Privacy Policy

Information We Collect

When you register for Sudarfa or set up a client account, we may collect:

• Account Data — your name, email address, company name, and password
• Client Configuration Data — brand names, colors, phone numbers, WhatsApp numbers, Supabase credentials, and Gemini API keys you enter for your clients
• Billing Data — payment details processed via Stripe. We do not store card numbers directly.
• Communications — messages you send us via email or support channels

When your clients' customers use the booking pages or AI chat widget powered by Sudarfa, their booking details are stored in your client's own Supabase database — not ours. We do not have access to or ownership of that data.

How We Use Your Information

We use the information we collect to:

• Create and manage your Sudarfa operator account
• Generate patched client deployment packages
• Provide and improve the AI chat widget and review management features
• Process payments and send invoices
• Send service notifications, updates, and support responses
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations

We do not use your data for advertising or sell it to third parties.

Legal Bases for Processing

• Contract — processing necessary to deliver the Sudarfa service you subscribed to
• Legitimate Interests — improving our platform, maintaining security, preventing fraud
• Legal Obligation — complying with applicable laws and regulations
• Consent — where you have explicitly opted in, such as marketing communications

Sharing Your Information

We do not sell your personal information. We may share data with:

• Supabase — database infrastructure for the Sudarfa platform
• Vercel — hosting and deployment
• Google (Gemini API) — AI features. Your clients' Gemini API keys are transmitted to Google when AI features are used. See Google's privacy policy
• Stripe — payment processing. Card data handled directly by Stripe.
• GitHub — source code hosting used in the deployment workflow

Cookies & Tracking

The Sudarfa operator tool stores client configuration in your browser's localStorage — this is not a tracking cookie and is never transmitted to our servers.

Client-facing pages generated by Sudarfa do not set any tracking cookies on end-users.

Artificial Intelligence & Gemini

Sudarfa integrates Google's Gemini AI model to power: AI Chat Widget, AI Review Replies, and AI Sentiment Analysis.

AI features are opt-in and controlled per client. Clients whose AI features are disabled have zero AI data processing.

Data Retention

We retain your Sudarfa account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days unless required by law.

Your clients' booking data lives in their own Supabase databases — retention is governed by their own policies, not ours.

Data Security

Supabase credentials entered into the Sudarfa tool are stored only in your browser's localStorage and are never transmitted to our servers. We implement HTTPS encryption and access controls throughout.

Your Privacy Rights

Depending on your location, you may have rights to: access, correct, delete, or port your data. To exercise any right, contact us at support@sudarfa.com. We will respond within 30 days.

US Residents

California, Colorado, Virginia, and other US state residents may have additional rights including the right to know, correct, delete, and opt out of sale of personal information. We do not sell personal data. Submit requests to support@sudarfa.com.

SMS Data

• We use your mobile number solely to send service updates you consented to
• We do not sell mobile opt-in data
• Opt out anytime by replying STOP

Policy Updates

We may update this policy periodically. When we make material changes we will update the date above and notify active users by email where required.

Contact Us