Privacy policy

Zaatly is a CRM operated by NewTurn Technologies LLC, Dubai, United Arab Emirates (“we”, “us”). This policy explains what personal information we handle when you use Zaatly — the web app at app.zaatly.com, the Zaatly Android app, and this website — and the choices you have.

Who is responsible

Zaatly is used by organisations (“customers”) to manage their customers, deals and communications. The information a customer puts into its Zaatly workspace belongs to that customer, and we process it on the customer’s behalf and on its instructions. For account, security and website information we decide how it is used, as described below.

What we collect

• Account information — your name, work email, role, password (stored only as a one-way hash), two-step verification settings, and preferences such as language and time zone.
• Workspace content — the records your organisation keeps in Zaatly: customers, contacts, deals, quotations, tickets, tasks, notes and files. If you connect your Microsoft 365 account, Zaatly also handles the emails, calendar events, Teams chats and files you bring in through that connection.
• People our customers work with — when someone opens a quotation link, signs it electronically (name, job title, email, IP address and signature), books a meeting, fills in a form or uses a website chat run on Zaatly, that information is handled for the customer who sent the link or runs the page.
• Security and usage information — IP address, browser and device type, sign-in times, and an audit log of changes made in a workspace. We use it to keep accounts secure, investigate problems and show administrators who did what.
• Notifications — if you turn on notifications on a device, the delivery address your browser or phone gives us for that device.
• Website — what you send us through this website’s chat or quote form.

How we use it

• To provide Zaatly: sign-in, storing and showing your workspace, sending the emails and notifications you ask for, and syncing the services you connect.
• For Zaatly’s AI features (drafting, summarising and suggestions). The relevant content is processed by Microsoft’s Azure OpenAI service in Microsoft’s UAE North data centre. It is not used to train AI models.
• To secure the service, prevent abuse, and help when you contact support.
• To meet legal obligations.

We do not sell personal information, and we do not use it for advertising. The Zaatly Android app contains no advertising and no third-party analytics or tracking.

Where it is stored and who processes it

Zaatly runs on Microsoft Azure in the United Arab Emirates (UAE North). Data is encrypted in transit and at rest. Backups are encrypted, kept on the server for 7 days, and kept in Azure storage in the UAE for 35 days.

Service providers we rely on:

• Microsoft — hosting (Azure), AI processing (Azure OpenAI), and Microsoft 365 when you connect it.
• Push services run by browser and phone makers (such as Google and Apple), which deliver notifications to your devices.
• Services your organisation chooses to connect, such as its own mail server or ERP — only when it connects them.

How long we keep it

Workspace content is kept while your organisation uses Zaatly. When an organisation leaves, or asks us to delete its data, we delete it; copies in backups expire within 35 days. Security logs are kept only as long as needed for security and legal purposes.

Your choices and rights

Your organisation’s administrators control workspace content and can correct, export or delete it. To see, correct or delete your own information, ask your administrator, or email us at hello@zaatly.com and we will help or pass your request to the right organisation. You can switch off notifications for any device at any time in Settings → Profile, or in your phone’s settings. We handle requests under the UAE Personal Data Protection Law and other laws that apply to you.

Deleting your account: ask your organisation’s administrator to remove you, or email hello@zaatly.com from the address on your account. We confirm when it is done.

Security

Each organisation’s data is kept separate at the database level. Access is role-based, two-step verification is available, and changes are recorded in an audit log. No system is perfectly secure; if we learn of a breach that affects you, we will tell the affected organisation and, where required, the authorities.

Children

Zaatly is a business service and is not intended for anyone under 18.

Changes

When we change this policy we update the date at the top. Significant changes are announced in the app.

Contact

NewTurn Technologies LLC, Dubai, United Arab Emirates · hello@zaatly.com