1Who we are
This Privacy Policy explains how SHABAB BUSINESS SOLUTIONS LLC (brand: SHABAB INFOTECH), City Park Business Center, M Floor, Al Khuwair, Muscat, Sultanate of Oman (“SHABAB INFOTECH”, “we”, “us”) handles personal data in SHABAB WHATSAPP at wa.shababinfotech.com — the admin panel, the customer portal, the API — and in our Meta app “SHABAB Connect”, which businesses use to connect their WhatsApp Business number to SHABAB WHATSAPP.
SHABAB WHATSAPP is a business tool. It lets a company receive and answer WhatsApp chats in one shared inbox, send approved message templates (for example bills, alerts and offers) and turn new chats into sales leads.
2Business customers and their chat contacts
- Business customers are companies that connect their own WhatsApp Business account to SHABAB WHATSAPP. For their account data, we are the controller.
- Chat contacts are people who send WhatsApp messages to, or receive messages from, a business customer. For these chats, the business customer decides why the data is used; we process it only on the business customer’s instructions to run the service (we act as its processor / service provider).
3What data we collect
a) When a business connects WhatsApp (Facebook Login for Business / Embedded Signup)
- WhatsApp Business Account (WABA) ID, phone number ID, the display phone number and the verified business name.
- Number status from Meta: quality rating, messaging limit, name status.
- An access token that the business grants to our app, so we can send and receive messages and manage message templates for that number. It is stored encrypted.
- We never see or store your Facebook password. We do not store your personal Facebook profile, friends, posts or photos.
b) Messages and contacts of the business
- Content of WhatsApp messages sent and received through the connected number (text, media references, template name, time, delivery and read status). With “Coexistence” (the business keeps using the WhatsApp Business app on its phone), copies of messages the business sends from the phone app are also received, so the shared inbox stays complete.
- Name shown on WhatsApp and phone number (or WhatsApp user ID) of chat contacts; contact lists the business uploads (stored encrypted); tags, notes and lead details the business adds; opt-out (“STOP”) records.
c) Account, billing and security data
- Portal user names, password hashes (never the password itself), login times, IP addresses and an access log.
- Company name, package, top-ups, invoices and usage counts for billing (with 5% VAT as Oman law requires).
- Technical server logs (time, page, IP address) to keep the service safe and working.
4Why we use the data
- To run the service the business asked for: show incoming WhatsApp messages in the inbox, send replies and approved templates, show delivery and read status.
- To manage the business’s WhatsApp assets on its request: connect the number, subscribe our app to the number’s webhooks, create and check message templates, read the number’s quality and limits.
- To create sales leads from new chats for the business (for SHABAB INFOTECH’s own number, new chats become leads in our own CRM, NEXUS).
- Billing, customer support, security (stopping abuse and spam), and meeting legal duties.
Legal bases: the contract with the business customer, our legitimate interest in a safe and working service, legal obligations (for example tax invoices), and consent where the law needs it.
5Optional AI auto-reply
AI auto-reply is OFF by default. Only if a business customer switches it on, the text of incoming messages for that business is sent to our AI provider (Anthropic) to draft an answer. The provider processes it under its commercial API terms. The business can switch this off at any time.
7Where data is stored and how we protect it
- All traffic uses HTTPS (encrypted).
- Access tokens, the app secret, contact lists and 2-step PINs are encrypted at rest (AES-256-GCM). API keys and passwords are stored only as one-way hashes.
- Webhooks from Meta are accepted only with a valid Meta signature.
- Staff access is limited. SHABAB INFOTECH staff see a customer’s messages only if that customer allows support access; otherwise they see counts only.
- Regular backups, kept on secured servers.
8How long we keep data
- Messages, contacts and leads: as long as the business customer uses SHABAB WHATSAPP, or until it asks us to delete them.
- Access tokens: until the business disconnects our app or asks for deletion, then deleted.
- After the service ends, or after a deletion request: deleted within 30 days; backup copies are overwritten within 90 days.
- Tax invoices and billing records: as long as the tax law of Oman requires.
- Security logs: a short time (normally less than 90 days).
9Your rights (Oman Personal Data Protection Law)
Under the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and its Executive Regulation, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct wrong data;
- delete your data (see the Data deletion page);
- stop or limit processing, or withdraw consent;
- move your data to another provider.
You can also complain to the Ministry of Transport, Communications and Information Technology (MTCIT) in Oman. If you are a chat contact of one of our business customers, please contact that business first — we will help it answer you.
10How to ask for deletion
- Email info@shababinfotech.com (subject “Data deletion”).
- WhatsApp or call +968 9732 9001.
- Remove the app “SHABAB Connect” from your Facebook / Meta Business settings — Meta tells us automatically and gives you a confirmation code.
Full steps: wa.shababinfotech.com/data-deletion.
11Children
SHABAB WHATSAPP is for businesses. It is not meant for children under 18, and we do not knowingly collect their data for our own purposes.
12Changes to this policy
We may update this policy. The date at the top shows the latest version. Big changes are also told to business customers in the portal or by email.
13Contact
SHABAB BUSINESS SOLUTIONS LLC (brand: SHABAB INFOTECH), City Park Business Center, M Floor, Al Khuwair, Muscat, Sultanate of Oman.