
- Technical data required to operate and secure the service, such as access logs and platform usage records.
Why we process it
- To provide the service: taking orders, suggesting upsells by your rules, and sending orders to your POS.
- To operate and secure the platform, including investigating incidents and preventing abuse.
- To communicate with you about your account, verification, and service updates.
Call recording
Calls may be recorded to complete orders and improve quality. The restaurant is responsible for informing callers that the call is handled by an automated agent and may be recorded, through an opening message on the call. Recordings are retained for the period defined in the subscription plan, and are then deleted according to the retention period once the scheduled deletion job is running.
Sharing and hosting
We rely on trusted service providers for hosting, payments and messaging, under contracts that limit their use of the data to operating the service. Data may be processed or stored inside the Kingdom or outside it, including in the AWS UAE region during the current stage.
Your rights
- Request access to your personal data, correction, or deletion as permitted by the applicable regulations.
- Withdraw consent where processing is based on consent.
- Raise a complaint with the competent authority if you believe your data has been mishandled.
Security
We apply technical and organisational controls that include encryption in transit, storage encryption with our cloud provider, per-tenant data isolation through strict row-level policies (RLS), secrets managed in an encrypted vault, and least-privilege access.
Contact
For privacy requests contact privacy@aamerai.io. This English translation is a convenience copy; the Arabic text governs.
For questions about this document, contact privacy@aamerai.io.