Privacy policy

This policy explains what personal data Roken designy (“we”) handles when we connect a business’s WhatsApp number to the WhatsApp Business Platform and run automated replies and messages on it, and when you use this website. Roken designy is operated by Yazeed Hamad Abdullah Almalaq, Hail 55425, Saudi Arabia.

Our role

We act on behalf of the businesses we serve. When a customer writes to a business’s WhatsApp number, that business decides how the conversation is handled and remains responsible for its relationship with its customers; we process the messages for it, under its instructions. For the business owners and staff we deal with directly (their contact details and account information), we decide how that data is used.

What we process

• People who message a business we serve: WhatsApp phone number and profile name; the messages they send (text, voice notes, photos, locations) and the replies sent back; delivery status from WhatsApp (sent, delivered, read).
• Business owners who connect a number: business name, WhatsApp Business Account ID, phone number ID, business portfolio ID, phone number status and quality rating, and the contact details they give us. Meta returns a temporary access code when the owner finishes the connection on our website; we use it once to set up the connection and do not store it. We never see Facebook passwords.
• Visitors to this website: we use no analytics and set no cookies of our own. The connect page loads Facebook’s software (the Facebook JavaScript SDK), which may set Facebook cookies under Meta’s own policy. Our hosting provider keeps standard technical logs (IP address, time, page requested) for security.

Why we process it

• To read a customer’s message and send the reply the business has set up, for example product details, a listing, or available appointment times.
• To keep a short conversation history so that a follow-up question is understood in context.
• To stop automated replies in a chat once the business’s staff reply themselves.
• To send template messages the business is allowed to send, such as a payment or appointment reminder to its own customer.
• To count messages for billing and reports, and to find and fix errors.

We do not sell personal data, we do not use it for advertising, and we do not use the messages of one business for any other business.

Who else handles it

• Meta Platforms (WhatsApp) carries the messages; see WhatsApp’s privacy policy.
• OpenAI reads the text, voice note or photo to understand what the customer asked.
• Supabase hosts the database where conversation history and message logs are kept.
• n8n, on a server rented from Hostinger, runs the messaging workflow.
• Vercel and Cloudflare host this website, images and pages linked from replies; Google Fonts serves the website’s fonts.

Each provider processes data only to deliver its part of the service. Some of them store data on servers outside Saudi Arabia. The full list is on the subprocessors page.

How long we keep it

Conversation data is kept while we provide the service to the business, and deleted within 30 days after the service ends, or earlier when the business or the person asks. Message counts and invoices may be kept longer as accounting records.

Security

Data travels over encrypted connections. Access to message data is limited to what is needed to run and fix the service, and access keys are kept on the server, never in web pages.

Your rights

You can ask to see, correct or delete the personal data we hold about you, in line with Saudi Arabia’s Personal Data Protection Law. How to ask is on the data deletion page. You can also ask the business you wrote to.

Children

Our services are for businesses and are not directed at children.

Changes

When this policy changes we update the date at the top of this page. Businesses using the service are told about important changes directly.

Contact

Yazeed Hamad Abdullah Almalaq (Roken designy), Hail 55425, Saudi Arabia. Email btmk.fm@gmail.com, WhatsApp +966 50 516 4551.