Privacy Policy

This policy explains how Nebucode Company (شركة نيبوكود), unified national number 7054053207, Kingdom of Saudi Arabia ("Nebucode", "we"), collects, uses and protects personal data when you use our website, products and services, including the Nebucode messaging platform for WhatsApp Business (the "Platform").

We process data in accordance with the Saudi Personal Data Protection Law and its implementing regulations.

1. Data we collect

Subscribing businesses:

• Business name, and the names, email addresses and mobile numbers of its users.
• Subscription and billing data. We do not store card numbers; payments are processed by licensed payment gateways.
• Identifiers provided by Meta when a WhatsApp Business account is connected, such as the account ID, phone number ID and access token.

Customers of subscribing businesses: when a business uses the Platform, we process on its behalf phone numbers, names, the content of incoming and outgoing messages, media, and delivery and read statuses, solely to provide the service.

Technical data: IP address, browser and device type, and usage and error logs, for security and service improvement.

2. How we use data

• Running the Platform: sending and receiving messages, showing conversations, and managing templates and campaigns.
• Managing accounts, subscriptions, invoices and technical support.
• Protecting the service, preventing abuse and spam, and complying with WhatsApp Business policies.
• Meeting legal requirements in the Kingdom of Saudi Arabia.

We do not sell personal data, and we do not use businesses' message content for advertising.

3. Our role for customer data

The subscribing business is the controller of its customers' data and message content, and Nebucode acts as a processor on its behalf and under its instructions. The business must obtain its customers' consent before messaging them and must honour opt-out requests.

4. Sharing data

We share data only as far as necessary with:

• Meta and WhatsApp: to send and receive messages through the WhatsApp Business Platform, subject to Meta's terms and policies.
• Hosting providers whose servers run the Platform.
• Licensed payment gateways for subscription payments.
• Government authorities when a binding legal request is received.

5. Data we receive from Meta

When a WhatsApp Business account is connected through Facebook Login, we receive only the permissions needed to manage that WhatsApp Business account and to send and receive messages, and we use them solely to provide the Platform to the business that granted them. The business can revoke this access at any time from its Meta business portfolio settings.

6. Retention

• Account data is kept for the duration of the subscription.
• Conversations and message logs are kept for the duration of the subscription, or for the period the business sets in its settings.
• When a subscription ends or deletion is requested, we delete the data within 30 days, except records we are legally required to keep, such as financial records.

See Data deletion for how to request deletion.

7. Security

We use encrypted connections (HTTPS), encrypt stored access tokens, restrict data access to authorised staff, and take regular backups.

8. Your rights

You may request access to your data, a copy of it, its correction or its deletion, and you may withdraw consent at any time. If you are a customer of a business using the Platform, you can contact that business directly or contact us and we will forward your request.

9. Cookies

We use only essential cookies for signing in and keeping your session.

10. Changes to this policy

We may update this policy and will publish the new version on this page with its update date.

11. Contact