Privacy Policy

Legal Entity

Alrawabit for Information Technology

Platform

AI Rawabit

Country

Kingdom of Saudi Arabia

Website

www.alrawabit.sa

Privacy Contact

info@alrawabit.sa

Support Contact

support@alrawabit.sa

This Policy applies to website visitors, customers, authorized staff users, resellers and individuals whose information is processed through a customer's use of the Services.

Where a customer uses AI Rawabit to process information about its own customers, leads, employees or other individuals, the customer generally determines the purposes and means of that processing and may act as the relevant data controller. AI Rawabit may process such information on the customer's behalf as a processor/service provider, subject to the applicable contract, instructions and law.

The parties' roles may vary depending on the processing activity. A separate Data Processing Agreement (DPA) may apply where appropriate.

3.1 Account Information

• Name
• Business name
• Email address
• Telephone/mobile number
• Username and authentication information
• Job title
• Billing information
• Account type and reseller information

3.2 Business Information

• Company and business contact information
• Subscription plan
• Billing status
• Credit balance
• Transaction information
• Account configuration and onboarding information

3.3 Contact and CRM Data

• Names
• Telephone and WhatsApp numbers
• Email addresses
• Company information
• Tags and notes
• Campaign information
• Interaction history
• Lead information and other data entered by the customer

3.4 WhatsApp and Instagram Information

• Account identifiers
• Contact identifiers
• Message metadata
• Message status and timestamps
• Campaign and delivery information
• Interaction information
• Other information made available through applicable third-party APIs

3.5 Usage and Technical Information

• IP address
• Browser and operating system
• Device information
• Login and session information
• Application activity
• Error and security logs
• Performance information

3.6 Payment Information

Payment transactions may be processed through third-party payment providers such as HyperPay. We may receive transaction identifiers, payment status, amount, currency, billing and subscription information and other limited payment-related information. We do not intend to store complete payment-card numbers where payment processing is handled by an authorized third-party provider.

• Directly from you
• When you create or manage an account
• When you contact us or request a demonstration
• When you subscribe to Services
• When you connect third-party accounts
• Through use of the platform
• From your organization or authorized reseller
• Through cookies and similar technologies
• From permitted third-party services

• Delivering and operating Services
• Managing accounts, subscriptions, credits and billing
• Processing WhatsApp and Instagram integrations
• Managing contacts, campaigns and CRM functions
• Providing customer and technical support
• Authentication, security, fraud prevention and abuse detection
• Analytics, troubleshooting and service improvement
• Legal and regulatory compliance
• Service and security communications

Where required by applicable law, personal data will be processed on an appropriate lawful basis. Depending on the circumstances, this may include consent, performance of a contract, compliance with a legal obligation, legitimate interests where legally permitted, or another lawful basis recognized under Saudi law.

Where consent is relied upon, it will be obtained and managed in accordance with applicable requirements. Customers remain responsible for establishing the appropriate lawful basis for personal data they upload or process through the Services.

AI Rawabit is committed to handling personal data in accordance with applicable requirements of the Saudi PDPL and its Implementing Regulations. We apply privacy and security controls appropriate to the nature, scope and risk of the processing.

• Purpose limitation and lawful processing
• Data minimization and collection of information reasonably necessary for the Services
• Reasonable accuracy and updating of personal data where applicable
• Appropriate technical and organizational security measures
• Procedures for handling applicable data-subject requests
• Retention and secure deletion practices based on business, contractual, security and legal requirements
• Incident assessment and notification procedures where notification is required by applicable law
• Appropriate safeguards for permitted transfers or disclosures outside the Kingdom

Where AI Rawabit processes customer data on behalf of a customer, the customer is responsible for its controller-level obligations, including appropriate notices, lawful basis, consent where required and responding to requests relating to data under its control. AI Rawabit will provide reasonable assistance where required by the applicable agreement and law.

Customers are responsible for ensuring the necessary legal basis and permissions to collect and process personal data uploaded to AI Rawabit, including contact, lead, employee and customer information.

Customers are responsible for notices, consent where required, marketing compliance, lawful use, data accuracy, appropriate access controls and responding to relevant data-subject requests.

