Legal
Privacy policy
1. Who is responsible
In short
FIXXIF LLC runs AWaaS. For the content of your workspace, your company decides and we process it on its behalf.
AWaaS is run by FIXXIF LLC, Doha, Qatar, identified in section 1 of the terms of service. For any question about this policy or your personal data, write to hello@awaas.dev.
For account, request and billing data, FIXXIF LLC decides why and how the data is used (we are the controller). For the content of a workspace, the customer company decides what goes in and who may see it, and we process that content on its behalf to run its work (we are the processor).
This policy explains how we handle personal data under Qatar's Law No. 13 of 2016 on the protection of personal data privacy and, where it applies, the EU General Data Protection Regulation (GDPR).
2. What we collect
In short
Your account details, what you put in your workspace, and records of how the service is used.
Request and account data: when you request access, your name, email address, phone number, company, country, website, the Odoo versions and edition you use and what you want to build; for each member of a workspace, their name, email address, role and sign-in security settings. Passwords are stored only in hashed form.
Workspace content: the specifications you upload, your answers to the agent's questions, and the modules, documents, tests and run records the service produces.
Billing data: your plan, the date until which your workspace is paid, the payments we record and the invoices we send.
Usage and technical data: your runs and their status, the share of your monthly capacity they use, and technical data such as the network (IP) address of requests, which we use to protect sign-in and the request form against abuse.
3. Why we use it and on what legal basis
In short
To run the service you asked for, to bill it, to keep it secure and to meet our legal obligations.
To provide the service (create and manage your account and workspace, run your work, deliver modules and open sandboxes): the legal basis is our contract with you, the terms of service, or the steps you asked for before it, such as your access request.
To bill the service and send invoices and payment reminders: the contract, and our legal obligations on accounting and tax.
To keep the platform secure and prevent abuse, for example by limiting sign-in attempts and logging support access: our legitimate interest in protecting the service and its customers.
To send service emails (confirming your request, approval, run notifications, payment reminders and notice of important changes): the contract.
Your workspace content is used only to run your work. It is not used to train AI models, by us or by our AI provider.
4. Support access to your workspace
In short
Our staff do not open your workspace unless one of its admins allows it, for 7 days at a time.
By default, our staff see only numbers and statuses about your workspace, such as its plan, the capacity used and the state of its runs, not its content.
A workspace admin can switch support access on for 7 days. During that time our support team can open the workspace read-only; every look is logged on both sides, and an admin can withdraw the access at any time. The specification file you uploaded is never shown to support, even then.
5. Who processes data for us
In short
Three providers help us run the service: our AI provider Anthropic, our hosting provider and our email provider.
Anthropic, PBC (United States) provides the AI models that read your specification and write the module. It receives the workspace content each run needs and, under its commercial terms, does not use it to train its models.
Our hosting provider runs the servers that hold the platform, its database and its file storage. Server location: [server location].
Our email provider sends the platform's emails, so it receives the email addresses they go to and their content.
6. Transfers outside Qatar
In short
Your workspace content is processed in the United States when the AI works on it.
The workspace content sent to Anthropic for each run is processed in the United States.
When personal data leaves Qatar or the European Economic Area, the transfer relies on safeguards that the applicable law accepts, such as the standard contractual clauses in our providers' data processing terms.
7. How long we keep it
In short
We keep your workspace content while your workspace exists, and delete it after you ask or after your account ends.
We keep workspace content while your workspace exists. We delete it within 90 days [confirm retention period] after you ask us to, or after your account ends. Download anything you want to keep before then.
Records that the law requires us to keep, such as invoices and payment records, are kept for the period that law sets.
8. Your rights
In short
You can ask to see, correct or delete your data, object to how we use it, and complain to a data protection authority.
You have the right to access the personal data we hold about you, to have it corrected, to have it deleted and to object to how we use it, within the limits the law sets.
To use these rights, write to hello@awaas.dev. We may ask you to confirm your identity first. For workspace content, we act together with your company's workspace admins, who decide about that content.
You can also make a complaint to the authority that oversees personal data protection in Qatar or, if you are in the European Union, to the data protection authority of the country where you live or work.
9. Cookies
In short
One cookie keeps you signed in, another remembers your language. No analytics, no advertising.
When you sign in to the web app, it sets one sign-in session cookie. It is needed to keep you signed in, lasts no longer than your sign-in session and is removed when you sign out.
When you choose a language with the switcher on our public pages, a small functional cookie, awaas_lang, remembers your choice for one year so that the pages open in that language.
We use no analytics and no advertising cookies, and no third-party trackers.
When you open a module's live sandbox, the sandbox address sets a cookie that gives you access to that sandbox, and the Odoo instance inside it sets its own cookies, such as its sign-in and language cookies.
10. Changes and contact
In short
We tell you by email 30 days before an important change. Questions: hello@awaas.dev.
We may update this policy. We tell the owners of your workspace by email at least 30 days before an important change takes effect; the date at the top of this page shows the last update.
For any question about your personal data, write to hello@awaas.dev.
This page is also published in French and Arabic. If a translation differs from the English text, the English version prevails.