Privacy policy

Last updated: 15 October 2026

Effective date: 15 October 2026

1. Introduction

This Privacy Policy explains how RahaVidia ("we", "our") collects, uses, shares and protects your personal data when you use our website (rahavidia.com), the RahaVidia app, and the RahaVidia assistant on Telegram and WhatsApp (together, the "Services").

RahaVidia is a personal AI assistant. It helps you with your emails, calendar, tasks, contacts and files, and it only sends or changes things on your behalf after you approve them.

Company details

Legal name: Raha Tech Group FZE
Trade license number: 4426136.01
Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Website: https://rahavidia.com
Email: info@rahavidia.com

2. Legal basis

We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies to you, the EU General Data Protection Regulation (GDPR). We rely on:

Contract: to provide the Services you signed up for.
Consent: when you connect a service (for example Gmail, Google Calendar, Telegram or WhatsApp) or turn on optional features. You can withdraw consent at any time.
Legitimate interests: to keep the Services secure, prevent abuse and improve reliability.
Legal obligations: for example keeping billing records.

3. Personal data we collect

3.1 Account data

Name, email address, password (stored as a secure hash), language, time zone and profession.
Your settings, plan and credit balance.

3.2 What you give the assistant

Messages you write, files you upload, voice notes and their transcripts, and voice calls with the assistant.
Tasks, contacts, notes the assistant saves to its memory, and the drafts it prepares for you.

3.3 Data from services you connect

Only after you connect them yourself:

Email (Gmail or your own mailbox): messages, senders, recipients and attachments, so the assistant can read, sort and draft replies.
Google Calendar: your calendars and events, so it can plan, add, move or cancel meetings.
Google Drive and Google Sheets: the files and sheets you choose, so it can save files and add rows.
Your own AI keys (optional): stored encrypted and used only for your requests.

3.4 Telegram and WhatsApp

When you link Telegram or WhatsApp to your account, we process your Telegram chat ID or WhatsApp phone number, your display name, the messages and voice notes you send to the assistant there, and the technical events these platforms send us about those messages.

3.5 Payments

Payments are processed by Stripe. We receive the payment status and the last digits of the card, never the full card details.

3.6 Data collected automatically

IP address, browser and device type, pages visited and the time of requests.
Error and security logs needed to keep the Services working.

4. How we use your data

To provide the Services: answer you, prepare drafts, summarise, plan and carry out what you ask.
To ask for your approval before anything leaves your account: emails are sent, events are changed and rows are added only after you confirm.
To send the notifications you turned on, such as the morning brief, reminders and alerts.
To manage your plan, credits and payments.
To keep the Services secure, detect abuse and fix problems.

We do not sell your personal data and we do not use it for advertising.

5. How the AI works with your data

To write an answer, the part of your conversation that is needed (and the data the assistant looked up for it) is sent to an AI provider: OpenAI, Anthropic or Google, through their business APIs.
Voice notes and calls are processed by OpenAI to turn speech into text and back.
If you add your own API key, your requests go through your own account with that provider.
We do not use your content to train AI models, and the business APIs we use do not use it for training by default.
AI answers can be wrong. That is why actions that affect others always wait for your approval.

7. Google API Services User Data Policy

RahaVidia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request only the Google permissions needed for the features you turn on (Gmail, Calendar, Drive, Sheets).
Google user data is used only to provide and improve those user-facing features for you.
It is not used for advertising, not sold, and not used to train general AI models.
People at RahaVidia do not read your Google data, except with your explicit permission for support, when needed for security, or when the law requires it.
You can disconnect Google at any time from Integrations, and revoke access in your Google account settings.

8. International data transfers

Our providers may process data outside your country, including in the European Union and the United States. When this happens, we rely on appropriate safeguards such as standard contractual clauses and providers' security commitments.

9. Data retention

We keep your data while your account is active.
You can delete chats, memory, files and connected services yourself at any time.
When you ask us to delete your account, we delete your data within 30 days.
Billing records are kept as long as the law requires.
Security logs are kept for a limited time and then deleted.

10. Your rights

Depending on the law that applies to you, you have the right to:

Access the personal data we hold about you.
Correct data that is wrong or incomplete.
Have your data deleted.
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw your consent at any time.
Lodge a complaint with a data protection authority.

To use any of these rights, write to info@rahavidia.com from your account email. We answer within 30 days.

11. Security

Connections use HTTPS.
Passwords are hashed; the access keys of connected services and your own AI keys are stored encrypted.
Access to data is limited to what is needed to run and support the Services.
Every account sees only its own data.

12. Data breach notification

If a breach puts your personal data at risk, we will inform you and the competent authority without undue delay, as required by law, and tell you what we are doing about it.

13. Children

The Services are not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

14. Cookies

We use only the cookies needed for the Services to work: to keep you signed in, remember your language, and protect forms. We do not use advertising cookies.

15. Changes to this Policy

If we change this Policy in an important way, we will tell you in the app or by email before the change applies. The date at the top shows the latest version.

16. Contact us

For any question about your data or this Policy: info@rahavidia.com

Legal name: Raha Tech Group FZE
Trade license number: 4426136.01
Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Website: https://rahavidia.com
Email: info@rahavidia.com

17. Governing law

This Policy is governed by the laws of the United Arab Emirates. If you live in the European Union, you also keep the protection of the mandatory data protection laws of your country.