1. Who We Are

NodrahWeb is a WhatsApp Business AI automation platform operated by NodrahWeb Marketing Establishment (مؤسسة ندرة الويب للتسويق الإلكتروني), a sole establishment registered in the Kingdom of Saudi Arabia. We serve businesses primarily in Saudi Arabia.

Contact: support@nodrahweb.com

2. What Data We Collect

We collect the following categories of data:

Account Data: Name, email address, password (hashed), company name.
WhatsApp Business Data: Your WhatsApp Business phone number ID, Business Account ID, and access tokens (encrypted at rest).
Conversation Data: Messages sent and received through your WhatsApp Business number via our platform.
Contact Data: Phone numbers and names of people who message your WhatsApp number.
Usage Data: Analytics about AI response rates, conversation counts, and platform performance.
Technical Data: IP addresses, browser type, and session data for security purposes.

3. How We Use Your Data

To operate the NodrahWeb platform and provide AI-powered WhatsApp automation.
To send and receive WhatsApp messages on your behalf via the Meta WhatsApp Business API.
To train and improve AI responses based on your knowledge base (not shared across accounts).
To provide analytics and performance insights in your dashboard.
To send transactional emails (account notifications, invoices).
To comply with legal obligations and Meta's platform policies.

4. Meta WhatsApp Business API

NodrahWeb uses the Meta WhatsApp Business API to send and receive messages. By connecting your WhatsApp Business account, you agree to:

We store your WhatsApp access tokens encrypted using AES-256 encryption. We do not sell or share your WhatsApp conversation data with third parties, except as required by law.

5. Data Sharing

We share your data only with:

Meta Platforms, Inc. — for WhatsApp API functionality.
Railway.app — our backend cloud infrastructure provider (data processed in their servers).
Vercel, Inc. — our frontend hosting provider.
AI providers — message content may be processed by AI services (e.g., OpenAI) to generate responses, subject to their privacy policies.

We do not sell your personal data.

6. Data Retention

We retain your account data for as long as your account is active. Conversation data is retained for 90 days by default. You may request deletion of your data at any time by contacting us at support@nodrahweb.com.

7. Your Rights

You have the right to:

Access, correct, or delete your personal data.
Export your conversation data.
Withdraw consent and close your account at any time.
Lodge a complaint with your local data protection authority.

8. Security

We use industry-standard security measures including AES-256 encryption for sensitive data at rest, HTTPS/TLS for data in transit, and httpOnly cookies for session management. We conduct regular security reviews.

9. Cookies

We use essential cookies only — for authentication sessions. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you by email or in-app notice for material changes. Continued use of NodrahWeb after changes constitutes acceptance.

11. Contact Us

For privacy concerns or data requests, contact:
NodrahWeb Marketing Establishment (مؤسسة ندرة الويب للتسويق الإلكتروني)
Email: support@nodrahweb.com
Country: Kingdom of Saudi Arabia