Privacy Policy

1. Who we are

The Sanad AI platform at https://sanad-ai.dev is operated by شركة سيلاكود لتقنية المعلومات (selacode Company For Information Technology), commercial registration 7055302587. It provides WhatsApp Business conversation management and AI-assisted replies. Contact: [email protected] — phone: +966545173666.

For account data of a business signed up to Sanad (such as the admin name, email, and team settings), we decide the purposes of that processing.

For that business’s WhatsApp customer messages, the business is the controller and Sanad processes them only to run the inbox, replies, and automation according to the business’s settings.

2. Data we collect

Account and company data: name, email, company name, team settings, and language and interface preferences.

Usage data: login events, in-app activity, and the channel, automation, and knowledge-base settings needed to run the Service.

WhatsApp data received through Meta’s WhatsApp Business Platform: the customer phone number, display name, message text, media, delivery and read status, and the WhatsApp business account and phone-number identifiers needed to connect, send, and receive.

When a WhatsApp channel is connected, we store the access tokens and account identifiers Meta issues so the channel can operate. We do not ask for or read a Facebook password.

Billing data: subscription and payment status. Card details are processed by the payment provider, which may act as merchant of record. We do not store full card numbers on our servers.

Basic technical data: approximate IP address, browser type, and session identifiers needed for security and to operate the site.

3. Purposes of processing

Providing the Service, accounts, subscriptions, and the inbox.

Sending and receiving WhatsApp messages, managing templates, and generating AI-assisted replies when the business turns that on.

Support, security, and prevention of abuse and unsolicited messages.

Billing and operational messages about the account or material changes to the Service.

We do not sell personal data, and we do not use WhatsApp conversation content to show ads or to build advertising audiences on Meta or Facebook.

4. WhatsApp and Meta

Messages are carried on Meta’s WhatsApp Business Platform. Delivery and the WhatsApp number operate under Meta’s terms and the WhatsApp Business Policy. Meta processes messaging data as the provider of that channel.

We use WhatsApp data only to provide the Service to the business that connected the number. We do not share conversation content with other companies for use in their products.

If automated replies are enabled, the message text needed to generate a reply may be sent to an AI model provider for that purpose only.

5. Other processors

We may use providers for infrastructure and databases, AI models, payments, and other tools required to operate the Service.

Those providers may process data only to operate the Service, under appropriate obligations, and in the countries where they operate.

6. Retention

We keep account and operational data while the account is active, and as needed for legal duties, disputes, or security.

WhatsApp conversation content stays available to the business in its account during the subscription. After the account ends, or after a verified deletion request, we delete or de-identify it within thirty days, except where the law or a limited security need requires us to keep it.

7. How to request deletion

To delete a Sanad account: email [email protected] from the account email with the subject “Data deletion request”, and include the company name and account email.

We confirm the request comes from the account holder, then delete or de-identify the account and its personal data within thirty days, keeping only what a legal duty or an open dispute requires.

If you are a person who was messaged on WhatsApp by a business using Sanad, send the deletion request to that business. The business can delete the conversation in the inbox, or ask us to do so at [email protected].

8. Your rights

You may request access, correction, or deletion, or ask how your data is processed, by emailing [email protected] from the account email.

We may ask for proof that the request comes from the account holder before we act on it.

9. Cookies

We use cookies and local storage to run the session, sign-in, and interface preferences such as language and theme. Meta advertising pixels are not part of the product.

10. Security

We use access controls and encryption in transit where it applies. No method of electronic transmission or storage is completely secure.

11. Children

The Service is for businesses and is not directed at children. We do not knowingly collect data from anyone under the age required to contract for a business service.

12. Updates

We may update this policy. The latest date appears at the top of the page. Contact: [email protected].