Legal
Privacy policy
Last updated: 2 November 2026
In short. We do not sell your information and we use no advertising trackers. Visit counts (Umami, which we host ourselves) run only if you accept the cookie notice. The "leak" calculator runs in your browser and its numbers never reach us. If you write to us on WhatsApp or book a call, we keep your messages and details only to answer you and arrange the call, and you can ask us to delete them or send you a copy. Contact: hello@learnwithbader.com or WhatsApp +961 78 833 354.
1. Who we are
learnwithbader.com is run by Bader AI Systems (trading name of Roberto Bittar, sole trader), Mount Lebanon, Lebanon ("Bader", "we", "us"). For privacy questions write to hello@learnwithbader.com or on WhatsApp at +961 78 833 354.
For the personal data in this policy, we are the controller: we decide why and how it is used.
If you are a customer of a business that uses Bader on its WhatsApp, that business is the controller of your messages and we process them for it. This policy does not cover that. Ask the business, or see the notice it shows you.
2. What we collect, and why
| What | When | Why | Legal basis (GDPR-style) |
|---|---|---|---|
| Leak calculator numbers (missed messages, value of a customer) | You move the sliders on the page | To show you an estimate. It runs in your browser. We do not receive or store these numbers. | Not applicable: no data reaches us |
| Small settings in your browser (for example whether you closed the Bader guide) | You use the page | To remember your choice on your device. Stored in your browser's local storage, not sent to us. You can clear it in your browser. | Legitimate interest; strictly needed for the feature |
| Messages you send us on WhatsApp or in the site chat (your name, your number, what you write, the time) | You click "Book a quick call" or "Message Bader" and write to us | To answer you (Bader, our AI assistant, may write the reply, with our team able to step in), arrange a call and send you a written proposal | Your request (steps before a contract) and legitimate interest |
| Booking details (name, email, time you pick) | You book a call through our booking page | To hold the call and contact you about it | Your request |
| A question we could not answer yet (the text of your question and the contact detail you give us) | Our assistant cannot answer and nobody on our team is available at that moment | To come back to you with an answer. Our team gets one alert about it. | Your request (steps before a contract) |
| The "Try Bader" demo chat (what you type into the demo) | You use the demo on the site, once it is live | To run the demo and protect it from abuse (rate limits). It is a sample business, so do not type real personal or health details. | Your request; legitimate interest (security) |
| Basic technical data (IP address, browser type, pages requested, time) | Every visit; kept in server logs by our host | Security, fixing errors, stopping abuse | Legitimate interest |
| Aggregate visit statistics | Only if you accept the cookie notice. We count visits and pages with Umami, which we host ourselves. If you decline, nothing is loaded. You can change your choice at any time from "Cookie settings" in the footer. | To see which pages are useful | Your consent |
We do not sell your personal data. We do not use it to build profiles that decide things about you. We do not use advertising cookies or trackers on the site.
If you contact us from a business, we may keep the business name, role and message in our contact records to follow up the conversation you started. We do not add you to a mailing list unless you ask.
3. Who sees it (recipients)
- Our hosting and infrastructure providers, to run the site and keep it safe: the website is served by Cloudflare (network, security and the bot check, Turnstile; it sees visitor IP addresses). The dashboard and the AI service run on servers in the EU (Hetzner, Germany or Finland), with an EU off-site backup. Monitoring uses Grafana Cloud or UptimeRobot.
- Resend, which sends login and notification emails.
- Meta Platforms (WhatsApp), when you message us on WhatsApp. Meta handles the message under its own terms and privacy policy. We do not control that.
- Our booking tool (Google Calendar), when you book a call.
- Our AI providers, Anthropic and Google (Gemini, and for search vectors). When Bader answers your message, on WhatsApp, in the site chat or in the demo, the text of your message is sent to them to produce the reply. We do not use your messages to train models for other clients, and we pay for these services under business terms.
- Our professional advisers (lawyer, accountant) if needed, under confidentiality.
- Authorities, if the law requires it.
4. Transfers abroad
We are based in Lebanon. Our providers may be in other countries (see section 3). If you are in the EU or UK, your data may therefore leave your region. Where the law requires safeguards (for example standard contractual clauses), we put them in place with the provider.
5. How long we keep it
| Data | Kept for |
|---|---|
| WhatsApp conversation with us | The message text is replaced after 90 days by our nightly clean-up. The conversation record (dates, counts, booking references) stays until you ask us to delete it. If you become a client, it moves into the client file under the client agreement. |
| Chats Bader handles for a business client (the business is the controller) | Message text is replaced after the period in the client agreement (90 days by default; the business can change it from 7 to 3,650 days in its dashboard). Older conversation summaries are deleted and customer names are cleared from older booking proposals. Booking records and the conversation record stay until the business or you ask for deletion. |
| Text from a business client's own website (read with the client's permission, only the public pages of the domains the client registers) | Kept for that client's assistant until the client removes it, removes the domain or withdraws permission (then deleted within 7 days), or the agreement ends. It may contain names or contact details the business published. |
| Booking details | Kept until you ask us to delete them. The nightly clean-up does not remove booking records; it only clears the customer name from older booking proposals. |
| A question we could not answer yet, with your contact detail | Kept like message text: the question text is replaced after 90 days, and the whole item is deleted if you ask us to delete your data. |
| "Try Bader" demo chat on the website | The messages typed into it and the visitor record are kept for up to 30 days, then deleted automatically. The demo collects no name or phone number unless you type one. |
| Server logs (IP address, requests) | A short rolling period (old logs are overwritten as new ones arrive) |
| Records we must keep by law (invoices, contracts) | As long as the law requires |
6. Your rights
You can ask us to:
- tell you what we hold about you and give you a copy (access);
- correct it (rectification);
- delete it (erasure), unless the law makes us keep it. Our team does this by hand and records the request in a log that holds no message text. Copies in backups are overwritten within 30 days;
- limit or object to how we use it, including for direct marketing (we do not send marketing unless you ask for it);
- move it to another service (portability), where it applies;
- withdraw your consent at any time, where we rely on consent. This does not affect what we did before.
How: write to hello@learnwithbader.com or message us on WhatsApp. We answer within 30 days. We may ask you to prove who you are. It is free, unless requests are clearly repeated or unreasonable.
Complaints. Please tell us first. You can also complain to the authority where you live: for the EU, your national data protection authority; for the UAE, the UAE Data Office; for Lebanon, the Ministry of Economy and Trade or the courts.
7. If you are in the EU, UK, UAE or Saudi Arabia (short section)
We aim to respect the rights above whichever country you are in. For visitors protected by the EU or UK GDPR: our legal bases are listed in section 2; you have the right to complain to your supervisory authority; giving us your details is optional, but we cannot answer you or book a call without them. For visitors in the UAE (Federal Decree-Law 45/2021) or Saudi Arabia (Personal Data Protection Law): you have rights to access, correction, deletion and to object, and we will tell the regulator and you if a breach puts your rights at serious risk, as the law requires.
8. Children
The site is for business owners. It is not meant for people under 18 and we do not knowingly collect their data. If you think a child has written to us, tell us and we will delete it.
9. Security
We use encrypted connections (HTTPS), limit who can see messages, and keep secrets out of code. No online service is perfectly safe. If a breach affects your rights, we will tell you and the authority as the law requires.
10. Changes
We will change this page when what we do changes, and update the date at the top. For a big change we will say so on the site.
11. Contact
Bader AI Systems (trading name of Roberto Bittar, sole trader), Mount Lebanon, Lebanon. hello@learnwithbader.com. WhatsApp +961 78 833 354.