Privacy Policy

Rouaa Whats respects the privacy of its users and is committed to protecting personal data processed through its website, mobile applications, web platform, APIs, and related integration services.

This Privacy Policy explains the types of information we may collect or process, how we use, protect, share, retain, and delete such information, and the choices and rights available to users.

We process personal data in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its applicable regulations, where relevant to our services.

2. Scope

This Privacy Policy applies to Rouaa Whats services, including:

Rouaa Whats Android application.
Rouaa Whats iOS application.
Rouaa Whats web platform.
WhatsApp Business Platform services provided through our platform.
APIs, webhooks, and related integrations.
Conversation, campaign, template, and contact management services.
3. Information We May Collect or Process

Depending on how you use our services and the features enabled, we may collect or process:

Account Information: Name, phone number, email address, organization information, authorized users, and authentication and login information.

Contact Information: Names, phone numbers, and other contact information that customers add, import, or use through the platform.

Conversation Data: Incoming and outgoing messages and related information, including delivery and read status, timestamps, and message identifiers.

Files and Content: Images, documents, audio, video, and other files sent or received through supported services.

WhatsApp Business Data: WhatsApp Business numbers, templates, conversation information, webhook events, message IDs, message status, and other information necessary to operate the integration.

Technical Information: IP address, device type, operating system, application version, login logs, error logs, security events, and usage information necessary to operate, secure, and improve the service.

The mobile application accesses device data or permissions only where necessary to provide a feature used by the user and subject to permissions granted through the device operating system.

4. How We Use Information

We may use information to:

Create and manage user accounts.
Operate Rouaa Whats services.
Send, receive, and manage WhatsApp Business conversations.
Manage contacts, templates, and campaigns.
Deliver service and conversation notifications.
Provide APIs, webhooks, and customer system integrations.
Provide technical support.
Improve platform performance and reliability.
Detect and prevent unauthorized access, fraud, abuse, and security threats.
Maintain security and audit logs and troubleshoot technical issues.
Meet applicable legal and regulatory obligations.

We do not use personal data for purposes materially incompatible with those disclosed in this Privacy Policy without an appropriate legal basis.

5. Customer Data

Rouaa Whats enables organizations to communicate with their customers using the WhatsApp Business Platform.

When an organization uploads, stores, sends, or receives its customers’ information through Rouaa Whats, that organization is responsible for ensuring that it has an appropriate legal basis for processing the information and for obtaining any required consent for communications.

Rouaa Whats processes such information as necessary to provide the contracted services, according to the customer’s lawful instructions and applicable requirements.

6. WhatsApp and Meta

Certain Rouaa Whats functionality relies on the WhatsApp Business Platform and related services.

Accordingly, certain information may be processed by Meta and WhatsApp as necessary to provide WhatsApp Business services and in accordance with the terms and policies applicable to those services.

Customers using Rouaa Whats remain responsible for complying with applicable WhatsApp Business requirements and policies, including requirements relating to opt-in, templates, and marketing communications.

7. Sharing of Information

Rouaa Whats does not sell users’ personal data.

Information may be shared or processed, where necessary, with:

Hosting, infrastructure, and technical service providers.
WhatsApp and Meta when using WhatsApp Business Platform services.
Notification, email, or other technical service providers used by the application, where applicable.
Government, regulatory, judicial, or law-enforcement authorities where disclosure is required by applicable law.

We limit data sharing to what is reasonably necessary for the relevant service and applicable legal requirements.

8. Data Security

We implement appropriate technical and organizational measures designed to protect information against unauthorized access, use, disclosure, alteration, loss, or destruction.

Such measures may include:

Encryption of data in transit using secure communications.
Access controls and authorization management.
Authentication and account security controls.
Security logging and monitoring.
Vulnerability and security update management.
Backup and service-continuity controls.
Need-to-know restrictions on access to information.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Mobile Application Permissions

The application may request device permissions where necessary to provide specific functionality, such as access to the camera, photos/files, or notifications, depending on the features used and the application version.

Permissions are requested through the device operating system and may be managed or revoked through the user’s device settings.

This section must be updated to exactly match the permissions and data actually accessed by the current Android and iOS applications.

10. Notifications

The application may use push notifications to inform users of new messages, conversation updates, and account or service-related alerts.

Users may manage notification permissions through their device settings.

11. Data Retention

We retain personal data only for as long as reasonably necessary to provide our services, fulfill the purposes described in this Privacy Policy, or meet applicable legal and contractual requirements.

Retention periods may vary depending on the type of information, service, and customer agreement.

When information is no longer required, it is deleted, securely disposed of, or anonymized in accordance with our applicable procedures, unless retention is required by law.

12. Account and Data Deletion

Users may request deletion of their account and associated data through:

[Insert Account Deletion URL]

or by contacting:

[privacy@your-domain.com]

After receiving a request and verifying the account holder where appropriate, we will process the deletion request in accordance with applicable legal and contractual requirements.

Certain information may be retained where necessary to comply with legal obligations, protect legal rights, prevent fraud or abuse, or satisfy legitimate security requirements.

13. Your Privacy Rights

Subject to applicable law and the circumstances of the processing, individuals may have rights regarding their personal data, including:

The right to be informed about the processing of their personal data.
The right to access their personal data.
The right to obtain a copy of their personal data, subject to applicable requirements.
The right to request correction or completion of inaccurate information.
The right to request destruction or deletion of personal data where applicable.
The right to withdraw consent where consent is the applicable legal basis, subject to applicable requirements.

Requests may be submitted using the contact information provided below.

14. International Data Transfers

Where the nature of the service requires personal data to be transferred or processed outside the Kingdom of Saudi Arabia, such transfers will be handled in accordance with applicable laws and requirements governing cross-border transfers of personal data.

15. Children’s Privacy

Rouaa Whats is a business-oriented platform and is not intended for use by children.

We do not knowingly target children for direct account registration.

Where a customer uses the platform to process information relating to children, that customer is responsible for ensuring an appropriate legal basis and obtaining any required authorization or consent.

16. Third-Party Services and Links

Rouaa Whats may integrate with or link to third-party services. Information processed directly by those services may be subject to the privacy policies and terms of the relevant third-party providers.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, applicable laws, or operational practices.

When changes are made, the updated version will be published on this page and the Last Updated date will be revised.

18. Contact Us

For privacy or personal-data inquiries and requests, please contact:

Rouaa
Riyadh, Kingdom of Saudi Arabia
Privacy Email: info@rouaa-sa.com
Website: https://rouaa-sa.com