Connect Wasl

Privacy Policy

Effective date: 20 June 2026

Connect Wasl LTD ("Connect Wasl", "we", "us", "our") takes the privacy and security of personal data seriously. This Privacy Policy explains how we handle personal data.

We process personal data in two distinct roles:

  • For our own purposes (as a data controller): data about the businesses and people who sign up for, pay for, and use Connect Wasl, and people who visit our website.
  • On behalf of our customers (as a data processor): the Customer is the controller of the data it processes through Connect Wasl about its own contacts (for example, the people who message the Customer's business). We process that data only on the Customer's instructions, as set out in our Data Processing Agreement. We have no direct relationship with those contacts.

This Policy covers data we process for our own purposes. For data we process on behalf of a Customer, see the Data Processing Agreement.

Questions or requests: info@connectwasl.com

1. Personal data we collect

From Customers (the businesses that use the service):

  • Account details: name, email, business name, role, login identifiers.
  • WhatsApp connection details: WABA ID, phone number ID, display phone number, connection method (coexistence or migration), connection status.
  • Billing details via our payment processor: name, billing info, and limited card data (we do not store full card numbers; Stripe handles payment data).
  • Communications: messages, support requests, and anything you send us.

From website visitors:

  • Cookies and similar technologies (including the Meta Pixel), usage and log data such as IP address, browser type, pages visited. See "Cookies" below.
  • Information you submit in forms (for example, the founding-offer waitlist: WhatsApp number, email).

Contacts/customers of the Customer ("Subscribers"): processed on the Customer's behalf, not for our own purposes:

  • The Customer's contacts message the Customer's WhatsApp number; we process those conversations, contact details (for example, WhatsApp number and name), and any information the Customer chooses to collect through its own configured questions.
  • The Customer decides what to collect from its contacts. Connect Wasl does not impose or default any specific questions. The Customer is the controller of this data and is responsible for having a lawful basis and any required consent to collect and process it. We process it only on the Customer's instructions (see the DPA).

We ask Customers and users not to send us sensitive personal data except where strictly necessary and lawful.

2. How we use personal data (our own purposes)

  • To create and operate accounts and provide the service.
  • To process payments and meet billing and accounting obligations.
  • To communicate about the service (security, technical, and administrative notices) and, where permitted, service-related updates you can opt out of.
  • To provide support and respond to requests.
  • To maintain security, prevent fraud and abuse, and enforce our terms.
  • To comply with legal obligations.

3. How we share personal data

We do not sell personal data. We share it with:

  • Sub-processors / service providers who help us run the service:
    • Supabase: database and media storage (hosted in Frankfurt, Germany / EU).
    • Vercel: application hosting.
    • Stripe: payment processing.
    • Sentry: error monitoring.
    • Resend: transactional email delivery (for example, account and waitlist notifications).
    • Meta (WhatsApp Business Platform): the messaging channel the service runs on.
  • Professional advisors (lawyers, accountants) where necessary.
  • Authorities where required by law.
  • In a business transfer (merger, acquisition), subject to this Policy.

4. Where data is stored and international transfers

Our primary data store (Supabase) is located in Frankfurt, Germany (EU). Vercel, Stripe, Sentry, and Meta may process data in other regions.

Because Customers and their contacts may be located in Saudi Arabia and the wider Gulf, and our infrastructure is in the EU and elsewhere, personal data may be transferred across borders. Where it is, we rely on appropriate safeguards (for example, Standard Contractual Clauses) and take steps to ensure an adequate level of protection.

5. Your data protection rights

Depending on your jurisdiction, you may have rights to access, correct, delete, object to or restrict processing, withdraw consent, port your data, and complain to a data protection authority. To exercise these, contact info@connectwasl.com.

Requests from a Customer's contacts: if you are a contact/customer of a business that uses Connect Wasl, your relationship is with that business. We process your data on their behalf and have no direct relationship with you. Please direct access, correction, and deletion requests to that business. We will assist them in responding as required.

6. Retention

We retain personal data only as long as necessary for the purposes above and as required by law. Account data is retained for the duration of the account and securely deleted or anonymized after the account is closed, unless a longer period is legally required.

7. Children's data

Connect Wasl is a business tool sold to businesses. It is not directed to children, and we do not knowingly collect personal data directly from children for our own purposes.

Customers use Connect Wasl to communicate with their own contacts. The Customer controls what information it collects through its own configured questions. Where a Customer chooses to collect information that may relate to a minor (for example, a child's age), the Customer is the controller of that data and is responsible for having the appropriate lawful basis and any required parental consent. Connect Wasl processes such data only on the Customer's instructions.

8. Security

We take reasonable technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, tenant isolation (row-level security), and two-factor authentication for owners. No system is 100% secure. In the event of a personal data breach likely to risk your rights, we will notify affected parties without undue delay, as required by applicable law.

9. Cookies

We use cookies and similar technologies on our website, including the Meta Pixel for advertising measurement. You can control cookies through your browser and our consent tool.

10. Changes to this Policy

We may update this Policy. We will post the new effective date and, where required, obtain consent for material changes.

11. Contact

Connect Wasl LTD
Email: info@connectwasl.com