Privacy Policy

O My Syria is deeply dedicated to maintaining the trust and privacy of our business customers and their end-users. This Privacy Policy details the types of information we collect, how it is processed, and the robust security measures enforced to protect it.

We collect only the minimum data required to deliver reliable service: (1) Account Information: email address, full name, business details, and contact numbers; (2) Knowledge Base Data: documents, guides, and policies uploaded by the customer; (3) Interaction Data: questions, answers, and feedback collected via widgets and APIs; (4) Technical Telemetry: IP addresses, browser types, and security audit logs.

Data is processed strictly for: (a) Document extraction, vector embedding, and accurate grounded answer synthesis; (b) Workspace access management and secure authentication via OTP and Google OAuth; (c) Providing analytics, inbox management, and audit trails; (d) Platform security monitoring, rate limiting, and subscription billing.

O My Syria strictly ensures that proprietary customer knowledge, uploaded files, and conversation logs are never used to train or fine-tune public large language models (LLMs). The retrieval pipeline functions in real time and retains zero persistent training state in third-party model providers.

We enforce strict defense-in-depth security: TLS 1.3 encryption in transit, AES-256 encryption at rest for object storage, database Row-Level Security (RLS) across all PostgreSQL tables, and isolated pgvector embeddings partitioned per organization and project.

We only use essential, functional cookies for secure session authentication (configured with HttpOnly, SameSite=Lax, Secure flags, and CSRF tokens) and local storage for theme (dark/light mode) and language preferences. We do not use third-party advertising or tracking cookies.

Customers maintain complete sovereignty over their data, including the right to inspect, edit, download uploaded documents, export conversation records, and execute permanent hard deletions of projects and organizations via OTP-protected dashboard controls.

We partner only with vetted cloud infrastructure and enterprise AI providers bound by strict Data Processing Agreements (DPAs) meeting international data security and privacy standards.

For any inquiries or data protection requests, please contact our privacy team at [email protected] or write to us at Hamou Software Co., Damascus, Syrian Arab Republic.