Privacy Policy

Last updated: 24 September 2026

RAL Software Services ("RAL", "we", "us") is registered in the Kingdom of Bahrain (CR No. 196651-1). We build software that helps businesses message their customers on WhatsApp through the WhatsApp Business Platform provided by Meta. This policy explains what data we process, how and why we process it, and how you can ask us to delete it.

1. Who this policy covers

Business customers who connect their WhatsApp Business Account to our software.
End users who send messages to, or receive messages from, those businesses through our software.

2. Data we process

Business account data: business name, contact name, email, phone number, WhatsApp Business Account ID, phone number ID, and message templates.
Message data: the content of messages sent and received through our software, the phone numbers and WhatsApp profile names of the people in the conversation, and delivery and read status.
Access tokens: tokens issued by Meta that let our software act on a business's WhatsApp account with its permission.
Technical data: IP address, browser type, and logs needed to run and secure the service.

We only get data from Meta that a business has allowed us to access through Meta's permission screens.

3. How and why we use it

To send and receive WhatsApp messages on behalf of the business that connected its account.
To create and manage message templates for that business.
To show conversation history and message status to that business.
To provide support, keep the service secure, and prevent abuse.
To meet our legal obligations.

We do not sell personal data. We do not use message content for advertising or to train artificial intelligence models.

4. Legal basis

We process data to perform our contract with business customers, for our legitimate interest in running a secure service, and where required by law, in line with the Bahrain Personal Data Protection Law (Law No. 30 of 2018). For end-user data, the business that uses our software is the data controller, and we process that data on its instructions.

5. Sharing

We share data only with:

Meta Platforms, to deliver WhatsApp messages. Meta's use is covered by the WhatsApp Business Policy.
Hosting and infrastructure providers that store and process data for us under confidentiality obligations.
Authorities, when the law requires it.

6. Storage and security

We encrypt data in transit (HTTPS/TLS), limit access to staff who need it, and store access tokens securely. Data may be processed outside Bahrain by our hosting providers under appropriate safeguards.

7. How long we keep data

We keep data for as long as the business account is active, or until deletion is requested. When a business disconnects its account or closes it with us, we delete its data within 30 days, unless the law requires us to keep it longer.

8. How to delete your data

Anyone who uses our software, or whose messages pass through it, can ask us to delete their data:

Email [email protected] with the subject "Data Deletion Request".
Include your business name or the WhatsApp phone number the request is about.
We confirm the request within 7 days and delete the data within 30 days.

You can also remove our app's access at any time in your Facebook settings under Settings & Privacy, then Settings, then Business Integrations, or in Meta Business Suite. When access is removed, we stop receiving new data and delete stored data within 30 days.

9. Your rights

You may ask to access, correct, or delete your personal data, or object to how we process it. Email [email protected]. You can also complain to the Personal Data Protection Authority in Bahrain.

10. Children

Our service is for businesses. It is not meant for anyone under 18.

11. Changes

If we change this policy, we will update the date at the top of this page.

12. Contact

RAL Software Services
Flat 10, Building 2975, Road 7543, Block 575, Kingdom of Bahrain
Email: [email protected]
Phone: +973 6638 6602