DOO
DOO is an AI customer experience platform for Gulf and wider MENA businesses. Its agents answer and act across WhatsApp, Instagram, voice, email and chat in native Arabic dialects, escalating to human agents with full context.
What is DOO?
DOO is an AI customer experience platform published by DOO Inc., a Delaware corporation whose team and operational leadership are presented on the site as based in Riyadh, Saudi Arabia. The legal documents call the product the DOO CX platform. It puts conversational AI agents in front of customer conversations, lets them resolve routine requests on their own, and hands the rest to human agents with the full history attached.
The platform is organised around three named products. Unified Inbox gathers WhatsApp, Instagram DM, Facebook Messenger, voice and SIP calls, email, web chat, in-app chat and SMS into a single queue. Analytics Hub reports on conversation volume, sentiment, resolution rate, CSAT, agent performance and topic trends in real time. Control Tower is where the agents themselves are built and supervised: guardrails, prompt A/B testing, escalation policies and live oversight of a fleet of agents. Four solutions sit on top of these products: CX Automation, Custom AI Agents, Analytics & Insights, and Arabic AI Localization.
The differentiator DOO puts forward is linguistic. Rather than routing Arabic through translation, it claims native handling of fourteen dialects, Najdi, Hijazi, Bahraini, Kuwaiti, Qatari, Emirati, Omani, Egyptian, Moroccan, Lebanese, Jordanian, Palestinian, Algerian and Tunisian, alongside Modern Standard Arabic and English, with Arabic-English code-switching handled natively. Conversations are multimodal: text, voice, images and files in one place. The agent lifecycle shown on the home page runs in four stages, Build, Delegate, Train and Enhance.
Commercially, the platform addresses twelve industries through dedicated pages (education, fintech, real estate, banking, healthcare, automotive, insurance, food and beverage, telecom, hospitality, logistics, retail) and ten departments, with sector rules such as SAMA, CBUAE, CBB and HIPAA named for banking and healthcare. Primary markets are Saudi Arabia, the UAE, Bahrain, Kuwait, Qatar and Oman, with Egypt, Jordan and Lebanon also cited; named references include STC, Batelco, Jahez, BBK, Albaik, Alsalam Bank, Tamkeen and several Gulf universities. The site is fully bilingual, English and Arabic. One caveat: the impact counters on the home page, covering automated conversations, speed, responses handled and minutes saved, are animated and remain at zero in the served HTML, so no performance figure is verifiable.
What it does
- Resolve routine customer requests automatically across every connected channel
- Route complex cases to a human agent with context, history and suggested replies
- Understand and reply in real Arabic dialect rather than translated Modern Standard Arabic
- Handle text, voice, images and files inside the same conversation
- Trigger business actions and workflows: booking, ordering, record updates, calls to external systems
- Track sentiment, resolution rate, CSAT and agent performance in real time
- Qualify and tag incoming leads automatically
When to use DOO / When not to
A quick filter to help you decide if DOO is the right fit.
When to use DOO
- MENA and Gulf companies handling high volumes of customer contact in Arabic, where dialect and cultural context matter more than literal translation
- Multichannel contact centres that want WhatsApp, Instagram DM, Messenger, voice, email and web chat handled in a single queue
- Regional banks, telecom operators, retailers, hospitality groups, healthcare providers and education institutions, each of which has a dedicated page on the site
- Teams that want to buy without a sales call: the Starter and Business tiers are purchased online and can go live the same day
- Organisations that need AI agents trained on their own knowledge base, procedures and brand tone of voice
When not to use DOO
- Organisations under the GDPR that need a written commitment: the site never mentions the regulation and no data processing agreement is offered
- Buyers who require data residency in the EU or in the Gulf, since the privacy policy states that data is processed and stored in the United States
- Procurement teams that require a named list of sub-processors or a published certification such as SOC 2 or ISO 27001, none of which appear on the site
- Use cases outside Arabic and English, the only two languages the platform documents
- Very small teams and individuals: there is no free plan, entry is 79.99 USD per month after a seven-day trial, and the service is declared to be for professional and organisational use only
How to use DOO
A typical end-to-end flow, from setup to results.
