Khallam
Privacy policy
Last updated 26 October 2026
This policy covers what you tell us when you ask for a demo: the questions about your company, your goals and how to reach you. It says what we collect, why, who helps us handle it, how long we keep it and what you can ask of us.
Who we are
Khallam is run by Hachad Solutions LLC. Hachad Solutions LLC is the controller of your personal data: it decides why and how the data is used. You can reach us at contact@khallam.com.
What we collect
- The website you give us.
- The public pages of that website we read. We fetch a few of its pages and keep a copy, so we can suggest your company details and competitors.
- Your answers: about your company, your goals, your competitors, what you want to measure, where you are starting from, and anything you add in your own words.
- Your first name and work email.
- Your phone number, only if you choose to be reached by phone call or WhatsApp.
- A keyed hash of your IP address: a code made from the address with a secret key, which we use to limit repeated requests and keep with the answers you send. We never store your IP address itself.
- One session cookie, which keeps your answers together while you fill in the form.
If you speak your answer instead of typing it, your browser turns your speech into text. We receive only that text, which goes into your answers like anything you type. We never receive or store audio.
Why we use it, and on what basis
- To prepare your demo and contact you about it. The basis is your consent, which you give by ticking the box before you send your answers.
- To run the form you asked to use, including the session cookie, the bot check and the limit on repeated requests. The basis is taking the steps you ask for before a possible contract with us.
We do not sell your data, and we do not use it for advertising.
Who handles it for us
These companies process your data on our behalf, only to do the job listed:
- Supabase: our database, where your answers and the copy of your website's pages are stored.
- Vercel: hosts this site, so it handles your requests, including your IP address.
- Anthropic: reads the public pages of your website.
- Firecrawl: loads the pages of your website that need JavaScript to show their content.
- Resend: delivers our email.
- Notion: where we keep our internal record of your request.
- Cloudflare: runs Turnstile, the check that you are not a bot. It sees your IP address and some details of your browser.
- Google, only when you use voice input in Chrome: the browser sends the audio to Google to turn it into text. Other browsers use their own maker's service. We never receive or store audio.
Where your data goes
Hachad Solutions LLC and most of the companies above are in the United States, so your data is transferred to and processed in the United States. Privacy law there is not the same as in the European Union or in Morocco.
How long we keep it
- Answers you start but do not send: 30 days, then they are deleted.
- Our copy of your website's pages: 1 day, then it is deleted, unless it belongs to answers you are filling in or have sent, in which case it is kept with them.
- The counters we use to limit repeated requests: 1 day.
- Answers you send: until you ask us to delete them, or until our business relationship ends.
Your rights
You can ask to see the data we hold about you, to correct it, or to delete it, and you can withdraw your consent at any time. Withdrawing it does not undo what we did before. Write to contact@khallam.com. The form does not let you change answers after you send them, but we will correct them if you write to us.
These rights come from the European Union's General Data Protection Regulation (GDPR) and from Morocco's law 09-08 on the protection of personal data. You can also complain to the data protection authority where you live; in Morocco, that is the CNDP.
Cookies
We set one cookie: a strictly necessary session cookie that keeps your answers together while you fill in the form. Cloudflare Turnstile may set its own cookie to run the bot check. We use no advertising or analytics cookies.
Changes to this policy
When we change this policy, we update this page and the date at the top.