Privacy Policy

Last updated: September 2026. This policy explains how Alyaat handles information for rental companies (tenants) and portal customers.

1. Who we are

Alyaat is a multi-tenant equipment rental platform. Company workspaces and the public customer portal share infrastructure, but tenant data is isolated by design using tenant identifiers and service-layer checks.

2. Information we process

For rental companies

Account and branding details (company name, logo, currency, country, timezone, language).
Staff users, roles, locations, CRM customers, equipment, rentals, invoices, payments, and portal inbox activity.

For portal customers

Registration details such as full name, phone number, and password credentials (stored securely as hashes).
Rental requests, conversations with companies, and related attachments you choose to send.

3. What is shown publicly

Only equipment that a company explicitly publishes appears in the portal. Public listings show general pricing and city-level location—not full street addresses, negotiated prices, other customers, or internal reports. Companies must opt in (`portal_enabled`) before their listings can appear.

4. How we use information

Operate company workspaces and the customer portal.
Process rental requests, messaging, contracts, and billing records.
Protect accounts (for example lockouts after failed login attempts).
Improve reliability, security, and product quality.

5. Sharing

When a portal customer sends a rental request or message, the relevant company receives the information needed to respond. We do not sell personal data. Service providers that host or operate the platform may process data only to deliver Alyaat.

6. Retention and security

We retain account and operational records while your account is active and as needed for legitimate business, legal, or dispute purposes. Access controls, tenant isolation, and authentication safeguards help protect data; no method of transmission or storage is perfectly secure.

7. Your choices

Portal customers can review profile data and activity from their portal dashboard.
Company owners and admins manage users, settings, and portal participation from the tenant workspace.
Contact [email protected] to request access, correction, or deletion where applicable under local law.

8. Changes

We may update this policy as Alyaat evolves. Continued use after changes means you accept the revised policy. Material updates will be reflected on this page with a new “Last updated” date.