- Pick your entry point: Starter and Business are bought online and can go live the same day, while Enterprise goes through sales for scoping and dedicated onboarding
- Start the seven-day free trial on Starter, with no credit card required, or book a demo through the /book page, which runs on a Cal.com calendar
- Create your account at start.doo.ooo and complete the self-onboarding
- Build your agent: define its personality, tone of voice, interaction style and target dialect
- Delegate: choose the actions and business workflows the agent is allowed to run
- Train: supply your knowledge base, procedures and instructions so the agent answers from your own content
- Connect your channels: WhatsApp, Instagram, Messenger, email, website and in-app chat
- Connect a Google account through OAuth for the Gmail side; business Gmail accounts are the supported case
- For technical integration, use the REST API with a Bearer token and HMAC SHA256-signed webhooks, your HTTPS endpoint acknowledging within five seconds, or embed the widget with the Flutter (pub.dev) or React Native and Expo (@doo-inc/react-native-widget) SDK
- Enhance: review conversations, correct answers and feed the corrections back into the agent; deep system integration and SLAs are reserved for Enterprise
Pros & Cons
Pros
- Arabic dialect depth that is rare in this segment: fourteen dialects claimed and handled natively rather than as translated Modern Standard Arabic
- Public pricing and online purchase without a sales call, which is unusual for a platform sold to banks and telecom operators, plus a seven-day free trial with no credit card
- Substantial, structured legal documents, fifteen sections of terms and thirteen of privacy policy, rather than boilerplate
- Explicit written commitment that Google user data is not used to train generalised models, and explicit customer ownership of customer data in the terms
- Real technical surface, publicly documented: REST API, HMAC-signed webhooks, Flutter and React Native SDKs and a public GitHub organisation
- Named, checkable reference customers such as STC, Batelco, BBK, Alsalam Bank, Albaik and Jahez, and publicly announced backers including Merak Capital, Plus VC, NTDP, Tamkeen and STC InspireU
- Fully bilingual English and Arabic site, legal pages included, with an explicit robots.txt carrying Content-Signal directives (ai-train=no, search=yes, ai-input=yes)
Cons
- No mention of the GDPR anywhere on the site: no data processing agreement, no Article 27 representative, no standard contractual clauses
- Sub-processors are listed by category only, covering hosting, storage, email, payment, security, analytics and support, with no provider named
- No certification is published, neither SOC 2 nor ISO 27001, although the About page displays 'Enterprise-grade security and compliance you can trust', and 'data residency' is claimed in the machine-readable files while the privacy policy states processing and storage in the United States
- No postal address is published anywhere, and a single mailbox, hello@doo.ooo, serves legal, privacy and support; the phone number carries a +1 (363) area code for a company presented as run from Riyadh
- No documented way to exclude customer data from model training, beyond the commitment covering Google data
- The site is entirely JavaScript-rendered, so the terms, privacy policy, pricing and developer pages are not served as HTML; the per-page Markdown exports announced in llms-index.txt all return 404; and /pricing is linked neither from the navigation, nor the footer, nor the sitemap
- Internal inconsistencies in what is published: add-ons at 225 and 400 USD on the pricing cards against 250 and 500 USD in the FAQ of the same page, a founding year of 2023 in the structured data against 2024 in the machine-readable files, two different LinkedIn URLs, and home page impact counters frozen at zero in the served HTML
Pricing & Plans
There is no permanently free plan. The entry point is the Starter tier at 79.99 USD per month (799.99 USD per year), preceded by a seven-day free trial that does not require a credit card. The Business tier is 249.99 USD per month (2,499.99 USD per year) and Enterprise is quoted on request. Annual billing is advertised as saving around 15%. All amounts are in United States dollars: the terms state that fees are stated and payable in United States dollars. Fees are paid in advance, are non-refundable except where the law requires otherwise, and subscriptions may renew automatically. Additional monthly packs of AI responses are sold on top of the tiers, and the pricing page contradicts itself on their price: the pricing cards list 1,000 responses for 50 USD, 5,000 for 225 USD and 10,000 for 400 USD, while the FAQ on that same page quotes 5,000 for 250 USD and 10,000 for 500 USD. Above 10,000 responses, pricing is custom. Confirm the applicable add-on rate before ordering.
