Privacy policy

1. Who the data controller is

Ragnos AI is a product of Force Holding Co., registered in Kuwait. For data your business holds about its own customers, your business is the controller and Ragnos AI acts as a processor on your instructions. For data about your business and its staff, Ragnos AI is the controller.

Contact for any data question: info@ragnos.ai or +965 9559 4441.

2. What we collect

Two distinct categories, which are handled differently.

• Business account data - your business details, staff names and logins, billing information and support correspondence.
• Customer data processed on your behalf - customer names, phone numbers, email addresses, plans, payment status, attendance, bookings, message history, and health declarations submitted through intake forms and consent forms.
• Website data - analytics collected through GA4 subject to consent, and any information submitted through the demo or contact forms.

3. Lawful basis

Business account data is processed on the basis of contract and legitimate interest. Customer data is processed on your instructions as controller, under our processing agreement with you.

Health data collected through intake forms is a special category of personal data and requires explicit consent from the customer, obtained at the point the form is completed. Your business is responsible for that consent being valid.

4. How long we keep it

Retention periods are set out in your agreement. As a general position: account data is kept for the life of the contract plus any statutory period; customer data is kept until you delete it or terminate, after which it is deleted on the schedule in your agreement.

5. Sub-processors

Ragnos AI is built on a third-party platform and uses a small number of sub-processors to deliver the service. The current list, including GoHighLevel as the underlying platform provider, Meta Platforms for WhatsApp Business messaging, and MyFatoorah for payment links, must be maintained here and updated when it changes.

You will be notified before a new sub-processor is added.

6. International transfers

Some sub-processors operate infrastructure outside Kuwait. The specific locations and the safeguards applied to those transfers must be stated here once confirmed by counsel.

7. Your rights and your customers’ rights

Customers should direct requests to their business in the first instance, as the controller of their data. Your business can action all of the following in the platform, and we will assist where you need us to.

• Access - a copy of the personal data held
• Rectification - correction of inaccurate data
• Erasure - deletion of a customer record, subject to any legal obligation on the business to retain it
• Portability - export of data in CSV, available to you at any time without charge
• Objection and opt-out - immediate and permanent removal from all messaging sequences

8. Security

Technical and organisational measures, role-based access control and encryption in transit and at rest are described in more detail on our security page. Ragnos AI does not hold ISO 27001 or SOC 2 certification and does not claim to.

9. Cookies and analytics

This website uses GA4 through Google Tag Manager with Consent Mode v2. Analytics cookies are set only where consent is given. A full cookie table must be added here before launch.

10. Changes to this policy

We will post changes here with an updated date and, for material changes affecting how customer data is handled, notify business account holders directly. Last updated 28 August 2026.