Who we are
AROOOXA ("we", "us") is software for studios, agencies and freelancers to send proposals, run projects and get paid. AROOOXA is operated from Egypt. For anything about your data, email [email protected].
Two kinds of data, two roles
Your account data. When you sign up and use AROOOXA, we decide how that data is used, so we are responsible for it (the "controller").
Data you put in about your clients. Client names, emails, phone numbers, proposals, invoices, files, and what we record when your clients open your links belong to your workspace. We process it on your instructions to provide the service (we are the "processor"), and you are responsible for having a lawful reason to collect it. If you are one of our customers' clients and have a question about your data, please contact the business that sent you the link first; we will help them answer.
What we collect
When you use AROOOXA
- Account details: name, email address, password (stored only as a hash by our sign-in provider), profile photo.
- Workspace content: clients, companies, proposals, invoices, projects, tasks, forms, files, notes and settings.
- Billing details: plan, payment status and invoices. Card details go directly to our payment provider; we never see or store your full card number.
- Technical data: IP address, browser and device type, and logs needed to keep the service secure and working.
- If you connect them: your WhatsApp session (to send messages from your own number), push-notification tokens for your devices, and AI assistants connected through MCP.
When someone opens a link you sent
Document tracking is a core feature. When a person opens a proposal, invoice, form, booking page or shared folder, we record for the workspace that sent it: the time, approximate location derived from the IP address (city and country, not precise location), device and browser, time spent on each section, scroll depth, where they clicked or tapped, which files they downloaded, and anything they submit (such as a signature, form answers or a booking).
When you visit our website
On the public website (not inside the app or on client links) we may use analytics tools, including Microsoft Clarity, to see which pages are visited and how people use them. These tools may set cookies.
When you join the launch list
Your email address, the page you joined from, the campaign link or site that sent you, and your IP address (used only to stop automated signups). We use your email only to tell you about the launch and the launch offer, and every email has an unsubscribe link.
How we use it
- To provide AROOOXA: run your workspace, send the documents and notifications you ask for, and show you tracking results.
- To keep it secure: prevent abuse, investigate problems and protect accounts.
- To bill you and keep financial records we are required to keep.
- To talk to you: service and account emails, and, if you agree, news about AROOOXA. You can unsubscribe from news at any time.
- To improve the product, using usage patterns rather than the content of your documents.
Legal bases
Where laws such as the GDPR apply, we rely on: performing our contract with you (providing the service); our legitimate interests (security, improving the product, website analytics); legal obligations (tax and accounting records); and your consent where we ask for it (for example, marketing emails). You can withdraw consent at any time.
Your responsibilities when you track clients
Document tracking tells you how the people you send links to interact with them. If you use it, make sure that is lawful where you and your clients are, for example by mentioning it in your own privacy notice or terms. Do not use AROOOXA to track anyone in a way the law does not allow.
How long we keep it
We keep workspace data while your account is active. If you delete your account or workspace, we delete its data from our live systems, and it may remain in backups for a limited period before they are overwritten. We keep billing records as long as tax law requires.
International transfers
Our providers run servers in several countries, so your data may be processed outside the country you live in. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict how we use it, and complain to your data protection authority. Email [email protected] and we will reply within 30 days. Many changes you can make yourself in your account settings.
Children
AROOOXA is a business tool and is not meant for anyone under 16. We do not knowingly collect data from children.
Security
We protect data with technical and organisational measures described on our security page.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell account owners by email before the change takes effect.
Contact
Questions or requests about privacy: [email protected].