Privacy Policy

1. About this service

Business Workspace is the shared business management application at alislahint.com, operated by AL ISLAH INTERNATIONAL (RL-1628) for its team and participating company workspaces, including Thawabet Recruiting Agency (RL-1439). It supports customer conversations, leads, staff collaboration, applicant processing and business records.

This policy covers the application and its sign-in service. The company handling your recruitment or business enquiry is responsible for the underlying service and its company records. Google sign-in does not automatically give anyone access to those records.

2. Information we receive

• Account information: your email, account identifier, sign-in method, authentication and session records, and the profile information associated with your account.
• Google sign-in: your Google account identifier, email and verification status, and basic profile details such as name and profile picture, when provided by Google. We do not receive your Google password or request access to Gmail, Drive, contacts or calendars for sign-in.
• Workspace information: staff details, assigned company and role, leads, customer messages, media, follow-ups and applicant or transaction records that you or an authorized team member submit. Applicant records may contain identity documents or medical information when needed for the relevant service.
• Technical information: session cookies, device/browser and connection information, request and security logs, and preferences such as your selected color theme.

3. How information is used

We use account information to authenticate you, maintain your session, check approved company membership and role, support account recovery and investigate access problems. Workspace information is used to provide the functions you use, coordinate staff work, respond to enquiries and maintain business records.

Google sign-in information is used for account identification and access management. It is not used for advertising, sold to data brokers, or used to train generalized AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

4. Company access and service providers

Access to company records is controlled by server-side membership and permissions. Authorized company staff and administrators can access the records needed for their roles; the authorized master administrator can manage participating company workspaces. Selecting a company or signing in with Google alone does not grant company access.

We use Supabase for authentication, database and storage services, and Vercel for hosting. Google processes Google sign-in. When a messaging feature is used, the relevant messages and attachments are processed through its connected provider, such as Meta for WhatsApp or Messenger. Enabled AI assistance may process relevant conversation content and approved business information through the configured AI provider to generate replies; this is separate from Google sign-in.

Information may also be disclosed when necessary to meet applicable legal obligations or investigate fraud, abuse or security incidents. Service providers may process information outside your country under their applicable terms and safeguards.

5. Cookies and local preferences

The application uses authentication cookies and browser storage to maintain sign-in, support secure login redirects and remember preferences. Blocking essential cookies may prevent sign-in from working. You can clear browser data or sign out; clearing browser data does not delete company records held on the server.

6. Retention and security

Account and business records are retained for the operational, security, audit and applicable legal needs of the relevant company. Retention depends on the record and its purpose; archiving a conversation is not permanent deletion. Access removal, Google disconnection and deletion of stored records are separate actions.

We use HTTPS and access controls to protect information and limit access by role and company. No online service can guarantee absolute security. Please protect your account, keep verification codes private and report suspected unauthorized access.

7. Your choices and requests

You may request access to, correction of, or deletion of information associated with you by contacting the workspace administrator below. Identify your company and the account email concerned; do not send passwords, verification codes or identity documents in your initial request. We may need to verify your identity and authority before acting.

Requests are reviewed against the relevant company's obligations and applicable law. Some audit, transaction or applicant records may need to be retained; we will explain any applicable limitation. There is no automatic promise that closing an account deletes every related business record.

You can remove Business Workspace's Google connection from your Google Account connections. This stops future access through that connection but does not itself erase existing workspace data or end every existing application session. Sign out and contact the administrator if account access should also be removed.

8. Contact and updates

For privacy questions or account/data requests, contact the Business Workspace administrator at alwafint@gmail.com. For company-specific records, state whether your request concerns AL ISLAH INTERNATIONAL or Thawabet Recruiting Agency.

We will update this page when these practices change. The date above identifies the latest version. If a new use of Google information requires additional consent, we will request it before that use.