1. Who we are
Aligator is the company behind the media monitoring platform. Aligator is operated by Aligator Technology LLC, QFC License No. 03195, based in Doha, Qatar ("Aligator", "we", "us"). Contact: info@aligator.ai
2. Our role
We decide how customer account data is used, but we follow our customers' instructions for monitored media.
-
Controller: for website visitors, prospects, customer account holders and users, and media content we scrape based on the customer’s instructions
-
Processor: for the media content a customer asks us to monitor and the reports built from it. The customer decides what to monitor and why, and is responsible for having a lawful reason to do so.
-
Individuals named in the media: we do not have a relationship with them. Section 8 explains how they can reach us.
3. Data we collect
We collect only what we need to run the service.
-
From you: name, work email, phone (including a WhatsApp number if you choose WhatsApp alerts), job title, organisation, login credentials (or, if you use “Sign in with Microsoft”, your Microsoft account email and identifier),
billing details, support messages, and content you type into the platform (keywords, alerts, saved searches).
-
Automatically: device and browser type, IP address, pages and features used, timestamps.
-
Monitored media: publicly available news, online and social media content in Arabic and English, gathered from news websites and news aggregators (including our licensed news provider Opoint), search engine results and RSS
feeds, and public posts, comments, reviews and public profile details (such as username, display name, profile picture, follower counts and stated location) from platforms such as X (Twitter), Instagram, Facebook, TikTok, YouTube, Reddit,
Google Maps reviews and Tripadvisor. We collect it through official platform APIs, licensed third-party data providers listed in Annex A, and our own web crawlers. This content can include names, statements and images of individuals. We
do not collect private messages, closed groups, or content behind a login we are not authorised to use.
-
Research participants: contact details, survey and interview answers, recordings, notes and transcripts, described in section 9.
4. How and why we use data
Each use has a stated reason, and we do not use data for anything unrelated.
-
Provide and secure the platform, create accounts, deliver alerts and reports (contract).
-
Bill and support customers (contract, legal duty).
-
Improve the platform and measure usage: operational monitoring and fixing faults are necessary to provide the service (contract); product analytics beyond that use aggregated or anonymised data, or run only with your consent.
-
Run user research, market research and product testing (with your consent, see section 9).
-
Send product and marketing messages, only with your consent, which you can withdraw at any time.
-
Meet legal duties and answer lawful requests from Qatari authorities.
5. AI and automated analysis
AI helps us classify and summarise media; it does not make decisions about people.
We use language models and analytics, including Anthropic Claude, Google Gemini, OpenAI models, Amazon AI Services, and specialised Arabic and English language tools (all listed in Annex A), to detect topics, sentiment, relevance and entities, translate
and summarise Arabic and English text, group mentions into themes, and estimate the country or area a post or public author relates to from public profile information.
We do not use this analysis to make decisions that have legal or similarly significant effects on an individual. We do not use customer data or monitored content to train our own AI models, and we send content to AI providers through their business
APIs, whose terms do not allow them to use it to train their models.
We use monitored public content to test and evaluate the quality of our analysis. Outputs can be imperfect, and customers should review them before acting.
6. Who we share data with
We do not sell personal data.
We share it only with:
-
service providers acting on our instructions, listed in the service provider list in Annex A of this policy;
-
the customer whose account it relates to;
-
authorities, when Qatari law requires it;
-
a buyer or successor, if Aligator is restructured, with the same protections.
7. Where data is stored and transferred
Data is hosted in Amazon Web Services (AWS), mainly in the United States.
Our servers, database, cache and processing queues run on AWS in the US East (N. Virginia) region, United States. Our website is hosted by Webflow in the United States. Some service providers in Annex A process data in other countries, mainly the
United States and the European Union. Because our hosting is outside Qatar, personal data is transferred outside Qatar. We do so only where allowed by Qatari law, with contractual and technical safeguards, and we tell customers which regions are
used.
You can ask us to look at how your name appears and we will respond.
Our platform analyses content that is already public. If you believe content about you is inaccurate, unlawful or should not be processed, write to info@aligator.ai with the content link and your request. We will
assess it within 30 days, tell you the outcome, and where justified restrict or remove the item from our platform. We cannot remove content from the original publisher; you must contact the source for that.
9. Research, testing and product improvement
You choose whether to take part, and we record only with your consent.
We run user research, market research and product testing with customers, prospects and other participants. We may collect contact details, survey and interview answers, screen, audio or video recordings, notes and transcripts, and feedback given
during testing. We use them to understand needs and improve the platform, and we share them only with our research team and service providers under confidentiality. You can skip any question, stop at any time, and ask us to delete your contribution
by writing to info@aligator.ai. We keep research data for the period in the table in section 10. We do not use customer account data in testing unless it has been anonymised or the customer has agreed. We
do use monitored public media content to test and evaluate our analysis features.
10. How long we keep data
We keep data only as long as its purpose lasts.
Retention periods are in the data table below: When they end we delete or irreversibly anonymise the data.
| Data |
Retention Timeline |
| Account and contact details |
Life of account plus 12 months |
| Billing details |
Longer of 5 years or the period Qatari accounting law requires |
| Credentials and access logs |
Credentials until account deletion; access logs 12 months |
| Usage and device data |
24 months, then aggregated |
| Support messages |
24 months after closure |
| Marketing contacts |
Until consent is withdrawn,
or 24 months without engagement |
| Customer monitoring setup |
Life of account plus 30 days |
| Monitored public media content |
We don't delete media data unless explicitly requested by the user on a valid section 8 request |
| Website cookie data |
Per cookie, max 13 months |
| Research participants (recordings, notes, transcripts, survey answers) |
12 months after the study closes |
| Prospect and market research contacts |
24 months from last contact, or until consent is withdrawn |
11. Security and incidents
We protect data with technical and organisational controls and will tell you if something goes wrong.
