Privacy Policy

This Privacy Policy applies to websites, dashboards, SaaS tools, mobile applications, AI features, restaurant QR menu systems, custom business websites, customer portals, support channels, payment flows, and related services operated or provided by Zalepro Soft Solutions FZE LLC.

Separate client websites built on ZalePro may have their own additional privacy notices. Where ZalePro acts as a service provider or processor for a business client, that client may also be responsible for its own customer-facing privacy obligations.

This policy is prepared with reference to UAE data protection, electronic commerce, consumer protection, cybercrime, payment, tax, intellectual-property, and general business compliance principles, including where relevant:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
• UAE Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means.
• UAE Federal Law No. 15 of 2020 on Consumer Protection and its Executive Regulations.
• UAE Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes.
• Applicable free-zone, telecommunications, payment, anti-fraud, intellectual property, tax, and record-keeping requirements.
• International privacy expectations such as GDPR-style transparency, access, correction, deletion, security, retention, and cross-border transfer controls where they may apply to users outside the UAE.

Depending on the service used, we may collect account data such as name, email address, phone number, business name, trade details, role, login records, and support details.

For SaaS websites and commerce features, we may process product data, order data, customer data, staff records, delivery details, payment status, subscription details, uploaded media, design files, invoices, domain settings, and business configuration data.

For AI and app features, we may process prompts, messages, uploaded content, usage history, credit usage, preferences, and feedback required to provide and improve the service. We do not intentionally request sensitive personal data unless it is needed for a specific feature or required by law.

Technical data may include device type, IP address, browser, pages visited, authentication tokens, cookies, analytics events, error logs, and security telemetry.

• To create and manage user accounts, workspaces, sites, subscriptions, and customer portals.
• To provide SaaS hosting, AI tools, QR menu services, matrimony features, ecommerce workflows, order management, domain routing, and support.
• To process payments, invoices, refunds, credits, subscriptions, fraud checks, and financial records.
• To communicate service updates, support replies, verification codes, legal notices, security alerts, and transactional messages.
• To protect accounts, detect misuse, investigate abuse, prevent fraud, and comply with legal obligations.
• To improve performance, reliability, security, product features, analytics, and user experience.

We process personal data based on contract performance, legitimate business interests, consent where required, compliance with legal obligations, fraud prevention, security, and user-requested service delivery.

Where consent is required for marketing, optional cookies, or optional communications, users may withdraw consent by contacting us or using available unsubscribe/settings options.

We may use cookies, local storage, analytics pixels, authentication tokens, and similar technologies to keep users logged in, secure sessions, remember preferences, measure traffic, improve services, and prevent abuse.

Users may manage cookies through browser settings, but disabling essential cookies may stop login, checkout, dashboard, or security features from working properly.

Payments may be processed through third-party gateways or providers. We generally do not store complete card numbers. Payment providers may process data under their own privacy and compliance terms.

We may store transaction references, payment status, invoice data, subscription plan, customer identifiers, billing details, tax details, and support records required for accounting, audit, dispute handling, and legal compliance.

AI features may process user prompts, uploaded text, files, images, or instructions to generate responses or perform requested actions. Users must not upload illegal content, confidential third-party data without authority, or content that violates another person’s rights.

Backend AI providers may be used internally, but ZalePro user interfaces present the service under ZalePro or Shravz branding. We may log limited AI usage and credit transactions for safety, billing, troubleshooting, and abuse prevention.

We may share data with trusted service providers that help us operate the platform, including hosting, database, object storage, email, authentication, analytics, payment gateways, customer support, security, and AI infrastructure providers.

We may also disclose information when required by law, lawful authority requests, dispute resolution, fraud investigation, protection of rights, business restructuring, or enforcement of our agreements.

Our service providers may store or process data in the UAE or other jurisdictions. Where cross-border transfer rules apply, we aim to use reasonable safeguards such as contractual controls, access restrictions, security controls, and provider due diligence.

We keep personal data only as long as needed for service delivery, legal compliance, accounting, dispute resolution, fraud prevention, backup, and legitimate business operations.

Some records, such as invoices, payments, tax records, security logs, order history, and legal correspondence, may be retained for longer periods where required or reasonably necessary.

We use reasonable technical and organizational measures such as authentication, role-based access, secure database controls, environment secrets, encrypted transport, access logging, and backups where applicable.

No online system is 100% secure. Users are responsible for keeping passwords, devices, API keys, staff accounts, payment keys, and admin access secure.

Subject to applicable law, users may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about how personal data is processed.

Requests can be sent to info@zalepro.com. We may verify identity before processing a request and may refuse or limit requests where allowed by law.

Our general business SaaS services are intended for business users and adults. Some products may include family, education, or matchmaking-related features with separate eligibility rules. Users must follow the age and legal requirements of the relevant service.

We may update this Privacy Policy from time to time. The latest version will be posted on our website. Continued use of the services after an update means acceptance of the updated policy where permitted by law.