AI Rawabit integrates with third-party platforms including WhatsApp and Instagram. Use of those services is also subject to applicable third-party terms and policies. AI Rawabit does not control third-party pricing, approvals, availability, restrictions or decisions. Where applicable, AI Rawabit operates as a technology provider and does not itself rebill or resell Meta message charges to customers.

AI Rawabit may provide or introduce AI-powered features such as AI agents, automated responses, lead qualification, lead conversion, analytics or AI-assisted workflows. Where AI functionality is enabled, customers remain responsible for the data they submit and should review AI-generated output where appropriate.

AI output may not always be accurate and may involve approved third-party AI service providers. Where an AI feature involves processing personal data or automated decision-making that is subject to specific legal requirements, AI Rawabit will apply applicable privacy and transparency requirements.

AI Rawabit may use cookies and similar technologies for authentication, security, preferences, analytics, website functionality and performance. Where required, appropriate consent will be obtained for non-essential cookies.

• Service providers supporting cloud infrastructure, hosting, security, analytics, communications, payments, authentication and other technical services
• Third-party integrations selected or enabled by the customer
• Governmental, regulatory or judicial authorities where required or permitted by law
• Parties involved in a lawful corporate transaction, subject to applicable law

We do not sell customers' personal data as a commercial product. Subprocessors and service providers will be selected and managed according to applicable contractual, security and privacy requirements.

Some service providers or infrastructure used by AI Rawabit may be located outside Saudi Arabia. Where personal data is transferred, disclosed or made accessible outside the Kingdom, AI Rawabit will apply the requirements, safeguards and conditions applicable under the PDPL, its Implementing Regulations and applicable rules governing transfers outside Saudi Arabia.

Where required, appropriate contractual, technical, organizational or other safeguards will be implemented.

AI Rawabit implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. Depending on the service and risk, measures may include access controls, authentication, encryption where appropriate, security logging, monitoring, backups, secure infrastructure, restricted administrative access and incident-management procedures.

We regularly review security measures in light of operational, technical and risk considerations and may update controls as the Services evolve.

No online service or method of electronic transmission can be guaranteed to be completely secure. However, AI Rawabit is committed to maintaining reasonable safeguards appropriate to the Services and applicable legal requirements.

If AI Rawabit becomes aware of a personal-data breach, we will assess and respond through our incident-management procedures. Where notification to a competent authority or affected individuals is legally required, we will make such notification within the applicable statutory timeframes and provide information required by law.

Where AI Rawabit acts as a processor for a customer, we will notify and reasonably assist the customer in accordance with the applicable agreement and legal requirements.

AI Rawabit retains personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by applicable law, contractual obligations, security requirements or legitimate dispute/legal needs.

For customer accounts, the intended platform policy is to retain customer data for up to 90 days after account closure before permanent deletion, subject to applicable legal requirements, contractual obligations, security requirements, backups, disputes and lawful retention obligations.

Where backups are retained for continuity or security purposes, deletion from active systems may occur before deletion from backup systems, subject to applicable retention controls.

• Right to be informed about processing
• Right to access personal data, where applicable
• Right to request correction, completion or updating
• Right to request destruction where applicable
• Right to withdraw consent where processing is based on consent
• Other rights available under applicable Saudi law

These rights may be subject to lawful limitations or exceptions. Requests will be handled in accordance with applicable requirements.

Requests may be submitted to info@alrawabit.sa. Please provide your name, contact details, nature of the request, relevant account information and information reasonably necessary to verify identity.

Where data is controlled by a AI Rawabit customer, the request may need to be submitted to that customer. AI Rawabit will reasonably assist customers with requests concerning data processed on their behalf where required by contract and applicable law.

AI Rawabit is intended primarily for businesses and professional users and is not intentionally directed at children.

The AI Rawabit website may contain links to third-party websites. We are not responsible for their privacy practices, content or security.

We may update this Privacy Policy from time to time. Material changes may be communicated through the website, platform, email or other appropriate means.

• Alrawabit for Information Technology
• Kingdom of Saudi Arabia
• Privacy: info@alrawabit.sa
• Support: support@alrawabit.sa
• Website: www.alrawabit.sa