Measures include encryption in transit (HTTPS) between your browser and our platform, encrypted storage of system secrets and keys, encryption at rest, role-based access controls, logging and monitoring, and staff confidentiality duties. To report
a security or privacy issue, write to info@aligator.ai. If a breach is likely to cause serious harm, we notify the affected customer without undue delay, and notify the regulator and affected individuals as Qatari law requires.
12. Your rights
You can control your data.
You may ask to access, correct, erase or restrict your personal data, object to processing, and withdraw consent. Write to info@aligator.ai. We will reply within 30 days and may ask you to verify your identity. If you are unhappy with our answer,
you can complain to the Qatari data protection authority.
13. Cookies
Only essential cookies run by default.
On our website we use essential cookies, and analytics or marketing cookies only after you agree. You can change your choice at any time in. The Aligator platform itself uses no advertising or third-party analytics cookies; it keeps your sign-in session
and display preferences in your browser’s local storage so the platform works. Where a customer chooses “Sign in with Microsoft”, Microsoft may set its own sign-in cookies.
14. Children
Our service is for adults.
Aligator is intended for organisations and users aged 18 or over. If we learn we hold a child's data collected through our services, we delete it.
15. Changes to this policy
We will tell you before material changes apply.
We post updates here with a new date and notify account holders by email for material changes.
We are easy to reach.
Name: Aligator Technology LLC
Email: info@aligator.ai
Office Address: Media City Qatar, Msheireb, Office 16, Floor 2, Building Y03
Data categories
Each data type has one purpose, one basis and one retention period;
| Data type |
Purpose |
Legal basis |
Retention |
Shared with |
| Account and contact details |
Create and manage accounts, support |
Contract |
Life of account plus 12 months |
AWS (hosting); Twilio SendGrid (email);
360Dialog(whatsapp number if alerts are enabled for it)
Microsoft, if you use Microsoft sign-in
|
| Billing details |
Invoicing, tax and accounting |
Contract, legal duty |
Longer of 5 years or the period Qatari accounting law requires |
Our bank and accountants (no online payment provider is connected to the platform) |
| Credentials and access logs |
Authentication, security |
Contract, legitimate interest |
12 months for logs |
AWS (hosting) |
| Usage and device data |
Improve and secure the platform |
Legitimate interest |
24 months, then aggregated |
AWS (hosting); no third-party analytics provider on the platform |
| Support messages |
Resolve requests |
Contract |
24 months after closure |
Our email provider |
| Marketing contacts |
Product news and offers |
Consent |
Until consent is withdrawn,
or 24 months without engagement |
Twilio SendGrid (email) |
| Customer monitoring setup (keywords, alerts) |
Deliver monitoring service |
Contract |
Life of account plus 30 days |
AWS (hosting); media data and AI providers, to run searches and build queries (Annex A) |
| Monitored public media content |
Deliver search, alerts, reports on customer instruction |
Customer's instruction; public availability |
We don't delete media data unless explicitly requested by the user on a valid section 8 request |
Customer [1]; AWS; AI providers for analysis; email and WhatsApp providers for alerts. |
| Research participants (recordings, notes, transcripts, survey answers) |
Understand needs and improve the platform |
Consent |
12 months after the study closes |
Research team; transcription, survey and video tools |
| Prospect and market research contacts |
Market research and outreach |
Consent |
24 months from last contact, or until consent is withdrawn |
Email and survey platforms |
Annex A: Service providers (sub-processors)
These providers process personal data on our instructions. Location is where the provider is based or processes the data; we will update this list before adding a provider that handles customer personal data.
| Provider |
Service |
Personal data involved |
Location |
| Amazon Web Services (AWS) |
Compute, data storage, system monitoring |
All platform data, including account data and customer keywords |
United States (US East, N. Virginia) |
| Webflow |
Website hosting |
Website visitor data and website form submissions |
United States |
| Twilio SendGrid |
Sign-in, password-reset and alert emails |
Name, email address, alert content |
United States |
| 360dialog (with Meta WhatsApp) |
WhatsApp alert delivery |
Phone number, alert content |
Germany (EU); Meta global infrastructure |
| Anthropic (Claude) |
AI Analysis |
customer keywords |
United States |
| Google (Gemini API, Knowledge Graph API) |
AI Analysis |
customer keywords |
United States and Google global infrastructure |
| OpenAI |
AI Analysis |
customer keywords |
United States |
| Hugging Face |
AI Analysis |
customer keywords |
United States |
| Farasa (QCRI); TextRazor |
AI Analysis |
customer keywords |
United Kingdom |
| Opoint |
Licensed news content |
Customer keywords |
Norway |
| EnsembleData; Data365; twitterapi.io; osint.rest |
Public social media data |
Customer keywords |
United State, Singapore, Ukraine |
| Google (YouTube Data API, Places API); Tripadvisor; Reddit; Serper; RapidAPI (Similarweb) |
Public posts, reviews, search results and website statistics |
Customer keywords |
United States |
Appendix
[1]: Customers can also share their data hosted on Aligator’s dashboard via publicly shareable links