Privacy Policy
Last updated: February 1, 2026
1. Information We Collect
We collect information you provide directly when creating an account, such as your name, email address, company name, and phone number. We also collect usage data including documents created, templates used, calculations performed, and pages visited. When you make a payment, our payment processor (Stripe) collects billing information — we do not store your full credit card details on our servers.
2. How We Use Your Information
We use your information to provide, maintain, and improve the Bylaw Service; process your transactions and manage your subscription; send you transactional emails, service updates, and support messages; personalize your experience and provide relevant template recommendations; ensure platform security and detect unauthorized access; comply with legal obligations under Qatar and GCC regulations; and generate aggregated, anonymized analytics to improve our platform.
3. Data Storage and Security
Your data is stored on secure cloud infrastructure with encryption at rest and in transit (TLS 1.2+). We implement industry-standard security measures including access controls, regular security audits, and automated threat monitoring. Our infrastructure is hosted in data centers that comply with international security standards. We maintain regular backups to prevent data loss.
4. Third-Party Services
We use the following third-party services to operate the platform: Stripe for payment processing, Microsoft Azure for cloud hosting and infrastructure, and analytics tools for understanding platform usage. Each of these services has their own privacy policy governing how they handle your data. We only share the minimum information necessary for these services to function.
5. Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember your language preference, and analyze platform usage. For detailed information about cookies, please refer to our Cookie Policy.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time through your account settings. You can request a copy of all data we hold about you by contacting our support team. You can opt out of non-essential communications. You can delete your account, which will remove your personal data within 30 days (some data may be retained as required by law). You have the right to data portability — we can export your documents and data in standard formats upon request.
7. Data Retention
We retain your account data for as long as your account is active. After account deletion, we retain your data for 30 days to allow for recovery, after which it is permanently deleted. Financial transaction records are retained as required by Qatar tax and commercial regulations. Anonymized usage analytics may be retained indefinitely.
8. Children's Privacy
Bylaw is a business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child's data has been collected, we will promptly delete it.
9. International Data Transfers
Your data may be processed and stored in servers located in the UAE (Azure UAE North region) and other locations where our service providers maintain infrastructure. We ensure that any international transfers of data comply with applicable data protection laws and that appropriate safeguards are in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a notice on the Service. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@bylawqa.com or through the Contact Us page on our website.