Privacy Policy

Who this covers

This policy is issued by Qalam Media Group ("Qalam Group", "we"), a media publisher. It covers three groups of people:

• Visitors to qalam.group and to the group's publications.
• Business contacts who send us an advertising enquiry or subscribe to our newsletter.
• Correspondents — people who comment on, or send a direct message to, one of the group's own social-media accounts, which our editorial tool helps us answer.

We are the operator of this site and of the accounts described below. Questions go to hi@qalam.group.

Visiting this site

We run no advertising trackers and no analytics script on qalam.group. We set no cookie for advertising, profiling or cross-site measurement. The only cookie this site sets is a strictly necessary one on the password-protected client portal at /sponsor-report/… and /c/…, which records that you entered the correct access code for one document; it carries nothing else and expires on its own.

Our web server keeps ordinary request logs — IP address, time, the URL asked for and the browser's user-agent string — for security and abuse prevention. They are deleted after 90 days.

Contacting us and subscribing

If you send the advertising enquiry form, we store what you typed: your name, company, telephone number, email address, industry, indicative budget and message, together with the page you sent it from, the time, your IP address and your browser's user-agent — the last two so we can stop automated abuse of the form. We use it to answer you and, if it becomes a working relationship, to keep a record of it in our own sales system. It is not used for anything else and it is not sold.

If you subscribe to the newsletter, we store your email address, the language you chose, the time and your IP address, and we use them only to send you that newsletter. Every message carries an unsubscribe link; unsubscribing removes the address.

Our social-media accounts

Our editors use an internal tool to publish video to the group's own professional accounts on Instagram and other platforms, and to answer the questions our audience sends those accounts. The tool is not offered to the public and has no self-registration. It reaches every platform through that platform's official API, and only after an administrator of the account has granted access through the platform's own consent screen.

Through those connections we hold:

• About the connected account: its platform user ID, username and profile picture, and a list of its own recent posts — so an editor can confirm they linked the right account and see which post a reply belongs to.
• An access token issued by the platform, encrypted at rest. Disconnecting the account deletes the token immediately.
• About correspondents: the content of the comment or direct message you sent to one of our accounts, the platform-scoped user ID the platform gives us for you, your public username and the timestamp. We receive this only because you chose to write to us.

We use it to show an editor what was asked and to send a reply back to the person who asked — a public reply under the comment, or a direct message inside the platform's own reply window. We do not send unsolicited, promotional or bulk messages, and we do not message anyone who has not messaged us first. Message content is never used for advertising, and we do not build profiles from it.

A reply may be drafted by an automated language model before an editor reads it, edits it and sends it. Message content is processed for that purpose only, is not used to train any third-party model, and is not retained by the model provider beyond the request. Nothing is sent without a person choosing to send it.

Who we share data with

• The platform itself — posting a reply or publishing a video means calling Instagram's, YouTube's or Telegram's API. That is the purpose of the tool.
• Service providers that host our infrastructure and send our email, bound to process data only on our instructions.
• Authorities, where a valid legal obligation requires it.

We do not sell personal data, and we do not share it with advertisers or data brokers.

How long we keep it

• Server request logs — 90 days.
• Newsletter subscriptions — until you unsubscribe.
• Advertising enquiries — 24 months, unless you are an active client.
• Comment and direct-message content — 12 months.
• Internal records of which editor sent which reply — 24 months.
• Platform access tokens — until the account is disconnected or the token revoked.

Your rights

You may ask us to give you a copy of the personal data we hold about you, to correct it, or to delete it. Write to hi@qalam.group and we will answer within 30 days. If you are in the EU or EEA you may also complain to your national data protection authority.

Deleting your data

To have the data tied to your social-media account removed, either:

• write to hi@qalam.group, or
• remove our tool from your account's connected apps on the platform, which sends us a deletion signal we act on automatically, or
• use our data deletion page directly.

Security

The site and the tool are served over HTTPS. Access tokens are encrypted at rest. Signing in to the tool requires authentication against our own staff directory, and each editor sees only the accounts they are authorised for.

Children

Our services are not directed at children, and we do not knowingly collect personal data from anyone under 13.

Changes

Any change to this policy is published on this page and the date above is updated. If a change is material we will say so on the page.