Privacy Policy

UMRAIO® (“we”, “us”, or “our”) provides an AI autonomous business executive platform for licensed Umrah and travel agencies. This Privacy Policy explains how we collect, use, store, share and protect information when you use our website, applications and services.

By using UMRAIO, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

Account and business information

When an agency registers for UMRAIO, we collect the information needed to create and manage the account. This typically includes the agency name, business contact details, administrator email address and any profile information entered during onboarding.

Customer and lead information entered by agency users

UMRAIO is a business tool used by agencies to manage their own customer relationships. Agency users may enter or import lead and customer information such as names, phone numbers, email addresses, cities, travel preferences, group size, budget, travel month and conversation history. This data is processed on behalf of the agency that entered it.

WhatsApp-related information

If an agency chooses to connect a WhatsApp Business account, we receive and process the information necessary to send and receive messages through the WhatsApp platform. This includes the connected phone number, WhatsApp Business account identifiers, message content, delivery status and any configuration settings the agency provides. We do not access personal WhatsApp accounts or messages outside the connected business number.

Website and app usage data

We collect technical and usage information needed to operate and improve the platform. This may include IP addresses, browser type, device information, pages visited, feature usage, error logs and timestamps. Where available, this data is stored in aggregated or pseudonymised form.

Cookies and similar technologies

UMRAIO uses cookies and similar technologies to maintain sessions, remember preferences, understand how the service is used and support security. You can control cookies through your browser settings, although disabling certain cookies may affect functionality.

We use the information we collect to:

• Provide, operate and maintain the UMRAIO platform and AI services.
• Enable agency users to manage leads, conversations, tasks and CRM pipelines.
• Generate automated responses, follow-up suggestions and business insights using AI.
• Send and receive WhatsApp messages on behalf of connected agencies.
• Monitor usage, enforce limits and improve platform performance and security.
• Communicate important service updates, billing information and support responses.

AI processing and automated responses

UMRAIO uses AI to read incoming business messages, understand intent, qualify leads, suggest replies and recommend next actions. AI outputs are generated for the agency's own business purposes and are not used to train third-party AI models. Agencies remain responsible for reviewing and approving automated actions where required by their internal governance.

WhatsApp and Meta platform integrations

When an agency connects WhatsApp, UMRAIO acts as a processor of message data on the agency's behalf. Message routing, delivery and status updates are handled through Meta's WhatsApp Business Platform and are subject to Meta's terms and data practices. We only process the data needed to deliver the service the agency has configured.

We rely on carefully selected third-party providers for hosting, authentication, database services, AI inference, analytics and messaging infrastructure. These providers only receive the information necessary to perform their specific functions and are contractually required to protect it. We do not sell personal or business data to third parties.

We implement technical and organisational measures designed to protect information from unauthorised access, loss or misuse. These include encryption in transit, access controls, audit logging and regular security reviews. No online service can guarantee absolute security, and agencies are also responsible for maintaining the confidentiality of their own account credentials.

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes and enforce agreements. Specific retention periods depend on the type of data and the agency's subscription status. When data is no longer needed, it is securely deleted or anonymised in accordance with our retention procedures.

We do not share agency or customer data except in the limited circumstances described below:

• With the agency that owns the data. Agency users can access the data they or their team members have entered.
• With service providers. As described above, for hosting, messaging, AI and operational support.
• For legal reasons. When required by law, regulation, legal process or to protect our rights, users or the public.
• With consent. When the agency or end-user has given explicit permission.

Depending on your location and applicable law, you may have rights to access, correct, restrict or delete your personal information. Agency administrators can manage most account and team data directly within UMRAIO. If you are an end-customer of an agency using UMRAIO, please contact that agency first, as they control the data they have entered about you.

Agency administrators can request deletion of their account and associated data by contacting our support team. We will verify the request and process deletion in a reasonable timeframe, subject to any legal or contractual obligations that require us to retain certain records.

To request deletion of your data, please email us at privacy@umraio.com with the subject line “Data Deletion Request” and include the email address associated with the account.

UMRAIO is a business platform intended for use by licensed travel agencies and their staff. We do not knowingly collect personal information from children under the age of 16. If you believe we have inadvertently collected such information, please contact us so we can delete it promptly.

UMRAIO may use service providers located in different countries to host and process data. When information is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms to protect it in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle information, please contact us:

Email: privacy@umraio.com

Website: https://umraio.com