Effective date: July 11, 2026
This Privacy Policy describes how Sallat (“we”, “us”) handles information when you use our mobile and web application (“App”). The App supports wedding hall operations: invitations via QR codes, entrance scanning by supervisors, and related oversight features.
The controller responsible for processing personal data under this policy is the party operating Sallat for your venue or organisation. For questions about a specific event or hall, contact the hall owner or administrator who invited you to use the App.
Depending on your role (visitor, groom/host, supervisor, hall owner, administrator), we may process:
Camera (QR scanning). The App requests permission to use your device camera so supervisors can scan QR codes at the entrance. Camera frames are used on your device to read the code; we do not store or upload raw video streams for this purpose. Validation results are processed as described in sections 2 and 6.
Contacts. If you import guests from your address book, the App requests read access to contacts. Only contacts you select are used. Their names and phone numbers are transmitted to our servers and linked to your account and event.
Photo library. The App may request access to your photo library so you can choose images for invitations. Invitation images you select are stored on your device unless you share them through your operating system’s share sheet.
Local storage. Some data stays on your device only, such as offline supervisor visitor lists, share-caption drafts, and your last login email for convenience. This on-device data is not used for advertising or cross-app tracking.
We do not sell your personal data. We do not use your data for third-party advertising, retargeting, or cross-app tracking. We do not share data with data brokers. We do not embed analytics or advertising SDKs that combine your App data with data from other companies’ apps or websites.
We process data to provide the service you asked for: managing invitations, validating entry, and hall-owner oversight. Where the GDPR applies, legal bases may include performance of a contract, legitimate interests in securing and operating the service, and consent where we ask for it (e.g. certain device permissions).
We use Supabase for authentication, database, file storage, and related cloud services. Data may be processed in data centres according to Supabase’s privacy policy and safeguards. Supabase acts as our infrastructure provider; we remain responsible for how the App uses your data.
We keep data only as long as needed for the purposes above, unless a longer period is required by law or contract with the hall owner. Retention details may vary by deployment; contact your organisation’s administrator for event-specific policies.
We share data with service providers strictly needed to run the App (e.g. cloud hosting). We may disclose information if required by law or to protect rights and safety.
We implement appropriate technical and organisational measures to protect personal data. No method of transmission over the Internet is completely secure.
Depending on your location, you may have rights to access, rectify, delete, restrict processing, port data, object, and lodge a complaint with a supervisory authority. To exercise rights, contact the administrator of your organisation or event, or reach us using the contact details below.
The App is not directed at children. Organisers should not use it for invitations aimed at minors without appropriate guardian involvement.
If data is processed outside your country, we rely on appropriate safeguards where required (such as standard contractual clauses offered by our providers).
We may update this policy. We will adjust the effective date above for material changes and, where appropriate, provide notice inside the App or via your administrator.
For privacy requests regarding Sallat, contact us via WhatsApp: +963 968 571 668