Demo site: letters are samples and no real payment is taken.
Waraqa | ورقة

Privacy policy

Last updated: 27 October 2026

Waraqa makes personalised calendars, which means you trust us with personal and sometimes intimate details. This policy explains what we collect, why, who helps us, and the choices you have.

Who we are

Waraqa is a small business in the UAE, and we are responsible for your personal data. You can reach us at ⁦hello@example.com⁩ or on WhatsApp at ⁦+971500000000⁩.

What we collect

Sign-in details: your mobile number or email address, used to send you one-time codes. We do not use passwords.

Your calendar: your survey answers about you and the person receiving the calendar (names, relationship, important dates, memories and preferences), the letters, your edits and your design choices.

Your order: the delivery name, phone number and address, and a record of the payment. Card payments are handled by Stripe; we never see or store your card number.

Technical data: a small number of essential cookies to keep you signed in and remember your language. We do not use advertising or tracking cookies.

How we use it

To create, write, print and deliver your calendar; to let you come back and continue where you left off; to contact you about your order; and, if you leave a calendar unfinished, to send you a friendly reminder.

To prevent fraud and misuse, and to meet our legal and tax obligations.

We do not sell your data, and we do not use it for advertising.

Letters written with AI

Waraqa drafts the letters with the help of an AI model provided by Anthropic (Claude). To do this, your survey answers and the letters you ask us to rewrite are sent to Anthropic. Under its commercial terms, Anthropic does not use this data to train its models.

Please share only what you are comfortable seeing in a letter, and read every letter before you confirm your calendar.

Who we share it with

Only with the service providers we need to run Waraqa, and only what each one needs: our hosting and database providers (Vercel, Supabase), the AI provider (Anthropic), our payment provider (Stripe), our email and SMS providers, our print shop (your calendar pages) and our delivery partner (your delivery details).

Some of these providers process data outside the UAE. We choose providers with strong security and contractual safeguards for your data.

We may also share data when the law requires it.

Information about the person receiving the calendar

Your answers include details about someone else. By sharing them, you confirm that you are comfortable with that information being used to write and print their calendar. We use it only for that purpose.

How long we keep it

We keep your account and calendar for as long as you use Waraqa and for up to ⁨12⁩ months after delivery, so we can reprint if something goes wrong. Order and payment records are kept for as long as UAE law requires. You can ask us to delete your calendar earlier.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you can ask to see the personal data we hold about you, correct it, delete it, or object to how we use it. Write to ⁦hello@example.com⁩ and we will reply within 30 days.

Security

Your data is encrypted in transit, stored with providers that protect it at rest, and only accessible to you and to the Waraqa team members who need it to make your calendar.

Children

Orders must be placed by adults (18 or older).

Changes to this policy

If we change this policy, we will update the date at the top of this page. Important changes will be shown on the website.