01 — Data handling
What CARE stores, where, and for how long.
- What CARE stores
- WhatsApp conversations, the documents you upload (service menu, prices, staff bios, booking rules, hours), and operational metadata. Never card numbers, never customer payment data.
- Where data is stored
- All conversation and knowledge-base data hosted on infrastructure inside the GCC. Data never leaves the region for processing or backup.
- Retention
- Active during your account's life. On cancellation: 30-day export window, then permanent deletion within 30 days.
- Access
- Only your Staff Console members plus the on-call Thamra Group engineer. All access logged.
02 — Regulatory posture
PDPPL, in-region hosting, and what we never touch.
- PDPPL compliance
- Conversation data, consent, retention, and deletion flows are designed to satisfy Qatar PDPPL. Downloadable one-pager available for your compliance contact.
- Booking-system independence
- CARE never logs into Fresha, Booksy, or any calendar system. It reads only the documents you share. Bookings are confirmed via your existing payment + calendar flow — CARE drives the customer through it.
- No payment processing
- CARE never holds card data, never processes a refund, and never moves money. Deposits and payments flow through links you provide (Fresha checkout, Stripe, etc.).
- Client-facing disclosure
- CARE introduces itself as your salon's WhatsApp assistant on the first message. Clients always know they're talking to an AI assistant supervised by your team.
03 — Operational controls
What you and your team can do, audit, and revoke.
- Front-desk override
- Every conversation is visible in real time in the Staff Console. Your team can step in, edit a reply before it sends, or take full control instantly.
- Audit logs
- Every CARE reply, override, escalation, and outbound campaign is logged with timestamp and operator ID. Downloadable as CSV.
- Conversation export
- One-click export of any conversation as CSV — useful for client requests under PDPPL, training, or quality reviews.
- Data deletion on demand
- Delete any client's conversation history and phone number on demand from the Staff Console. Propagates to backups within 7 days.