Privacy Policy

Last updated: October 8, 2026

This policy explains how ABM Business AI ("the Platform", "we") collects, uses and protects data when providing WhatsApp customer service and sales tools to online stores ("Merchants") and their customers ("Customers").

1. Data we collect

• Conversation data: the Customer's phone number, WhatsApp display name, messages and media sent to the store, and timestamps.
• Store data from the Merchant's e-commerce platform (when the Merchant connects their store): store information, products and order status needed to answer Customers.
• Merchant account data: username, login credentials and platform settings.
• Visitor account data (people who sign up on the site before launch): name, email, phone, store name and URL, short survey answers, contact consents with the time of each consent, sign-up date and last login. Passwords are stored hashed and nobody can see them.
• Operational data: technical logs needed to run, secure and debug the service.

2. How we use data

• Answering Customer enquiries on behalf of the store, by the AI agent or store staff.
• Order follow-ups and abandoned-cart reminders to opted-in Customers only.
• Detecting recurring issues to improve service quality for that same store.
• Securing the Platform and preventing abuse.

We do not sell personal data, and we never use one store's data to serve another store.

3. Visitor accounts and marketing consent

• We use visitor account data to create the account, verify the email with a code, show a demo of the Platform, and notify the visitor at launch.
• Marketing contact happens only with explicit, separate consent per channel (WhatsApp, email, SMS). All channels are off unless you choose them, and we record the time of each consent.
• If you choose "no contact", we will not contact you for marketing on any channel.
• You can change or withdraw your consents at any time from your account settings, effective immediately.
• We process this data under the Saudi Personal Data Protection Law (PDPL), and we do not sell or share it for marketing with any third party.
• We keep visitor account data until you delete your account or request deletion. You can delete your account yourself from account settings.

4. AI processing

Conversation text is sent to an AI model provider (Anthropic — Claude) to generate replies, processed under the provider's commercial terms. Merchants can turn off the AI agent or hand conversations to staff at any time.

5. Sharing

We share data only with providers required to operate the service: Meta (WhatsApp Business Platform), the Merchant's e-commerce platform (with the Merchant's authorization), Anthropic (AI processing), an email provider such as Resend (verification codes only), and hosting/infrastructure providers such as Railway and Cloudflare. We may disclose data when required by a competent authority.

6. Retention

We keep data for the duration of the Merchant's subscription and as needed to provide the service. Insights extracted from conversations are deleted automatically after 90 days. Store data is deleted when the Merchant disconnects and requests deletion.

7. Your rights

Customers, Merchants and visitor account holders may request access, correction or deletion of their data, and may stop marketing messages at any time by replying "STOP" (إيقاف). See the data deletion page.

8. Security

We use encrypted connections (HTTPS), role-based access control and per-store data separation. We never ask Customers for payment details in chat.

9. Contact

[email protected]