Privacy & Data Protection Policy

1. Introduction & Purpose

KLYRO SOLUTIONS F.Z.E (“Klyro”, “we”, “our”, “us”) is committed to protecting the privacy, confidentiality, and security of personal and business data processed through its digital ecosystem.

This Privacy & Data Protection Policy explains:

• What data we collect
• Why we collect it
• How we use, store, and protect it
• The rights available to users under applicable laws

This policy applies to all Vendors, Hosts, Partners, and Users accessing or using the Klyro mobile application, web platform, or related services.

2. Legal Basis & Regulatory Compliance

Klyro acts as the Data Controller for all data processed on its platform.

This policy is designed to comply with:

• UAE Federal Decree-Law No. 45 of 2021
• Applicable UAE commercial, tax, and cybersecurity regulations

By creating an account or using Klyro, you acknowledge and agree to the practices described in this policy.

3. Data Categories We Collect

3.1 Business Identity Data

• Trade License and commercial registration details
• VAT Registration Certificate (if applicable)
• Corporate bank account details (IBAN)
• Authorized signatory information

3.2 Operational & Performance Data

• Response time to RYO requests
• Bid submission and success rates
• Service fulfillment status
• GPS location data only during active event execution

3.3 Communication Data

• In-app chat communications
• System-generated notifications

Purpose: quality assurance, fraud prevention, dispute resolution, and regulatory compliance.

4. The “Firewall” Anonymization Protocol

4.1 Pre-Booking Phase

• Host identity, phone number, and address are masked
• Only neighborhood, date, guest count, and budget are shown

4.2 Post-Booking Phase

Upon successful payment, required personal details are securely decrypted and shared only with the confirmed Vendor.

4.3 Post-Event Phase

48 hours after event completion, Host contact details are automatically re-masked to prevent off-platform solicitation.

5. AI & Data Usage (RYO System)

Vendors grant Klyro a limited right to use service-related data to enhance platform intelligence.

• Service descriptions and menu listings
• Price ranges (not confidential margins)
• Performance indicators

We do NOT:

• Sell user data
• Share pricing strategies with competitors

6. Data Sharing & Third Parties

• Payment processors (Stripe, Checkout.com)
• Encrypted cloud infrastructure providers
• Regulatory authorities when legally required

7. Data Retention

Business and transaction records are retained for 5 years. Other data is retained only as long as operationally or legally required.

8. User Rights

• Right to Access
• Right to Data Portability
• Right to Rectification
• Right to Erasure (subject to law)

📩 Requests: info@klyroapp.ai

9. Security Measures

• End-to-end encryption
• Secure authentication protocols
• Access controls and audit logs
• Regular security updates

10. Policy Versioning & Acceptance

This policy is version-controlled. Continued use of the platform constitutes acceptance of updates.

11. VAT Status & Platform Logic

During onboarding, Vendors must declare VAT registration status. Applicable clauses are activated automatically.

12. Contact Information

📧 info@klyroapp.ai
🏢 Klyro Solutions F.Z.E – UAE