Privacy Policy

1. Who We Are

LIQA ("LIQA", "we", "our", or "us") is a private event management platform operating in the State of Qatar. We provide hosts with tools to create events, manage guest lists, and send invitations via WhatsApp; and we provide invited guests with a seamless RSVP experience.

Our primary contact for privacy matters: support@liqa-invite.com

2. Scope of This Policy

This Policy applies to all personal data processed through:

• The LIQA mobile application (iOS and Android)
• The LIQA website at liqa-invite.com
• WhatsApp messages sent on behalf of event hosts via the LIQA platform

It covers two categories of users: Hosts (individuals or organisations who create and manage events) and Guests (individuals invited to events by hosts).

3. Data We Collect

3.1 Account and Identity Data (Hosts)

• Phone number — used as your primary account identifier and for WhatsApp OTP authentication
• First name and last name — optional, used to personalise your in-app experience
• App language preference (English or Arabic)

3.2 Guest Contact Data (provided by Hosts)

Hosts supply guest information to LIQA staff as part of our concierge service. This data is stored in each host's private contact database and may include:

• First name and last name
• Phone number (WhatsApp number used to deliver the invitation)
• Physical address (optional; used when the host needs to deliver physical items such as printed invitations or gifts)

3.3 Event Data

• Event name, date and time, venue name
• Package type (Standard or VIP) and selected tier
• Invitation image uploaded by the host
• Event language preference (English or Arabic)

3.4 RSVP and Response Data

• Guest RSVP status: Confirmed, Declined, or Maybe
• Timestamp of RSVP response
• Messages sent by declined guests (visible to the host via the in-app message board)

3.5 Location Data (VIP — optional, explicit)

For VIP events, the host may request that the LIQA platform send a WhatsApp message asking confirmed guests to share their location. This is used solely to coordinate delivery of event materials (e.g., printed invitations, gifts). Location sharing is entirely voluntary. If a guest shares their location, it is stored and visible only to the event host and LIQA staff.

3.6 Payment Data

Payments are processed by TAP Payments, a PCI-DSS compliant payment gateway. LIQA does not store card numbers or full payment credentials. We receive and store only: payment status, transaction reference, and amount paid.

3.7 Technical and Usage Data

• Device type and operating system (for debugging and app compatibility)
• Authentication logs and session tokens
• App version

We do not use advertising trackers or sell usage data to any third party.

4. How We Use Your Data

We use personal data only for the purposes set out below:

• Account authentication — verifying your identity via WhatsApp OTP when you sign in
• Event management — creating events, uploading guest lists, and tracking RSVP status
• Invitation delivery — sending personalised WhatsApp invitations and reminders to guests on behalf of the host
• RSVP processing — capturing and displaying guest responses in the host's dashboard in real time
• Guest contact database — enabling hosts to reuse their guest contacts across future events without re-entering data
• Location coordination (VIP only, optional) — delivering event materials to confirmed guests who have opted to share their location
• Payment processing — completing event package purchases via TAP Payments
• Customer support — responding to enquiries and resolving issues
• Service improvement — understanding how the platform is used to fix bugs and improve features (aggregated, non-identifiable)

We do not use your data for advertising, profiling, or any purpose beyond the above.

5. Legal Basis for Processing

Under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016), we process personal data on the following bases:

• Contractual necessity — processing required to deliver the service you have subscribed to (e.g., sending invitations, tracking RSVPs)
• Legitimate interest — processing necessary for fraud prevention, security, and service improvement, where this does not override individuals' rights
• Consent — where we rely on your explicit agreement, such as when a guest voluntarily shares their location
• Legal obligation — where processing is required by applicable Qatari law

6. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. We share data only with the following trusted service providers, solely to deliver the LIQA service:

• Twilio Inc. — provides WhatsApp Business API infrastructure for sending invitations, reminders, RSVP processing, and OTP authentication. Twilio processes phone numbers and message content.
• TAP Payments — processes payments for event packages. TAP handles all card data directly; LIQA receives only a payment confirmation.
• Supabase Inc. — provides the secure database and backend infrastructure where event, guest, and RSVP data is stored.
• Google LLC — provides the Maps API used for venue search and autocomplete during event creation. Venue search queries are sent to Google's servers.

All third-party providers are bound by data processing agreements and are required to handle data in accordance with applicable privacy laws.

We may also disclose data if required by Qatari law, court order, or a lawful request from a competent authority.

7. International Data Transfers

Some of our service providers (Twilio, Supabase) store and process data on servers located outside Qatar, including in the United States and European Union. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or the provider's certification under applicable data protection frameworks to ensure your data receives an equivalent level of protection.

8. Data Retention

• Host accounts — retained for as long as your account remains active, plus a reasonable period to comply with legal obligations after account closure
• Guest contact database — retained on the host's profile until the host deletes individual contacts or closes their account
• Event and RSVP data — retained for the duration of the event and for a period after its conclusion for record-keeping purposes
• Payment records — retained for the period required by Qatari commercial and tax law (typically 5–7 years)
• Location data — retained only for the duration of the event delivery period and then deleted

9. Your Rights

Under applicable law, you have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request that we delete your data, subject to our legal retention obligations
• Restriction — ask us to limit how we use your data in certain circumstances
• Objection — object to processing based on legitimate interest
• Data portability — receive a copy of your data in a structured, machine-readable format
• Withdraw consent — where processing is based on consent (e.g., location sharing), you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at support@liqa-invite.com. We will respond within 30 days. We may need to verify your identity before processing your request.

Note for Guests

If you are a guest who received a LIQA invitation via WhatsApp and wish to request deletion of your data, please contact us at the address above. LIQA processes guest data on behalf of the host (as a data processor); for enquiries about why you were invited, please contact the event host directly.

10. Children's Privacy

LIQA is intended for use by individuals aged 18 and older. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at support@liqa-invite.com and we will delete the data promptly.

11. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• Encrypted data transmission (HTTPS/TLS) across all services
• Row-level security (RLS) enforced on all database tables
• Authentication via time-limited OTP codes — no passwords stored
• Access controls limiting which LIQA staff can view event and guest data
• Regular security reviews of our infrastructure

No system is completely secure. If you believe your data has been compromised, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will notify registered hosts via the app or by email. Continued use of LIQA after a change constitutes acceptance of the revised Policy.

13. Contact Us

For any privacy-related questions, requests to exercise your rights, or to report a concern, please contact:

LIQA
Email: support@liqa-invite.com
State of Qatar