Privacy Policy

This Policy explains how Darb Al-Awael Est ("we" or "us") processes information through Al-Awael, a service that connects WhatsApp Business accounts to business software and enables messaging through Meta's official APIs.

1. Scope and roles

This Policy covers our WhatsApp Business integration service, business account administrators, and people communicating with connected businesses. A business you message may determine the purposes and retention of messages in its own systems. Where applicable, we process such information to provide services to that business under relevant instructions and contractual terms.

2. Information we may process

• Business account details, phone numbers, WhatsApp Business Account (WABA) identifiers, and phone number identifiers.
• Sender and recipient phone numbers, available profile names, message IDs, timestamps, delivery/read statuses, and errors.
• Message text, media, and attachments when required for messaging, reception, or archiving functions enabled by a business.
• Operational and technical information necessary for service delivery, security, and troubleshooting, such as request logs and transaction identifiers.
• Contact information provided by business administrators for account connection and support.

3. Purposes of processing

• Connecting WhatsApp Business accounts, sending and receiving messages, and displaying message statuses in integrated systems.
• Providing business-requested communication workflows and operational notifications.
• Maintaining service availability, validating requests, protecting systems, and resolving support requests.
• Meeting applicable legal and contractual obligations.

Applicable legal grounds depend on context, our role, and local law, including service performance and consent where legally required.

4. Sharing and third parties

Information may pass through Meta and the WhatsApp Business Platform as necessary for the messaging service. Infrastructure, hosting, and technical service providers may also process information as necessary to operate the service under appropriate safeguards. Cross-border processing may occur depending on the locations of these services and connected business systems, subject to applicable legal requirements.

We do not sell personal messaging data for advertising purposes.

5. Retention

We retain information only as needed to deliver agreed functionality, investigate technical issues, and meet applicable legal or contractual obligations. Retention varies by data category, business account settings, and mandatory requirements. Backups may follow separate deletion cycles. This Policy does not imply indefinite storage of all messages.

6. Security

We seek to use safeguards appropriate to the nature of the data, including HTTPS transport, controlled access, and review of permissions and operational logs. No service can guarantee absolute security.

7. Your rights and deletion requests

Subject to applicable law and our role, you may ask about, access, correct, or request deletion of your personal information. Contact the address below and provide enough information to identify the relevant account or conversation. Do not send passwords or access tokens. We may need to verify your authority to make the request.

Where the business you contacted controls the information, we may refer your request to that business or assist it. Deleting information from our systems does not automatically delete information held independently by Meta, the connected business, or other parties. See our Data Deletion Instructions.

8. Changes and contact

We may update this Policy as our service or legal requirements change. Updates will be posted on this page with a revised date.