Privacy Policy

1. What we collect

When you use Mujibak we collect only what the service needs to function:

• Account data: your name, email, business name, hashed password, and locale.
• Connection metadata: which WhatsApp number is linked and when; credentials are stored encrypted at rest.
• Conversation content: inbound customer messages and outbound replies, so the bot can maintain context and you can review history.
• Usage: timestamps, message counts, reply latency, and similar metrics used for billing and operating the platform.

2. How we use it

We use the data only to: (a) provide the service itself, (b) generate billing invoices and enforce plan limits, (c) investigate abuse and resolve support issues, and (d) improve the product in aggregate. We do not sell your data, and we do not use customer conversation content to train models outside your own tenant.

3. Subprocessors we rely on

The service depends on a small set of vetted providers:

• Meta WhatsApp Business Platform — to send and receive messages on the numbers you connect.
• OpenAI — for reply generation. Conversation snippets are sent to generate each reply; OpenAI's API policy prohibits training on this content.
• Moyasar — for payment processing. We never see or store your card details; Moyasar is a licensed payment provider.

4. Retention

Conversation history is retained for as long as your account is active so you can review it from the inbox. On account deletion we remove conversation content within 30 days. Billing and audit records may be retained longer when required by Saudi law.

5. Security

Secrets (access tokens, API keys, passwords) are encrypted at rest. We use TLS in transit, scoped access tokens for staff, and audit logs for administrative actions. No system is perfectly secure — if we discover a breach that affects you, we will notify you promptly as required by law.

6. Your rights

You can, at any time:

• Access or export your data from the dashboard.
• Correct inaccurate profile data from the Profile page.
• Request deletion of your account and associated data by emailing us.

7. Cookies

We use strictly necessary cookies only — to keep you signed in and remember your language choice. We do not use third-party advertising or analytics cookies on the marketing site or inside the app.

8. Contact

Questions about this policy or about your data? Reach us at support@mujibak.com