Privacy Policy

Rydex Spare Parts Trading ("Rydex", "we") is an automotive spare parts trading company in Doha, Qatar. This policy covers the website rydex.qa, the customer portal and the Rydex iPhone app. Rydex is the controller of the personal data described here.

Address: Transworld Tower 1, Al Rifaa (Zone 17), Street 930, Building 04, Floor 3, Unit 22, Doha, Qatar. Email: sales@rydex.qa.

When you use rydex.qa or the customer portal we collect:

• What you send us: your name, company, phone number, email address and the details of a quote request or order.
• Account data for the customer portal: your login email and a hashed password.
• Usage statistics (pages viewed, country, device type) through Vercel Web Analytics, which sets no cookies.
• Google Analytics, only if you accept analytics cookies in the cookie banner. If you decline, its cookies are not set.
• Error reports when a page fails, so we can fix it.

We use this data to answer your request, process orders, deliver parts, send invoices and statements, and keep the website working.

The Rydex iPhone app is an internal tool for Rydex staff and partners. Accounts are created by a Rydex administrator. The app is not open to the public, and you cannot create an account in it.

The app collects and uses:

• Account data: your name, work email and role, so you can log in and see the work assigned to you.
• Messages and files: the chats, tasks, photos and files you send in the app. They are stored on Rydex servers and shown to the colleagues and AI assistants in that chat.
• Microphone: used only when you start a call, record a meeting or speak a message. Calls run on our own call server in Germany. The recorded audio is turned into text so the meeting notes and the chat can show it.
• Speech recognition: the words shown while you speak a message are recognised on your iPhone when it supports this. That live preview does not leave the device.
• Camera and photo library: used only when you choose Take Photo, or choose to save a picture or file to your photo library.
• Push notifications: a device token from Apple, so we can tell you about a new message, a task or an incoming call.
• Calendar (optional): if you tap Connect Google Calendar, the app writes the calls you schedule into your Google Calendar. You can disconnect it at any time.

The app has no advertising, does not track you across other apps or websites, and does not use your location or contacts.

Parts of Rydex use AI models to answer questions, draft messages and summarise meetings. To do this, the text of the request and the business data it needs are sent to our AI provider, Anthropic, and audio to be transcribed is sent to ElevenLabs. These providers process the data on our behalf, under their business terms.

We do not sell personal data. We share it only with service providers that run Rydex for us, under contract, and only as much as they need:

• Hosting and database: Vercel, Render and Neon
• File storage: Cloudflare R2
• AI and transcription: Anthropic and ElevenLabs
• Push notifications: Apple Push Notification service
• Messaging: WhatsApp (Meta) and Twilio, for messages you ask us to send
• Error reports: Sentry
• Website statistics: Vercel and Google Analytics
• Warehouse and delivery: GWC Logistics, for the delivery address and contact of an order

We also share data when the law requires it, for example with a court or a government authority in Qatar.

• The audio of a call: 30 days
• The transcript of a call: 1 year
• Orders, invoices and payment records: as long as Qatari commercial and tax law requires
• Staff accounts: until the person leaves Rydex, then the account is closed

All traffic to Rydex is encrypted (HTTPS). Passwords are stored as hashes, staff logins can be protected with two-factor authentication, and access to data depends on each person's role.

You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete it where the law does not require us to keep it. Staff can ask a Rydex administrator to close their account and delete its data. Email sales@rydex.qa and we answer within 30 days.

Rydex is a business service. It is not meant for anyone under 18, and we do not knowingly collect data from children.

When we change this policy we update the date at the top of this page. If a change is important, we tell app users in the app.