Privacy Policy
Last updated: September 2025
We at Alaawah (“Alaawah”, “we” or “us”) are strongly committed to respecting your privacy and keeping secure any information you share with us. This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, and process your personal data when you use Alaawah's workforce management software, platform, APIs, Documentation, and related tools, including at the website at www.shark-force.com, and all related software made available by Alaawah to build, deploy, host, and manage workforce operations (“Service”). It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country's or state's laws.
Personal Data We Collect
We collect the following categories of personal data: A) Personal data you provide directly: Account Information (name, email address, company details), Payment Information (for paid services), Workforce Data (employee information, schedules, time tracking data), Communication Information (support requests, feedback), and Feedback (ideas and suggestions for improvement). B) Personal data from your use of the Service: Device Information (device type, browser, operating system), Log Information (IP address, browser settings, error logs), Usage Data (access times, browsing history, interactions), Cookies & Similar Technologies (for platform functionality and analytics), and Location Information (for geofencing and time tracking features). C) Information we do not collect: We do not knowingly collect sensitive personal information such as genetic data, biometric data for identification, health information, or religious information. We do not knowingly collect information from children under 18.
How We Use Personal Data
We use personal data for the following purposes: To provide and maintain the Service; To create, manage, and administer your account, including facilitating payments and responding to inquiries; To improve and develop the Service and conduct research; To communicate with you, including sending updates; To prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms of Service; To comply with legal obligations and protect the rights, safety, privacy, and property of users, Alaawah, or third parties; To investigate and resolve disputes or security issues; To enforce our Terms of Service. We implement end-to-end encryption for all file uploads and AI processing — files are encrypted on your device before transmission and remain encrypted during AI analysis. We do not use workforce data to train AI models unless explicitly agreed upon or for security review purposes.
Artificial Intelligence and Automated Decision-Making
Our platform uses artificial intelligence (AI) for multiple workforce management features, including: Facial Recognition Technology for employee check-ins and identity verification; AI-Powered Task Validation with visual analysis capabilities; AI Knowledge Management for processing organizational knowledge; Intelligent Scheduling and Workflow Automation; Anomaly Detection for security and compliance monitoring; and Predictive Analytics for workforce optimization. All AI processing is conducted with end-to-end encryption. You have the right to: Request human review of automated decisions that significantly affect you; Opt-out of automated decision-making for non-essential features; Receive clear explanations of how AI systems make decisions; Object to automated processing that impacts your legal rights; and Report concerns about potential discrimination or bias. For questions about our AI systems, contact us at privacy@shark-force.com.
AI Knowledge Management and Organizational Intelligence
Our AI Knowledge Management system processes organizational knowledge to enhance AI validation capabilities. This includes: Knowledge Base Processing; Memory Management; AI Profile Configuration; Enhanced AI Validation; Data Processing and Storage; and Learning and Improvement. All knowledge processing is performed within your organization's data boundaries and is not used to train general AI models or shared with other organizations.
How We Share Personal Data
We may disclose your personal data in the following circumstances: Service Providers and Business Partners (hosting, cloud infrastructure, analytics, customer support, payment processing, compliance services); Business Transfers (in the event of merger, acquisition, restructuring, bankruptcy, or other corporate transaction); Legal Compliance and Protection of Rights; Affiliates; Third-Party Services and Integrations; Business Account Administrators; Other Users and Third Parties You Share Information With; and With Your Consent. We do not sell personal data for advertising purposes.
Third-Party Services and Data Sharing
We work with specific third-party services to provide our platform functionality. These include: Payment Processing (Stripe); Analytics (PostHog, Google Analytics); Communication Services (SendGrid, Twilio); Cloud Infrastructure (AWS, Vercel); Security Services (Cloudflare); Customer Support (Intercom, Zendesk); and Mapping Services (Google Maps, Mapbox). Each third-party service has its own privacy policy, and we recommend reviewing their policies.
Cookie Management and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and provide essential platform functionality. Essential cookies (authentication, security, session management) cannot be disabled. Non-essential cookies (analytics, marketing, personalization) require your explicit consent. You can manage cookie preferences through your browser settings or our platform's cookie management interface. For detailed information about our cookie practices, please see our Cookie Policy.
Retention
Alaawah retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. When personal data is no longer needed, Alaawah and its service providers will follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.
Business Continuity and Data Protection
Our enterprise-grade platform is designed to protect business continuity while respecting individual privacy rights. When users request account deletion in organizational contexts: (a) The system automatically assesses business impact; (b) Administrators receive detailed impact assessments; (c) Deletion requests are processed through approval workflows; (d) Data may be anonymized rather than completely deleted to maintain audit trails; (e) All deletion activities are logged; (f) Organizations maintain control over data retention policies; and (g) Alternative options such as account deactivation are available when complete deletion would impact business operations.
Security
We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure.
Data Breach Notification
In the event of a data breach that affects your personal data, we will: Notify you within 72 hours of becoming aware of the breach (where required by law); Provide clear information about the nature of the breach, affected data, and potential risks; Explain the measures we're taking to address the breach; and Provide guidance on steps you can take to protect yourself.
Your Rights and Choices
Depending on where you live and the laws that apply, you may have certain rights: Right to know what personal data we collect; Access and portability; Deletion of personal data; Correction of inaccurate personal data; Objection to certain types of processing; Restriction of processing; Withdrawal of consent; and Right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at privacy@shark-force.com.
Data Subject Rights and Response Timeframes
We will acknowledge your request within 3 business days and provide a complete response within 30 days (or 45 days for complex requests). You can request your data in a structured, machine-readable format (JSON, CSV). We do not charge fees for data subject requests unless they are manifestly unfounded or excessive.
Children's Data Protection
Our platform is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will immediately delete the information from our systems.
Do Not Track and Browser Signals
As a workforce management platform, our core functionality requires comprehensive monitoring and data collection to provide essential services. While we acknowledge Do Not Track (DNT) browser signals, our platform's primary purpose requires tracking features that cannot be fully disabled via DNT. Employees who object to tracking should discuss concerns with their employer.
Jurisdiction-Specific Disclosures
Some jurisdictions require specific disclosures. For users in the European Economic Area (EEA), when you access our Service, your personal data may be transferred to our United States servers or other countries outside the EEA and the UK. We do not sell or share personal data for cross-contextual behavioral advertising or process personal data for targeted advertising purposes.
International Data Transfers and Safeguards
Your personal data may be transferred to and processed in countries outside your residence, including the United States. We ensure adequate protection through: Standard Contractual Clauses (SCCs) approved by the European Commission; Adequacy decisions where applicable; and Additional technical and organizational safeguards.
Privacy Policy Changes
We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date at the top of this page. Your continued use of our platform after any change constitutes acceptance of such change.
Limitation of Liability and Disclaimers
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALAAWAH SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO THIS PRIVACY POLICY OR OUR PRIVACY PRACTICES. OUR TOTAL AGGREGATE LIABILITY SHALL NOT EXCEED ONE HUNDRED DOLLARS ($100.00).
Indemnification for Privacy Violations
You agree to indemnify, defend, and hold harmless ALAAWAH from and against any and all claims arising out of or relating to: your violation of this Privacy Policy or applicable privacy laws; your failure to obtain necessary consents; your misuse or unauthorized disclosure of personal data; and any other privacy-related actions or omissions by you.
Contacting Us
We encourage you to contact us at privacy@shark-force.com if you have any questions about this Privacy Policy or our privacy practices. You may also have the right to lodge a complaint with your local data protection authority.
Ready to get started
Get started free, no credit card.
60-Day Money Back Guarantee, cancel anytime for a full refund.