Privacy policy

Thulth Consultation & Technology (THULTH / ثلث), Doha, State of Qatar, is the controller of personal data handled through this website, its client portal and its products (Reachscope, My Voucher, TaskArchitect, the store and related services).

We process personal data in accordance with Qatar Law No. 13 of 2016 on Protecting Personal Data Privacy and its guidelines, the Electronic Transactions and Commerce Law No. 16 of 2010, and the Consumer Protection Law No. 8 of 2008. Privacy contact: info@thulthconsultation.com.

Account and identity: name, email, mobile number, password (stored only as a secure hash), Google sign-in identifier, date of birth or age confirmation, ID type, ID number, issuing country and expiry date, and company details such as name, commercial registration (CR) number and expiry, and address. We do not store images of identity documents unless you upload a document for a product that requires it.

Purchases and payments: products ordered, QAR amounts, order status, bank-transfer references and refund records. Card details are entered on the payment provider's page; we do not store full card numbers.

Product data you enter: for example Reachscope audit inputs and reports, My Voucher clients, vouchers, quotations, invoices, bills, journals, uploaded files and imported records, and TaskArchitect projects, tasks, time logs and chats.

Communications: enquiries, waiting-list registrations, support messages, AI assistant conversations and email delivery records.

Technical and security data: IP address, browser and device information, sign-in times, known devices, bot-protection results and error logs.

To create and secure your account, verify your email with one-time codes and protect sign-in (performance of the service and legitimate security interests).

To confirm eligibility (age 18 or over and a valid ID/CR), monitor ID and CR expiry and send reminders before and on expiry (legal obligations and contract terms).

To process orders, payments, bank transfers, refunds and send purchase confirmations to your registered email (contract and legal record-keeping).

To deliver the products you subscribe to, provide support, prevent fraud and abuse, and meet obligations under Qatar law.

To send waiting-list or marketing messages only with your consent; you may withdraw it at any time. We do not sell personal data.

Identity numbers are treated as protected data. Where a product requires a social security or national number, it is encrypted before storage and only the last four digits are shown. We do not intentionally collect health, religious, criminal or other special-nature data; please do not enter it in free-text fields or the AI assistant.

Each client company can see and manage only its own data and only the products it subscribes to. Database rules enforce this separation. Authorised THULTH staff access client data only when needed for support, security or legal reasons.

The website assistant, Reachscope analysis and the Ask My Voucher assistant send the relevant text to AI providers to generate answers. The My Voucher assistant reads only your own company's data and cannot issue documents on its own. AI answers may be inaccurate and are not legal, tax or financial advice. Do not enter passwords or payment details.

Data accuracy disclaimer: Reachscope results are estimates based on the data you provide, publicly observable signals and analytical models, not official data from social media platforms or search engines. Because those platforms change their algorithms and data access frequently and without notice, results may be incomplete or differ from platform figures. They reflect the time of analysis and are provided for guidance only, as described in our Terms of Service.

Service providers acting on our instructions: hosting and database, email delivery, payment gateways and banks, Cloudflare bot protection and IP-risk checks, Google sign-in, AI providers, antivirus scanning and encrypted backup storage. Where you connect WhatsApp or other accounts, data is exchanged with that platform at your request.

Government or judicial authorities in Qatar when legally required, or to establish or defend legal rights. Some providers process data outside Qatar; we use contractual and technical safeguards consistent with Law No. 13 of 2016. Contact us for the list of providers and locations.

When available, the desktop edition stores your business data encrypted on your own computer; THULTH does not receive it. Activation uses your registered email and a computer code to issue a licence key locked to that computer. Update checks contact our official server only for version information. You are responsible for your computer's security and your local backups.

We keep data only as long as needed for its purpose or as required by law. Accounting records such as vouchers and invoices are kept permanently and cannot be deleted, as required for financial integrity and Qatari record-keeping rules. Authorized My Voucher corrections retain old values, reason, actor and date; Cashbook deletion removes entries from active totals but retains history and receipts. Explicit USD conversions retain the original amount and suggested rate of 3.64; the actual QAR charge remains editable. Unissued voucher drafts use session storage to survive language changes. IP check results are kept up to 24 hours and security logs up to 90 days. Temporary backup download links expire after 7 days. Closed-account data is deleted or anonymised unless the law requires keeping it.

We use encryption in transit and for sensitive fields, email one-time codes, Cloudflare bot protection, automatic sign-out after inactivity, new-device alerts, role-based access, tamper-evident accounting records, antivirus scanning of uploads, private time-limited download links and encrypted backups. No system is fully risk-free. If a breach may cause serious harm, we notify the competent authority and affected people without undue delay as required by law.

We use essential browser storage for sign-in sessions, security checks, language and currency preferences. We do not use advertising trackers. Any optional analytics or marketing technology will be introduced only with notice and consent where required.

Under Law No. 13 of 2016 you may: withdraw consent; object to processing that is not necessary for its purpose; request access, correction, deletion or a copy of your data; and be informed of processing, disclosures and any inaccurate disclosure. We may verify your identity first and will reply within a reasonable period, explaining any lawful limitation. You may also complain to the National Cyber Security Agency, the competent authority for personal data privacy in Qatar.

Our services are for businesses and adults aged 18 or over with a valid ID. We do not knowingly collect children's data. If you believe a child has given us data, contact us and we will delete it.

We will update the date at the top when this policy changes. If a change introduces a new use of your data that needs consent, we will ask before that processing starts. If the Arabic and English versions differ, the Arabic version prevails in Qatar.

Use our privacy request and complaint form or email info@thulthconsultation.com. Signed-in clients can download a copy of their data from the client portal.

Thulth Consultation & Technology keeps automated platform backups and a weekly secondary copy of its records. Online services are provided on an "as is" and "as available" basis.

Every client has self-service download tools (Client Portal → Download my data, and My Voucher → Settings → Storage and backup). The client is solely responsible for downloading and keeping their own offline backup of their data, records, vouchers and uploaded documents at least once every week.

If a cyberattack, intrusion, technical failure or unexpected data loss happens, Thulth's obligation is to make commercially reasonable efforts to restore the service from its latest available backup, and to notify affected people as required by Qatar Law No. 13 of 2016.

To the extent permitted by Qatar law, Thulth, its owners, directors and staff are not liable for lost profits, business interruption, loss of data or indirect or consequential damages, especially where the client did not keep their own weekly backup. Total liability for any claim is limited to the fees the client paid Thulth in the three (3) months before the claim. Nothing here limits liability that cannot lawfully be limited, including for wilful misconduct or gross negligence.