- 200 AI responses per month
- up to 3 users
- 1 basic AI agent
- Unified Inbox with unlimited channels
- Campaigns & CX Automation
- Analytics & Pulse. No AI calls and no system integration. Includes the seven-day free trial without a credit card
- 5
- 000 AI responses per month
- up to 10 users
- up to 3 AI agents
- priority support and a higher automation volume. Still no AI calls and no system integration
- custom AI response volume
- unlimited users
- custom AI agents
- AI calls
- system integration
- SLA and compliance commitments
- and dedicated onboarding
- 1
- 000 responses for 50 USD
- 5
- 000 for 225 USD and 10
- 000 for 400 USD on the pricing cards
- although the FAQ on the same page quotes 250 and 500 USD for the two largest packs. Above 10
- 000 responses
- pricing is custom
- Tier changes are possible at any time and take effect at the next billing cycle
Data, GDPR & hosting
A consolidated view of how DOO handles your data.
GDPR overview
There is no mention of the GDPR anywhere on this site: a full-text search of the pages and the JavaScript bundle returns zero occurrences of 'GDPR', 'EEA', 'European', 'Standard Contractual Clauses' or 'Article 27'. This is silence, not a refusal: DOO never states that it is non-compliant, it simply never addresses the regulation. What it publishes instead is a US framework. The terms and the privacy policy both designate the law of the State of Delaware and the exclusive jurisdiction of Delaware courts, and the rights listed (access, correction, deletion, portability, objection or restriction, opt-out of sale, sharing or targeted advertising, withdrawal of consent, appeal, non-discrimination) follow US state privacy laws, introduced by 'Depending on your state or country of residence and subject to applicable law'. No Article 27 EU representative, no DPO, no DPA and no named sub-processor is published; requests go to hello@doo.ooo.
Who owns the data?
Under section 3 of the terms, you keep ownership of everything you or your users submit to or process through the service: messages, files, documents and other content. DOO takes a limited, non-exclusive, worldwide licence to host, process, transmit and reproduce that content, for an enumerated set of purposes only, namely running the service, following your instructions, security, fraud prevention, improving reliability subject to the privacy policy, and legal obligations. You warrant that you hold the rights and consents covering the data you send, and you remain responsible for its accuracy, lawfulness and relevance. Where the data belongs to your own customers, the privacy policy makes you the controller and DOO the processor.
Reuse rights
The answer splits in two. Your own content stays yours: the terms leave ownership of customer data with you, so you may reuse it freely without asking DOO for permission. The platform is the opposite. DOO and its licensors keep every right over the service, including source code, object code, the AI components, the configurations and the associated intellectual property, and the terms transfer no intellectual property right to you beyond a limited, non-exclusive, non-transferable and revocable right to access and use the service. Copying, modifying, distributing, selling, sub-licensing, commercially exploiting or creating derivative works from any part of it requires DOO's prior written agreement, and reverse engineering, decompilation and disassembly are prohibited except where the law overrides that ban. What the AI produces you may use, but with a stated duty of care: section 7 warns that outputs can be incomplete, inaccurate, out of date or unsuitable, and places the burden on you to verify them, keep human oversight, judge whether they fit your purpose and check that they do not infringe third-party rights. Automated output must not be the sole basis for an important legal, financial, employment, regulatory or medical decision, and it is not professional advice. One asymmetry is worth noting: any feedback or suggestion you send DOO can be used by DOO without restriction and without compensation, its only commitment being not to identify you publicly without your permission.
Data retention & training
Hosting summary
Section 9 of the privacy policy states that DOO is based in the United States and that personal information may be processed and stored in the United States and in other countries where DOO or its service providers operate. That is the whole of the jurisdictional disclosure: no cloud provider is named, no region is identified, no data centre is located, and no regional data residency option is documented, despite 'data residency' being claimed in the site's machine-readable files. Governing law and jurisdiction are those of the State of Delaware. On the technical side, the security measures listed are encryption in transit, encryption at rest, role-based access control, least privilege, secure handling of OAuth tokens, logging, vulnerability management and incident response procedures, with the explicit caveat that no system can be guaranteed completely secure. The site itself is served behind Cloudflare (AS13335) on an anycast IP, which says nothing about where customer data is stored. An organisation that needs a specific hosting location or a contractual residency commitment will have to obtain it directly from the vendor.
