Privacy Policy

Effective date: 15 October 2026

Madar Labs for AI (“Madar”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store, and share information when you visit madar.eg, contact us, use interactive features on our website, purchase services from us, or otherwise interact with Madar.

Madar is a technology company based in Cairo, Egypt.

Information we collect

The information we collect depends on how you interact with us.

Information you provide

You may provide information such as:

• your name;
• email address;
• telephone number;
• company or organization;
• messages, project information, or enquiries you send to us;
• billing and transaction information;
• information you provide when entering into an agreement or purchasing a service from us; and
• content you submit through interactive or AI-powered features on our website.

Please avoid submitting confidential, highly sensitive, or unnecessary personal information through public forms or demonstration features.

Payment information

When you make a payment, payment processing may be provided by a third-party payment service provider.

Your payment provider may collect information such as your card or payment-account details directly. Madar does not need to receive or store your complete payment-card number in order to process payments through such providers.

We may receive transaction-related information such as the payment amount, transaction identifier, payment status, payment method, and limited payment-account information necessary for accounting, support, fraud prevention, and reconciliation.

Technical information

When you use our website, we may automatically receive certain technical information, such as:

• IP address;
• browser and device information;
• operating system;
• pages visited;
• date and time of requests;
• referring pages;
• diagnostic and security logs; and
• cookie or similar technology information where applicable.

How we use information

We may use personal information to:

• respond to enquiries and communicate with you;
• understand your requirements;
• provide, operate, and improve our services;
• prepare proposals and enter into contracts;
• process and reconcile payments;
• provide customer support;
• operate interactive and AI-assisted features;
• maintain the security and reliability of our systems;
• detect abuse, fraud, or technical problems;
• maintain business, tax, accounting, and transaction records;
• comply with applicable legal and regulatory requirements; and
• send marketing communications where you have consented to them or where otherwise permitted by applicable law.

We do not sell your personal information.

Connected Meta accounts and customer messages

Madar’s restaurant platform and its integrations with WhatsApp Business, Facebook Messenger, and Instagram are in development. The following describes the intended handling of information when these optional integrations become available. We will update this policy if the implemented features or data practices change.

Authorization and information received

Restaurant owners will choose whether to connect their own business accounts and authorize access by granting the permissions needed for the features they enable. Depending on those permissions, Madar may receive:

• business account, Facebook Page, Instagram account, and WhatsApp Business account names and identifiers, business contact details, and associated permissions;
• access tokens and related connection information needed to communicate with Meta’s services;
• customer identifiers, names, contact details where available, message content and attachments, timestamps, delivery information, and order details shared in conversations with the restaurant; and
• advertising account and campaign information and performance insights, only where the restaurant separately authorizes the relevant advertising features.

We will not ask restaurants or their customers to send us their Meta account passwords.

How connected information will be used and shared

We will use connected account information to establish and maintain the authorized connection. Customer messages and related information will be processed to display and organize conversations, help restaurant staff respond to inquiries, and manage orders through the platform. Authorized advertising information will be used to provide advertising management and campaign insights.

When a restaurant enables AI-powered assistants, customer messages and relevant menu, pricing, and order information may also be processed by our AI service providers to generate replies, answer questions, and take or confirm orders under that restaurant’s settings and business rules. Restaurant owners will be able to review or take over AI conversations whenever needed.

Access to this information will be limited to the restaurant’s authorized users and Madar personnel or service providers who need it to operate, support, or secure the service. Messages and authorized actions will be transmitted to the relevant Meta service to deliver the requested functionality. Meta also processes information under its own terms and privacy policies.

We will not sell or rent connected Meta account information or customer messages. Any AI-assisted processing of customer communications will be explained before the relevant feature is enabled.

Retention, disconnection, and deletion

Connected account information and customer messages will be retained only as needed to provide the authorized service or meet applicable legal obligations. Access tokens will be kept only while needed for an authorized connection and removed when no longer needed or when access is revoked.

Restaurants may revoke permissions through the relevant Meta account’s settings. Revoking access stops future access through that authorization; it does not itself delete information already received by Madar. Restaurants and customers can request deletion of information held by Madar by following our data-deletion instructions.

After verifying a request, we will delete the relevant information unless retention is required by law, and explain any such exception. Deletion by Madar does not delete copies independently held by Meta or the restaurant. Customers may also contact the restaurant directly about information it holds.

AI-powered features

Some Madar services or website features may use artificial intelligence systems.

When you submit content to such a feature, that content and related technical information may be processed for the purpose of generating a response, providing the requested functionality, preventing abuse, and maintaining the service.

We may use third-party infrastructure or AI service providers to provide parts of these features.

Do not submit passwords, payment-card numbers, national identification numbers, confidential business information, medical information, or other sensitive information unless a particular service specifically requires it and appropriate arrangements have been made.

Legal basis for processing

Where applicable, we process personal information on one or more lawful bases, including:

• your consent;
• taking steps at your request before entering into a contract;
• performing a contract with you;
• compliance with legal obligations;
• establishing or protecting legal rights; and
• legitimate business interests where those interests do not override your rights and freedoms.

How we share information

We may share information only where reasonably necessary with:

• payment processors and financial service providers;
• hosting, cloud, infrastructure, security, and communications providers;
• technology and AI service providers used to operate our services;
• professional advisers such as accountants, auditors, and legal advisers;
• contractors or service providers working on our behalf; and
• government authorities or other parties where disclosure is required by law or a valid legal process.

Service providers are given access only as necessary for the relevant purpose.

We do not sell or rent personal information to third parties.

International data processing

Some technology providers we use may operate infrastructure outside Egypt.

Where personal information is transferred or processed internationally, we will handle such transfers in accordance with applicable Egyptian data-protection requirements and other applicable law.

Cookies and similar technologies

Madar may use cookies or similar technologies for essential website functionality, security, preferences, performance, and analytics.

Where applicable law requires consent for a particular technology, we will request that consent before using it.

You may also be able to control cookies through your browser settings.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and as required for legitimate business, contractual, accounting, tax, security, or legal purposes.

Retention periods may differ depending on the type of information and our legal obligations.

When information is no longer required, we may delete, anonymize, or securely dispose of it.

Security

We use reasonable technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse.

No internet service or electronic storage system can guarantee absolute security.

Your rights

Subject to applicable law, you may have rights concerning your personal information, including the right to:

• know whether we process your personal information;
• request access to your information;
• request correction of inaccurate or incomplete information;
• request deletion of information where applicable;
• withdraw consent where processing is based on consent;
• object to or request restrictions on certain processing; and
• submit a complaint to the competent data-protection authority.

To make a privacy request, contact us at hello@madar.eg.

We may need to verify your identity before completing certain requests.

Children’s privacy

Madar’s website and business services are not intentionally directed to children.

We do not knowingly seek to collect children’s personal information through the general Madar website. If we become aware that such information has been collected inappropriately, we will take appropriate steps in accordance with applicable law.

Third-party websites

Our website may contain links to websites or services operated by other organizations.

Their privacy practices are governed by their own policies, and Madar is not responsible for third-party websites or services that we do not control.

Changes to this policy

We may update this Privacy Policy as our services, technology, or legal obligations change.

When we make changes, we will publish the updated version on this page and revise the effective date where appropriate.

Contact us

Madar Labs for AI
Cairo, Egypt
hello@madar.eg
madar.eg

Nothing in this Privacy Policy limits any rights available to you under applicable law.