Privacy Policy

1. Who we are

Sanad AI is a SaaS platform for WhatsApp Business conversation management and AI-assisted replies. Website: https://sanad-ai.dev — Contact: [email protected].

2. Data we collect

Account and company data: name, email, company name, team settings, and UI/language preferences.

Usage and operations data: login events, in-app activity logs, and channel, automation, and knowledge-base settings needed to run the Service.

Conversation content: WhatsApp messages, media, and related metadata that pass through the platform to provide the inbox, automation, and support.

Billing data: subscription and payment status. Card details are typically processed directly by the payment provider (which may act as Merchant of Record); we do not store full card numbers on our servers.

Basic technical data: approximate IP address, browser type, and session identifiers needed for security and site operation.

3. Purposes of processing

Providing the Service and operating accounts and subscriptions.

Processing WhatsApp messages and AI-assisted replies according to your settings.

Customer support, security, and abuse/fraud prevention.

Billing and operational communications about your account or material Service updates.

Improving product quality in aggregated or de-identified form where practicable.

4. Third parties and processors

We may rely on providers for infrastructure and databases (such as Supabase), AI model providers, payment providers that may act as Merchant of Record, and other operational tools.

These providers are expected to process data under appropriate terms and only as needed to operate the Service, within reasonable limits.

5. Retention

We retain account and operational data while the account is active and as needed for legal obligations, dispute resolution, or security.

After account termination or a reasonable deletion request, we delete or de-identify personal data within a reasonable period, except where retention is legally required or needed for limited security purposes.

6. Your rights

You may request access to, correction of, or deletion of your personal data, or ask about our processing practices, by emailing [email protected] from the account email.

We may verify identity before fulfilling requests to protect accounts from unauthorized access.

7. Cookies

We use essential cookies and local storage for sessions, authentication, and UI preferences (such as language and theme). Third-party advertising trackers are not a core part of the product.

8. Security

We apply reasonable technical and organizational measures to protect data, including access controls and encryption in transit where applicable. No electronic transmission or storage method is 100% secure.

9. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children under the applicable age for commercial use.

10. Updates and contact

We may update this Policy from time to time. The last-updated date appears at the top of this page. Contact: [email protected].