Privacy Policy

Last updated: 5 November 2026

Who we are

DOHRA Network ("DOHRA", "we", "us") is a trading name of Fazal-ur Rehman, a sole trader in the United Kingdom. DOHRA provides software for automotive trade businesses. This policy explains what personal data we collect, why, and what rights you have over it.

Our two roles

DOHRA handles personal data in two different ways, and the rules that apply depend on which:

As a controller - for the accounts of people who use DOHRA (dealership staff and partners), for enquiries sent to us through dohra.net, and for running and securing the service. We decide why and how this data is used.
As a processor - for the records each dealership keeps in DOHRA about its own customers, vehicles and business (for example a buyer's name and address on an invoice). The dealership is the controller of that data; we process it only on its instructions, to provide the service. If you are a dealership's customer, please contact the dealership first about your data - we will help them answer you.

What we collect

Accounts: name, username, email address, phone number and address if added, role and permissions, job title, working days, and when you last used DOHRA.
Sign-in and security: your password (stored only as a one-way hash, never readable), password-reset links, and records of changes made to accounts and permissions.
What you do in DOHRA: the records you add or change (cars, tasks, costs, sales, documents, photos, notes) and a history of those changes, so the team can see who did what.
Doh, the assistant: what you ask Doh and what it answers, the changes it makes for you, and - if your dealership uses it - the WhatsApp number that messages Doh and the name your admin gave it.
Dealership records (as a processor): customer names and contact details, vehicle and sale details, finance and part-exchange details, and documents and photos the dealership uploads.
Enquiries to us: the name, business, email, phone number, stock size and message you send through dohra.net.

We don't use advertising or tracking cookies, and we don't run analytics that follow you around the web. DOHRA keeps your sign-in in your browser's own storage so you stay signed in.

Why we use it, and on what basis

To provide the service to the dealership you work for or with - running your account, storing and showing its records, making documents, Doh's answers and actions, emails such as password resets (contract, and our legitimate interest in running DOHRA for the dealerships that use it).
To keep DOHRA secure and working - preventing misuse, investigating faults, keeping logs (legitimate interests).
To answer enquiries and, if you ask, set up an account for your dealership (steps before a contract, and legitimate interests).
To meet legal obligations, such as keeping business and tax records.

We don't sell personal data, and we don't use it for advertising.

Who can see it

Inside a dealership, what each person can see is set by the dealership's admins (for example who can see customer details, documents or figures). The dealership's admins can read the team's conversations with Doh, in the app and on WhatsApp, and each day's conversations are saved for them; Doh tells people this the first time they message it on WhatsApp. Each dealership's data is kept separate from every other dealership's.

Services we use

We use a small number of suppliers to run DOHRA. They process data only to provide their service to us:

Railway - hosts DOHRA's servers and database.
Cloudflare - delivers the website and app, stores uploaded files and documents, and routes email sent to dohra.net.
Resend - sends DOHRA's emails (for example password resets and notices).
Anthropic and OpenRouter (and the AI model providers OpenRouter connects to) - power Doh. What you ask Doh, and the dealership records needed to answer, are sent to them to produce the answer.
Meta (WhatsApp) - carries messages when a dealership uses Doh on WhatsApp.
Google Fonts - provides the typefaces on our pages; your browser fetches them from Google.

Some of these suppliers process data outside the UK, including in the United States. Where they do, we rely on the protections UK law allows for such transfers, such as adequacy regulations, the UK International Data Transfer Addendum or equivalent contractual safeguards.

How long we keep it

Accounts - while the account is in use. A person who leaves is deactivated by their dealership rather than deleted, so the dealership's records still show who did what.
Conversations with Doh - for a day, a week or a month, as each dealership chooses. A list of the changes Doh made is kept for 12 months, and records of how Doh answered for 90 days. If a dealership's admins use them, each day's conversations are also saved as a document the dealership keeps.
WhatsApp delivery records (not the messages' words) - 90 days.
Dealership records - for as long as the dealership uses DOHRA, and as the dealership decides; when a dealership leaves, its data is deleted after any period agreed with it.
Enquiries - as long as needed to deal with them and any account that follows.

Keeping it safe

Data is sent over encrypted connections, passwords are stored only as hashes, each person sees only what their role and permissions allow, and access to DOHRA's own systems is limited to the people who run it.

Your rights

Under UK GDPR you have the right to access your personal data, to have it corrected, to have it deleted, to restrict or object to how it's used, and to receive it in a portable form - though some of these depend on the circumstances. To use any of them, contact us at the address below; if your data is in a dealership's records, you can also ask the dealership directly. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.

Contact

Questions about this policy or your data: [email protected].

Changes to this policy

We'll update this page when what we do with personal data changes, and change the date at the top. If a change matters to how your data is used, we'll tell dealerships before it applies.