Privacy Policy

• Account data: for data relating to you as a MelonsBot subscriber (your account, billing, and business details), we act as the data controller.
• End-customer data: for the WhatsApp conversations and contact data your customers send to your business through MelonsBot, we act as a data processor on your behalf. You — the merchant — are the controller of that data and are responsible for having a lawful basis to process your customers' data.

• Account and business information: name, email, phone number, business name, your online-store details, and login credentials.
• Billing information: your plan, transaction records, and billing contact. Full payment-card numbers are processed directly by the payment provider and are not stored on our systems.
• End-customer data (processed on your behalf): your customers' WhatsApp numbers, names, message content, order and catalog interactions, and associated metadata.
• Usage and technical data: log data, device and browser information, IP address, and product-usage events used to operate, secure, and improve the service.

We use personal data to: provide and operate the MelonsBot service; process subscriptions and payments; send and automate WhatsApp messages on your behalf; provide support; secure the platform and prevent abuse; comply with legal obligations; and improve our service. We do not sell personal data, and we do not use the content of your customers' conversations for advertising purposes.

We process personal data on the basis of: the performance of our contract with you; your consent where required; our legitimate interest in operating and securing the service; and compliance with legal obligations under the applicable laws of the Kingdom of Saudi Arabia.

We share data only with the categories of providers necessary to deliver the service, under appropriate data-protection terms, including: WhatsApp messaging providers; payment-processing providers; AI providers for generating and processing automated replies; hosting and database providers; and monitoring and security providers. We do not share personal data with any other parties except as required by law.

Some data may be processed outside the Kingdom of Saudi Arabia by certain providers. Where data is transferred outside the Kingdom, we rely on appropriate safeguards in line with the Personal Data Protection Law.

We retain account and billing data for as long as your account is active and as necessary for legal, tax, and accounting purposes. End-customer conversation data is retained for as long as necessary to provide the service to you, after which it may be deleted or de-identified.

We apply technical and organizational measures including encryption in transit, access controls, per-tenant data isolation, and audit logging to protect personal data. No method of transmission or storage is completely secure, but we work to protect your data and to handle any incidents as required by law.

Under the applicable laws, you have the right to: be informed of how your data is processed; access your data; request correction of inaccurate data; and request deletion of your data.

Our website and app use cookies and similar technologies for authentication, security, and the analytics necessary to operate the service. You can control cookies through your browser settings.

MelonsBot is a business-oriented service and is not directed at children, and we do not knowingly collect any personal data from children.

We may update this policy from time to time. Material changes are communicated through the platform, and the "Last updated" date above reflects the most recent version.