سياسة الخصوصية

1. Who We Are

PingTact is a Software-as-a-Service (SaaS) platform for managing business messaging through Meta's WhatsApp Business API. It is operated by [Legal Entity / CR Holder], Commercial Registration No. [CR Number], address: [National Address], privacy contact: info@pingtact.com.

2. Data We Collect

• Account data: name, email, mobile number, company name, and password (stored encrypted).
• Your customers' contact data: mobile numbers, names and variable fields uploaded by the subscriber to send messages.
• Message & conversation content: text and media of outbound/inbound messages and their delivery/read status.
• Usage & technical data: login logs, IP address, browser type, and cookies essential for the session.
• Subscription & billing data: plan, subscription dates and usage limits (we do not store payment-card data within the platform).

3. Purposes & Legal Bases

We process your data to: provide the service and operate your account, send/receive WhatsApp messages on your behalf, provide reports and analytics, deliver technical support, manage subscriptions and billing, and protect the platform from abuse. This is based on performance of our contract with you, our legitimate interest in operating and securing the service, legal compliance, and your consent where required.

4. Roles: Controller & Processor

For the subscriber's customer data (contact numbers and conversation content), the subscriber (the company) is the data controller, and PingTact acts as a processor handling data solely under the subscriber's instructions. The subscriber is responsible for obtaining the lawful consents required from its message recipients.

5. Sharing With Third Parties

We do not sell your data. We may share it with: Meta (to deliver WhatsApp messages via its official API), hosting/infrastructure providers, email and payment service providers, and competent government authorities upon a lawful request. These parties are bound to process data confidentially and lawfully.

6. Cross-Border Data Transfer

Some data (notably via the Meta/WhatsApp infrastructure) may be processed outside Saudi Arabia. This is done in accordance with the PDPL and its regulation on transferring data outside the Kingdom, with appropriate safeguards applied to protect your data.

7. Data Retention

We retain data for the duration of your subscription and for as long as necessary to fulfil the processing purposes or a legal obligation. Upon termination, the subscriber may request deletion of its data, which we delete or anonymise within a reasonable period unless retention is legally required.

8. Data Security

We apply technical and organisational measures including: encryption of access tokens and passwords, encryption in transit (HTTPS), role-based access control, and isolation of each subscriber's data. Nonetheless, no internet transmission can be guaranteed to be perfectly secure.

9. Cookies

We use only essential cookies to manage the login session and language preference. We do not use them for advertising or marketing tracking.

10. Your Rights Under the PDPL

• The right to be informed about how your data is processed.
• The right to access your data and obtain a copy of it.
• The right to correct or update inaccurate data.
• The right to have your data destroyed when no longer needed.
• The right to withdraw consent at any time, without retroactive effect.

To exercise these rights, contact us at info@pingtact.com. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.

11. WhatsApp Messaging, Consent & Opt-Out

Use of the platform requires obtaining recipients' consent and complying with Meta's and WhatsApp's business policies. A recipient may stop messages at any time by sending a word such as "stop" or "unsubscribe", after which campaign messages to them are suspended.

12. Children's Privacy

The service is intended for businesses and is not directed at children under 18, and we do not knowingly collect children's data.

13. Changes to This Policy

We may update this policy from time to time and will revise the "Last updated" date above. Your continued use of the service after a change constitutes acceptance of it.

14. Contact

For any privacy inquiry or to exercise your rights: info@pingtact.com