Privacy policy

Who we are

FahsLink provides software to vehicle inspection centres and garages. We are based in Doha, Qatar. For anything in this policy, write to info@fahslink.com.

Two different roles

This distinction matters more than anything else here. For data about our own customers — the businesses that buy FahsLink and the people who sign in — we decide what is held and why. For data those businesses put into the system about their own customers, their vehicles and their staff, the business decides, and we only hold and process it on their instructions. If you are a car owner whose report is in FahsLink, the inspection centre or garage is who to ask first; we will help them answer you.

What is held

• Account data: business name, commercial registration, contact name, phone, WhatsApp, email, city.
• Sign-in data: email address and an encrypted password we cannot read.
• Vehicle and job data entered by the business: plate, VIN, odometer, inspection results, photographs, job cards, quotes, invoices and payments.
• Their customers' names and phone numbers, where the business records them.
• Staff records, where the business uses the HR add-on — including identity document numbers and expiry dates.
• A record of actions taken in the system: who issued, voided, changed or was paid what, and when.

We do not ask for, and the system has no place to store, card numbers or bank credentials.

Why it is held

To provide the service the business is paying for: producing reports, running job cards, recording money and keeping the record of what happened. We also use account and contact details to reach you about your account and support. We do not sell data, we do not share it with advertisers, and we do not use one customer's data to benefit another.

Who else touches it

Two suppliers, both under contract, and no others: Supabase hosts the database, files and sign-in; Vercel serves the website and application. Data is stored in their cloud infrastructure outside Qatar, which means it crosses borders. Where the law requires your consent for that, using the service is how it is given, and you can ask us for the details before you sign.

How long

• Inspection photographs are deleted 30 days after the report is issued.
• A digital report link stops working 30 days after issue; the record behind it is kept for the business.
• Financial records are kept for as long as Qatari law requires them, and cannot be deleted by any user.
• If a business leaves, its data is exported to it and removed within 60 days, except what law requires us to keep.

Your rights

Under Qatar's Law No. 13 of 2016 on Personal Data Privacy Protection you may ask what is held about you, ask for it to be corrected, ask for it to be erased where nothing requires it to be kept, object to how it is used, and complain to the competent authority. Write to info@fahslink.com and we will answer within 30 days. If the data belongs to a business's own records, we will pass your request to that business and support them in answering it.

If something goes wrong

If personal data is exposed, we will tell the affected businesses without undue delay, tell them what was exposed and what we are doing, and notify the authority where the law requires it.

Changes

If this policy changes in a way that matters, we will tell account holders by email before it takes effect.