Trust & Data Protection

Who is responsible for the data

Each business that uses our agent is the controller of its customers' data and owns its WhatsApp Business account and number. ROSA processes that data only to run the agent for that business, under our agreement with them.

Consent and opting out

Replying STOP (or the Arabic equivalent) ends all messages from the agent at once: replies, follow-ups and offers. Replying START turns replies back on. Marketing messages only go to customers who agreed to receive them.

Every consent change is recorded with its date and source, so a business can show when and how a customer agreed or opted out. A STOP is respected even if the customer's data is later erased.

Getting a copy of your data, or deleting it

Ask the business you messaged, or email us. From their dashboard the business can download everything held about you (your chats, bookings, form entries and consent history) or erase it permanently. Each request is logged without storing your details again.

Businesses can also set a retention period, after which customers who have been inactive for that long are erased automatically.

How we keep data safe

Each business's data is kept separate from every other business's by database access rules, so one client can never see another's customers. WhatsApp access tokens are encrypted at rest with AES-256, all traffic uses TLS, and staff sign in to the dashboard with one-time email codes.

We do not sell personal data, and customer messages are not used for advertising or to train general-purpose AI models.

Service providers

We use Meta (WhatsApp Business Platform), Supabase (database), OpenAI and OpenRouter (AI language processing), Stripe (payments) and our hosting provider. Some process data outside the UAE with appropriate safeguards. Our privacy policy has the full details.

Contact us

ROSA eSolutions FZE, A5, Digital Park, Dtech, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email [email protected] or call +971 58 804 7472.