Privacy Policy

1. Introduction

Welcome to Chatifyd, a WhatsApp Business Solution operated by Webifyd Technology LLC("Company", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy in accordance with applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp Business API platform and services. It applies to all users of our services, including businesses (our customers) and their end-users who receive messages through our platform.

2. Information We Collect

2.1 Information You Provide

We collect personal information that you voluntarily provide when registering on our platform, using our services, or contacting us:

• Account Information: Name, email address, phone number, company name, job title
• Business Information: Company registration details, industry sector, business address
• Payment Information: Billing address, payment card details (processed by our payment provider)
• WhatsApp Business Details: WhatsApp Business Account ID, display name, phone numbers
• Communication Data: Support tickets, correspondence with our team

2.2 Information Collected Automatically

When you access our platform, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version
• Log Data: IP address, access times, pages viewed, referring URLs
• Usage Data: Features used, messages sent, API calls made, performance metrics
• Cookies and Tracking: See our Cookie Policy

2.3 Message Data (WhatsApp Communications)

As a WhatsApp Business Solution Provider, we process message data on behalf of our business customers:

• Message Content: Text, images, documents, and media sent through our platform
• Message Metadata: Timestamps, delivery status, read receipts, phone numbers
• Conversation Data: Chat history, chatbot interactions, agent assignments

3. Legal Basis for Processing

Under UAE PDPL and GDPR, we process your personal data based on the following legal grounds:

4. How We Use Your Information

We use collected information for:

• Providing, operating, and maintaining our WhatsApp Business API platform
• Processing transactions and managing your subscription
• Facilitating message delivery through the WhatsApp Business Platform
• Providing customer support and responding to inquiries
• Sending service-related notifications and updates
• Analyzing platform usage to improve our services
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations and regulatory requirements
• Sending marketing communications (with your consent)

5. Data Sharing and Disclosure

5.1 Service Providers (Sub-processors)

We share data with trusted third-party service providers who assist in operating our platform:

5.2 Meta/WhatsApp

As a WhatsApp Business Solution Provider, we necessarily share certain data with Meta Platforms, Inc. to enable WhatsApp messaging functionality. This includes:

• WhatsApp Business Account information
• Message delivery data
• Phone numbers for message routing

5.3 Other Disclosures

We may also share information:

• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety
• With Consent: When you have provided explicit consent

6. International Data Transfers

As we operate globally, your personal data may be transferred to and processed in countries outside of your residence, including the United Arab Emirates, European Union, and United States.

For transfers to countries without adequate data protection recognition, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Binding Corporate Rules where applicable
• Adequacy decisions by competent data protection authorities
• Your explicit consent where other mechanisms are unavailable

7. UAE PDPL Compliance

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), if you are located in the United Arab Emirates, you have the following rights:

• Right to be Informed: Know how your data is being processed
• Right of Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Object to Automated Decisions: Challenge decisions made solely by automated processing

To exercise these rights, please contact our Data Protection Officer at dpo@chatifyd.com. You also have the right to lodge a complaint with the UAE Data Office.

8. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access (Art. 15): Obtain confirmation and a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Limit processing in certain circumstances
• Right to Data Portability (Art. 20): Receive data in machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right Not to be Subject to Automated Decisions (Art. 22): Challenge automated decision-making with legal effects

We will respond to your request within 30 days. You have the right to lodge a complaint with your local Data Protection Authority.

9. WhatsApp Business Platform Requirements

As a WhatsApp Business Solution Provider, we adhere to Meta's data handling requirements:

• Message Retention: WhatsApp message content is retained for a maximum of 30 days for delivery purposes, as required by the WhatsApp Business API
• End-to-End Encryption: Messages between users and businesses are protected by end-to-end encryption
• User Consent: Our business customers must obtain proper consent before sending messages to end-users
• Opt-Out: End-users can opt out of messages by blocking the business number or requesting removal
• Data Minimization: We only process data necessary for message delivery and platform functionality

For details on how WhatsApp processes data, please refer to the WhatsApp Privacy Policy.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Retention periods vary based on data type:

For more details, see our Data Retention Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Employee security training and confidentiality agreements
• Incident response procedures
• Data backup and disaster recovery plans

12. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

• We will notify the UAE Data Office within 72 hours where required
• We will notify relevant EU supervisory authorities within 72 hours for GDPR-covered data
• We will inform affected individuals without undue delay when required
• We will document all breaches and remediation actions

13. Cookies

We use cookies and similar tracking technologies on our platform. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

14. Children's Privacy

Our platform is designed for business use and is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@chatifyd.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by email or through a prominent notice on our platform at least 30 days before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the updated policy.