Trust & Compliance

    CARE for Salons — Trust & Compliance

    How CARE handles client data, integrates alongside Fresha or Booksy, and stays PDPPL-compliant for hair, lash, nail, and barber businesses in the GCC.

    PDPPL · Hosted in the GCC · Plugs into Fresha or Booksy without replacing them · Your front desk supervises every booking.

    Back to Salons

    01 — Data handling

    What CARE stores, where, and for how long.

    What CARE stores
    WhatsApp conversations, the documents you upload (service menu, prices, staff bios, booking rules, hours), and operational metadata. Never card numbers, never customer payment data.
    Where data is stored
    All conversation and knowledge-base data hosted on infrastructure inside the GCC. Data never leaves the region for processing or backup.
    Retention
    Active during your account's life. On cancellation: 30-day export window, then permanent deletion within 30 days.
    Access
    Only your Staff Console members plus the on-call Thamra Group engineer. All access logged.

    02 — Regulatory posture

    PDPPL, in-region hosting, and what we never touch.

    PDPPL compliance
    Conversation data, consent, retention, and deletion flows are designed to satisfy Qatar PDPPL. Downloadable one-pager available for your compliance contact.
    Booking-system independence
    CARE never logs into Fresha, Booksy, or any calendar system. It reads only the documents you share. Bookings are confirmed via your existing payment + calendar flow — CARE drives the customer through it.
    No payment processing
    CARE never holds card data, never processes a refund, and never moves money. Deposits and payments flow through links you provide (Fresha checkout, Stripe, etc.).
    Client-facing disclosure
    CARE introduces itself as your salon's WhatsApp assistant on the first message. Clients always know they're talking to an AI assistant supervised by your team.

    03 — Operational controls

    What you and your team can do, audit, and revoke.

    Front-desk override
    Every conversation is visible in real time in the Staff Console. Your team can step in, edit a reply before it sends, or take full control instantly.
    Audit logs
    Every CARE reply, override, escalation, and outbound campaign is logged with timestamp and operator ID. Downloadable as CSV.
    Conversation export
    One-click export of any conversation as CSV — useful for client requests under PDPPL, training, or quality reviews.
    Data deletion on demand
    Delete any client's conversation history and phone number on demand from the Staff Console. Propagates to backups within 7 days.