Privacy Policy

Last updated: 6 September 2026

1. Data Controller

The data controller is the operators of this service. For any privacy inquiry or to exercise your rights, contact us at: info@sadiqoon.uk

2. Data We Collect

• Telegram ID (account number) — to identify your session and store your preferences.
• Username and display name (if available) — to improve service quality and support.
• Your preferred language — to provide replies in the language you choose.
• Your question and answer history — to improve service accuracy and review quality.

We do not collect your location, contacts, or any data beyond your interaction with the bot.

3. Purpose & Legal Basis

We process your data based on your consent (GDPR Art. 6(1)(a)), granted when you start using the bot via the /start command. The purpose is solely: operating the service, storing your preferences, and improving answer quality. We make no automated decisions with legal effect on you.

4. Sharing with Third Parties

We do not sell your data or share it with anyone for marketing. Your messages are technically processed via AI model providers solely to generate the answer, without linking them to your personal identity at those providers.

5. Retention Period

We retain your preferences while your account is active in the service. Question history is kept no longer than necessary to improve the service, then anonymized or deleted. You may request immediate deletion at any time.

6. Your Rights under GDPR

• Access: request a copy of your stored data.
• Rectification: correct any inaccurate data.
• Erasure (right to be forgotten): delete your data entirely.
• Portability: obtain your data in a machine-readable format.
• Objection & withdrawal of consent: stop processing at any time.

To exercise any right, use the /reset command inside the bot to reset your preferences, or email us at info@sadiqoon.uk. You also have the right to lodge a complaint with your local data protection authority.

7. Security

Data is stored on private servers with encrypted connections (TLS) and strict access controls. However, no internet transmission can be guaranteed absolutely secure.

8. Children

The service is not directed to anyone under 16. If we learn we collected a minor's data without guardian consent, we delete it immediately.

9. Changes

We may update this policy and will post any change on this page with an updated revision date.

10. Research Connector (MCP) — Data Controller

The data controller for the connector service is SADIQOON TECHNOLOGIES LTD, a private limited company registered in England and Wales, company number 17120720, registered office 167–169 Great Portland Street, London, W1W 5PF. Contact: info@sadiqoon.uk. These terms apply alongside the above and are governed by UK GDPR and the Data Protection Act 2018.

11. What the connector collects

Sign-in goes through our own identity provider (auth.sadiqoon.com) with your Google account as the sole source of identity: we receive only your Google email address and display name, authentication happens at Google, we never see your password and we require no form. With each query your assistant sends to the corpus we record the query text, the tool name, the timestamp, the originating IP address, the connecting client type (Claude, ChatGPT or another), and the response duration and status. We do not see your conversation with your assistant; only what the assistant sends to the corpus reaches us.

12. Purpose and legal basis

We use this data for four purposes only: operating the service and verifying identity, monitoring the health and performance of the connector and the corpus and the quality of retrieval, preventing abuse and automated over-use, and aggregate statistics. We do not use it for advertising or profiling. The legal basis is legitimate interests under Art. 6(1)(f) UK GDPR. We do not use your query text to train AI models or to develop the corpus, and we never sell or trade it. Should this change, we will update this policy and inform you beforehand.

13. Connector data retention

Query logs are retained for twelve months, then deleted. Access records are kept while your account is active and deleted within thirty days of revocation or of your deletion request.

14. Third parties and international transfers

We rely on Google LLC for sign-in, Google Cloud Platform for hosting in the us-central1 region in the United States, and Google Sheets for access and usage records. To process query text we use technical sub-processors: Cohere Inc. (semantic embeddings and result reranking), Google LLC (the Gemini model for language processing of some queries) and Groq Inc. (running open models to formulate the search query). They receive only the query text needed for processing, without your identity, and your data is not used to train their models under enterprise usage agreements. Your question also passes through the AI assistant provider you choose (Anthropic, OpenAI or another) under its own policy. As our servers are outside the United Kingdom, transfers rely on the UK Extension to the EU-US Data Privacy Framework and Standard Contractual Clauses with Google Cloud.

15. Cookies

Our site uses strictly necessary cookies for sign-in and sessions. We also use Google Tag Manager and Google Ads to measure our outreach; these set analytics and advertising cookies, which are placed only after your explicit consent through the banner shown on your first visit. The system operates in a denied-by-default state under Google Consent Mode v2, so no advertising or analytics storage is enabled before you consent. You may withdraw consent at any time by clearing this site's data in your browser.

16. Connector security

Connector traffic is TLS-only, sign-in uses OAuth 2.1 with PKCE, and no passwords are stored. Any Google account is provisioned automatically on first sign-in, and we reserve the right to suspend access in case of misuse. You may revoke the connector's authorisation at any time from your assistant's settings (Connectors) or by writing to us, and delete your account entirely from the Data Deletion page. To exercise your rights or request deletion, write to info@sadiqoon.uk; you may also complain to the UK Information Commissioner's Office at ico.org.uk.