Privacy Policy

This policy explains what data we collect and process when you use WhatsApp Araby (waaraby.com), why, who we share it with, how long we keep it and what your rights are. The data controller is LinkMasr. It describes only what the service actually does. The Arabic version governs if the two differ.

Scope of this policy

It covers the website, the dashboard and the API. For your customers' data — the people you message from your number — we process it on your behalf and on your instructions, and you are responsible for informing them and having their consent.

Your account data

• Name, email, mobile number, business name, and the business address and tax number if you enter them.
• Your password, stored with one-way hashing that cannot be reversed, and your two-step verification secret if you turn it on.
• Your preferences: language, theme, timezone and notification settings.
• Your team members, their roles and the numbers each one may use.

WhatsApp data that passes through the service

When you link your number, the data needed to run your chats and campaigns passes through our servers and is kept in your account:

• Incoming and outgoing chat messages and their attachments (images, video, files, voice notes), delivery and read statuses, reactions, edits and deletions.
• Contacts: number, WhatsApp display name, tags, custom fields, notes and unsubscribe status, and missed calls.
• The WhatsApp groups your number belongs to and the Status posts you publish from the service.
• The session data needed to keep the linked device connected, kept on our own gateway server.

We do not read your chats or use them for anything other than providing the service to you, except when you ask for support, to investigate abuse, or when the law requires it.

Usage and security data

We record IP address, browser type, sign-in times, active sessions, the activity log inside the account (who did what and when) and the daily message count per number, to protect accounts, apply the safety limits and prevent abuse.

The AI assistant

If you turn on the AI assistant, we send the customer's message, the business information you wrote and the last messages of the chat to an AI provider we choose (such as Google Gemini, OpenAI or Anthropic), only to write the reply; the provider processes them under its API terms. We do not send it your account data or your customers' numbers.

Payment data

We keep subscription orders, invoices and the payment receipts you upload (bank transfer, InstaPay or mobile wallet). We do not collect or store card numbers.

Website forms and contact

When you write to us through the contact form, we keep your name, email, number and message to reply. Lead forms you create for your business keep the data of the people who fill them in your own account.

Why we use the data

• To provide the service: send and receive your messages, show them to your team, run campaigns and automation.
• To confirm your identity, protect your account and prevent fraud and spam.
• Billing, renewal reminders and service notifications.
• Support, improving the service and fixing faults.
• Complying with the law and answering competent authorities.

Legal basis for processing

We process data to perform our contract with you, for our legitimate interest in securing the service and preventing abuse, for our legal obligations, and with your consent where consent is required, under Egypt's Personal Data Protection Law No. 151 of 2020.

Who we share data with

We do not sell personal data or share it for advertising. We share it only with:

• WhatsApp, because your messages are sent and received over its network through the linked device.
• Our server hosting provider (Hostinger); the servers are in Germany.
• The AI provider, when you turn on the AI assistant, as described above.
• Google reCAPTCHA, to protect the sign-up, sign-in and contact forms from bots, under Google's privacy policy: https://policies.google.com/privacy
• The addresses you add yourself for webhooks or integrations such as n8n, Make and Zapier.
• Competent authorities where the law requires it.

Transfers outside Egypt

Our servers are in Germany, and some of the providers above may be in other countries. We transfer data only as far as needed to provide the service, and only to providers committed to protecting it.

Protecting your data

The connection to the site is encrypted (HTTPS); passwords and API keys are stored with one-way hashing; gateway credentials and webhook secrets are encrypted in the database. Each account's data is isolated from every other account, and team members reach only what their role allows. No protection is perfect, but we keep reviewing our measures.

How long we keep data

• We keep your account data and its chats for as long as the account exists.
• When you delete your account, its data is deleted after a 7-day period during which you can change your mind, and backup copies are overwritten within 30 days.
• Technical server logs are deleted automatically after 14 days.
• We keep invoices and payment records as long as accounting and tax law requires.

Cookies

We use essential cookies only: the session cookie for signing in, the anti-forgery cookie, and remembering your choice on the cookie notice. Your browser also stores your theme choice. We use no advertising trackers and no third-party analytics. reCAPTCHA sets its own cookies when you use a protected form.

Your rights

You have the right to access, correct and delete your data, to object to its processing and to receive a copy of it. You can edit your details in the settings, export contacts, chats and campaigns, and delete your account. For any other request write to us; we may ask you to confirm your identity first, and we reply within 30 days.

Children

The service is for businesses and people aged 18 or over, and we do not knowingly collect children's data.

Messages and notifications

We send you messages the service needs: confirmation codes, security alerts, invoices and renewal reminders, and alerts when your number disconnects. You choose in the settings which notifications you get and through which channel. We send no marketing messages without your consent.

Changes to this policy

We may update this policy and will tell you about material changes before they take effect, by email or in the dashboard. The date of the last update appears at the top of the page.

Privacy contact

For any question or request about your data, write to info@waaraby.com.