Privacy Policy

Data we collect

Information you give us: your name, company, email, phone number and message when you fill in a form, book a demo or write to us.

Messaging data: when you message a business that uses our AI agent on WhatsApp or another channel, we receive your phone number, profile name, the messages and media you send, and delivery status from Meta's WhatsApp Business Platform.

Business account data: when a client connects their WhatsApp Business account to our platform through Meta's Embedded Signup, we receive their business account ID, phone number ID and an access token that Meta issues for that connection.

Usage data: pages visited, device and browser type and approximate location, collected through cookies and Google Analytics.

How we use it

To answer enquiries, deliver and bill for our services, run AI agents that reply to customer messages on behalf of our clients, hand conversations to a human when needed, pass qualified leads to the client the conversation belongs to, keep our services secure, and improve our website.

We do not sell personal data, and we do not use WhatsApp message content for advertising or to train general-purpose AI models.

Our role for client conversations

For messages sent to our clients' WhatsApp numbers, the client is the data controller and ROSA acts as their processor. Each client owns its WhatsApp Business account, phone number and customer data, and its own privacy notice also applies.

Who we share it with

Service providers that help us run the platform, under contracts that protect your data: Meta Platforms (WhatsApp Business Platform), Supabase (database hosting), OpenAI and OpenRouter (AI language processing), Stripe (payments), Google (analytics and email) and our hosting provider. Some of these providers process data outside the UAE with appropriate safeguards. We may also disclose data when the law requires it.

Retention and security

We keep conversation and lead data for as long as the client's contract is active, then delete it within 90 days unless the law requires longer. Website enquiries are kept for up to 3 years. Access tokens are encrypted at rest (AES-256), data is sent over TLS, and each client's data is isolated from other clients.

Your rights

You can ask us to access, correct or delete your personal data, object to or restrict its processing, or withdraw consent. To stop messages from a business on WhatsApp, reply STOP or block the number. See our data deletion page for how to request deletion.

Cookies

We use essential cookies to run the site and analytics cookies to understand how it is used. You can block cookies in your browser settings.

Changes

We may update this policy. The date at the top shows the latest version.

Contact us

ROSA eSolutions FZE, A5, Digital Park, Dtech, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email [email protected] or call +971 58 804 7472.