Data-processing statement

Last updated: 2026-10-08

AI access to client data

  1. Client data is kept in Business Manager. AI (for example Claude) reaches it automatically through one route only: FTH's GBP MCP connector. The connector keeps no client data, and Business Manager decides what leaves. Files and images a staff member uploads by hand into an AI conversation are covered by clause 5.
  2. Business Manager keeps a copy of the Google reviews of the client's linked branches: the review text and rating, the reviewer's name and whether the review is anonymous, and the text of the business's reply. They are kept while the client's agreement is active, and deleted by the agreement-end process after the export window (30 days by default), and in any case within 90 days of the agreement ending. Google sends the reviewer's name with each review. Business Manager keeps it, and removes it before the review leaves for AI or for an export, unless it is allowed. Each client has two separate permissions: what our team sees, and what reaches AI. What reaches AI never exceeds what the team sees. De-identification happens in exactly one layer, Business Manager.
  3. Reviewer names and ids reach AI only when that client's permission is opened. Where the client's contract locks it, only the client's own consent opens it. The request goes to the official email in the contract, and the client confirms with a code sent to their email. The client may accept some items and decline others. Each consent is recorded with its date and time. If the client is deleted from our systems, the record of the consent and of any withdrawal is kept in full as evidence of them, including the email the request went to, the IP address and browser it was confirmed from, a digital fingerprint of the text shown, and the date and time.
  4. The connector works both ways. AI reads client data through it (profile, reviews, performance). It writes one thing through it, replies to reviews, and a reply is published only after a staff member confirms it. Measured: neither Business Manager nor the connector contains a model-provider library, a model endpoint or a model key. Both were measured with the same instrument on 2026-09-30, on the deployed release, with a positive control proving the instrument detects a planted sample. Any new AI capability is added to this statement before it is switched on.
  5. Not measured; a conduct commitment: the systems do not stop a staff member from typing a person's name or other data into an AI conversation by hand, or from uploading a file or image to it. We commit to training the team and forbidding it; it is not a technical guarantee.
  6. Every edit or reply made through AI is recorded on the client's timeline under the name of the staff member who asked for it.

All data is stored on servers in the EU (Contabo), and AI processing happens outside Saudi Arabia. Saudi-only storage is not promised.

العربية