Privacy Policy

Last updated: 11/06/2026

1. Introduction

At Ersal WhatsApp ("Ersal", "we"), we are committed to protecting your privacy and your customers' data. This Privacy Policy explains how we collect, use, protect, and share information when you use our services.

2. Information We Collect

We collect the following types of information:

Merchant Information (you):

  • Store name and account information
  • Contact information (email address, phone number)
  • Subscription and billing data
  • OAuth access tokens to connect your store with Ersal

Customer Information (your store's customers):

  • Customer phone numbers (for sending WhatsApp messages)
  • Customer names
  • Order data (order number, order status, shipping details)

Usage Data:

  • Message sending logs and their statuses
  • Webhook event logs
  • General usage statistics

3. How We Use Information

We use the collected information for the following purposes:

  • Providing and operating the WhatsApp messaging service
  • Sending WhatsApp notifications to your customers on behalf of your store
  • Managing your account and subscription
  • Improving the Service and developing new features
  • Providing technical support and troubleshooting
  • Complying with legal and regulatory requirements

4. Information Sharing

We do not sell your data or your customers' data to any third party. We share information only in the following cases:

  • Meta (WhatsApp Business API): We send customer phone numbers and message content to Meta's official WhatsApp Business API to deliver messages. This data is subject to Meta's privacy policy
  • E-commerce Platform: We connect to your store via the official e-commerce platform API to receive event data (orders, shipments, etc.)
  • Legal Requirements: When required by law or court order

5. Data Security

We implement strict security measures to protect your data:

  • Encryption of sensitive data at rest and in transit (access tokens are fully encrypted)
  • Secure connections via HTTPS protocol
  • HMAC signature verification for incoming requests
  • Data isolation between different stores (workspace separation)
  • Regular security reviews

6. Data Retention

We retain your data as long as your account is active. When you cancel your subscription:

  • Your account data and customer data are deleted within 30 days of subscription expiry
  • We may retain some aggregated (non-identifiable) data for statistical purposes
  • Billing records are retained in accordance with legal requirements

7. Your Rights

You have the right to:

  • Access your personal data stored with us
  • Request correction or update of your data
  • Request deletion of your data (subject to legal requirements)
  • Cancel your subscription at any time
  • Obtain a copy of your data in a readable format

To exercise any of these rights, contact us via email or WhatsApp.

8. Cookies

We use essential cookies necessary for the proper operation of the Service, including:

  • Session cookies to maintain your login state
  • Security cookies for request verification

We do not use cookies for advertising tracking purposes.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children or minors.

10. International Data Transfers

Some data may be processed on servers outside the Kingdom of Saudi Arabia (such as Meta's servers for WhatsApp services). In these cases, we ensure an appropriate level of protection is in place in accordance with applicable regulations.

11. Changes to Privacy Policy

We reserve the right to update this Privacy Policy from time to time. We will notify you of material changes via email or through an in-app notification. We recommend reviewing this policy periodically.

12. Contact Us

For any questions about this Privacy Policy or your personal data, you can contact us via: