Privacy Policy
Last updated: 28 September 2026
At ArabyBot we take your privacy extremely seriously. This policy explains what data we collect, why we collect it, and how we protect it. By using ArabyBot you agree to this policy.
1. Data we collect
- Account data (name, email, phone, company).
- Payment data (handled by gateway — we don't store cards).
- Conversation content you choose to send via our platform.
- Operational logs (IP, browser, session times) for security and diagnostics.
2. How we use data
- Operating our services and sending messages on your behalf.
- Billing and support.
- Improving the platform (aggregated, anonymized).
- Legal compliance when required.
3. Data sharing
We never sell your data. We only share with: (a) trusted service providers (Meta, AWS, Cloudflare) bound by DPAs, (b) authorities under valid legal process.
4. Data retention
We retain your data for the lifetime of your account + 90 days post-cancellation. Request immediate deletion at [email protected].
5. Your rights (GDPR and the Saudi PDPL)
You have the right to access your data, correct it, delete it, take it elsewhere, object to its processing, and withdraw consent at any time. The Saudi Personal Data Protection Law (PDPL) grants the same rights alongside GDPR, and we handle them identically whatever your country. Contact us to exercise any right and we respond within thirty days. What PDPL means for your own store is here.
6. Security
TLS 1.3 on every connection, per-tenant isolation at the account and channel level, and a nightly backup with an automated restore check — a backup that has not been restored is not a backup. On storage we are precise: the database sits on our own servers behind restricted access, and channel access tokens are stored in the clear today, with the tooling to encrypt them built and not yet switched on. The detail is on the security page.
7. Contact
Privacy questions? Write to [email protected].