Things to keep in mind
Risks and trade-offs to weigh before adopting DOO.
- No GDPR reference anywhere on the site: no data processing agreement, no Article 27 EU representative, no standard contractual clauses. A European buyer would have to negotiate every guarantee contractually
- Sub-processors are described by category only, covering hosting, storage, email, payment, security, analytics and support. No provider is named, so the processing chain cannot be audited from public information
- 'Enterprise-grade security and compliance you can trust' appears on the About page with no published certification, neither SOC 2 nor ISO 27001, and sector rules such as SAMA, CBUAE, CBB and HIPAA are cited without any supporting document or attestation
- 'Data residency' is announced in the machine-readable files while the privacy policy states processing and storage in the United States. Ask for a written confirmation of where your data will actually sit
- No postal address is published anywhere on the site, a single mailbox handles legal, privacy and support, and the phone number carries a +1 (363) area code for a company presented as run from Riyadh. The publisher is a Delaware corporation, with Delaware law and Delaware courts, while the commercial offer is entirely MENA
- No opt-out from model training is documented outside the Google case: the written non-training commitment covers Google user data only, and nothing is said about other customer data
- Published information is inconsistent in places: add-on prices differ between the pricing cards (225 and 400 USD) and the FAQ on the same page (250 and 500 USD), the founding year is 2023 in the structured data and 2024 in the machine-readable files, the home page impact counters stay at zero in the served HTML, and the per-page Markdown exports announced in llms-index.txt all return 404
Setup & Integrations
Technical difficulty
Low to start, higher to integrate. On Starter and Business, onboarding is self-service and go-live is announced for the same day: no technical skill is needed to connect channels or link Gmail through OAuth, and training the agent means supplying your knowledge base, brand tone and procedures. Deeper work is gated, since system integration is in neither tier. The technical route needs a developer: a REST API with a Bearer token, HMAC SHA256-signed webhooks your HTTPS endpoint must acknowledge within five seconds, and the Flutter and React Native SDKs. Enterprise adds dedicated onboarding and an SLA.
Deployment
Integrations
Supported languages
Behind DOO
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Is there a free trial?
Is there a permanently free plan?
Do I have to talk to a salesperson to buy, and who can sign up?
Which channels does DOO cover?
Which Arabic dialects are supported?
Is there an API?
Is the service GDPR compliant?
Where is the data hosted?
Is my data used to train the models?
How do I ask for my data to be deleted?
Should you pick DOO?
DOO is a substantial, documented product rather than a thin landing page. Three named products, public pricing, a real REST API with signed webhooks and mobile SDKs, and named reference customers such as STC, Batelco and Jahez all point to a working platform. Its Arabic dialect positioning, fourteen dialects handled natively rather than through translation, is genuinely hard to find elsewhere in this segment, and buying online without a sales call is unusual for a tool sold to banks and telecom operators.
The weakness is easy to state and easy to check. For a European buyer, the compliance apparatus is simply absent: the site never mentions the GDPR, offers no data processing agreement, names no sub-processor, publishes no certification, and its privacy policy states that data is processed and stored in the United States. That silence sits awkwardly next to the marketing language, enterprise-grade security and compliance you can trust on the About page and data residency in the machine-readable files, and next to sector rules such as SAMA, CBUAE, CBB and HIPAA being cited without any supporting attestation.
DOO Inc. is also a young company: a Delaware corporation with operational leadership announced in Riyadh and 1.7 million USD raised. None of that is disqualifying, but it helps explain why the legal and compliance layer is thinner than the product layer.
For a Gulf or wider MENA buyer, the file is coherent and the trial costs nothing to run, seven days on Starter with no card required. For a buyer subject to European data protection law, everything that matters, the processing agreement, the sub-processor list, the hosting location and any exclusion from model training beyond the Google case, will have to be obtained by contract, because none of it is published today.
- Choosing a selection results in a full page refresh.
- Opens in a new window.