Privacy Policy

Sehaby is a platform for managing customer conversations on WhatsApp, owned and operated by شركة شامخات القابضة in the Kingdom of Saudi Arabia (“we”, “us”).

This policy covers the sehaby.com website, the Sehaby dashboard and the related services we provide to our subscribers.

For our subscribers' account data and for visitors to our website, we decide how the data is used. For the data of our subscribers' own customers, such as contacts and message content, we process it on behalf of the subscriber and according to their instructions. In that case the subscriber is responsible for it.

Depending on how you use Sehaby, we collect:

• Account data: your name, email address, mobile number, business name, city and industry, plus the names, emails and roles of team members you invite.
• Sign-in data: your password is stored in a protected, non-readable form. We never store it in plain text.
• Subscription data: your plan, billing cycle, invoices and payment status. Card details are entered on the payment gateway's page and are not stored by us.
• WhatsApp connection data: identifiers for your business portfolio, WhatsApp Business account and phone number, your display name, and the access permissions you grant through Meta's official window.
• Usage and technical data: IP address, browser and device type, pages visited, actions in the dashboard and timestamps, used for security and troubleshooting.
• Messages you send us: what you write in the contact form or in support emails.

When a subscriber uses Sehaby to talk to their customers, we process on the subscriber's behalf:

• Customer contact details: name, phone number, tags, attributes and marketing consent status.
• Message content and media, templates sent, delivery and read statuses, and conversation details.
• Answers collected by automated flows and saved to the customer profile, and deals in the sales pipeline.

The subscriber decides what data to collect and must have a valid basis for it, including the customer's consent to receive messages. If you are a customer of a business that uses Sehaby, please contact that business first about your data. We will help them respond.

• To provide and operate the platform, including sending and receiving WhatsApp messages for our subscribers.
• To create and manage accounts, subscriptions, invoices and renewals.
• To answer support requests and messages sent through the contact form.
• To keep the service secure, prevent misuse and investigate technical issues.
• To improve the platform using aggregated statistics that do not identify individuals.
• To send service notices about your account. We send marketing emails only with your consent, and you can unsubscribe at any time.
• To meet our legal obligations.

We do not sell personal data. We do not use our subscribers' message content for advertising, and we do not use it to train artificial intelligence models.

If a subscriber turns on the AI assistant, the relevant messages of a conversation and the business information written by the subscriber are sent to an AI service provider to generate a reply. The provider processes this data on our behalf under a contract, only to produce the reply, and may not use it to train its models.

Subscribers can turn the AI assistant off at any time. Every AI reply is visible in the conversation history.

We share data only as needed to provide the service, with:

• Meta, through the WhatsApp Business Platform, to deliver and receive messages. Meta processes message data under its own terms and policies.
• Hosting and infrastructure providers that store and run the platform, its databases and its files.
• A licensed payment gateway in Saudi Arabia that processes subscription payments.
• An AI service provider, only when the subscriber turns on the AI assistant.
• Email service providers that deliver service and account messages.
• Government authorities, when the law requires it.

All of our providers are bound by agreements that limit their use of the data to the service they provide to us.

Some of our providers, including Meta and our hosting providers, may store or process data outside the Kingdom of Saudi Arabia. When this happens, we take the measures required by the applicable laws, including the Personal Data Protection Law and its implementing regulations, to keep the data protected.

• Account and subscriber data: for as long as the account is active.
• After a workspace is deleted: we delete its data within 30 days, except records we must keep by law.
• Invoices and payment records: for the period required by the applicable commercial and tax regulations. When a workspace is deleted they stay as our financial record with the workspace name and the invoice details only, without its contacts, conversations or team.
• Security logs: for a limited period, then deleted.
• Backups: deleted data leaves our backups on their regular rotation and is not used in the meantime.

• Encrypted connections for all traffic between you and the platform.
• Encryption of stored access permissions for connected WhatsApp accounts.
• API keys that are never stored in their original form and can be revoked at any time.
• Role-based access, so each team member sees only what their role allows.
• Signed webhooks, so your systems can verify that a request came from us.
• Logs of important actions for review and audit.

No method of transmission or storage is completely secure. If a breach affects your personal data, we will notify you and the competent authorities as required by law.

Under the Personal Data Protection Law in the Kingdom of Saudi Arabia, you have the right to:

• Know how your personal data is collected and used.
• Access your personal data and receive a copy of it.
• Correct inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed.
• Withdraw your consent at any time, where processing is based on consent.

To use any of these rights, email us at info@sehaby.com. We respond within 30 days and may ask you to confirm your identity first.

We use essential cookies and local browser storage to keep you signed in and to remember your language and appearance preferences. We do not use advertising cookies. If we add analytics tools in the future, we will update this policy first.

Sehaby is a service for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. The date at the top of the page shows the latest version. If we make significant changes, we will notify subscribers by email or in the dashboard before they take effect.

For any question about this policy or your personal data, email us at info@sehaby.com. Sehaby is owned and operated by شركة شامخات القابضة, Kingdom of Saudi Arabia.