سياسة الخصوصية

Privacy Policy (English)

Last updated: 16 August 2026

Who we are

Nabra AI is a software service that runs an automated sales assistant on WhatsApp on behalf of subscribing merchants. It is operated by Mobtara Inc., registered in Quebec, Canada — 5937 Av Auteuil, Brossard, QC J4Z 1N1.

Our role: when you chat with a store through Nabra, the store is the data controller and Nabra acts as its processor.

Data we collect

From customers messaging a store: phone number, WhatsApp profile name, message text, voice notes and their transcripts, recipient name, city and delivery address, order and booking details, order-reliability history (delivered / rejected / returned), marketing consent and opt-out status.

From merchants: name, email, phone, store name and city, product catalogue and pricing, encrypted integration credentials, subscription and billing records.

We never collect payment card data. Payments are handled by the payment gateway directly and never touch our servers.

How we use it

• Answering customer messages and completing orders
• Transcribing incoming voice notes and generating voice replies
• Limited follow-up messages: order confirmation, abandoned-cart reminder, appointment reminder, review request
• Alerting the merchant to a high-value interested customer
• Operating the service, metering usage, and preventing abuse

We do not sell or rent your data, and we do not use it to train AI models.

Who we share it with

• Meta Platforms (WhatsApp Business Platform) — phone number and message content, to deliver the messages
• Google (Gemini API) — message text or audio, for understanding, transcription and speech synthesis
• Moyasar — order amount and reference, to issue a payment link
• Salla / Zid — product and order data, if the store is connected to them
• Supabase — database hosting, servers in the European Union
• Railway — application hosting, servers in the United States

International transfers

Data is stored in the European Union and processed in the United States, and transits Meta and Google services. This means your data is transferred outside Saudi Arabia. We rely on the necessity of the transfer to deliver the service you requested, and on contractual safeguards with our providers.

Retention

• Conversations, voice notes and transcripts — 24 months from the last message
• Orders and invoices — as required by commercial record-keeping law
• Merchant account data — for the subscription term plus 90 days
• Opt-out records — kept indefinitely, so we never message you again

Your rights and how to delete your data

Under Saudi Arabia's Personal Data Protection Law (PDPL) you have the right to be informed, to access, to rectify and to have your data destroyed.

To stop messages immediately: send «توقف» or «stop» in the WhatsApp chat. Sending stops at once.

To request a copy or deletion of your data: email privacy@mobtara.com from the address or phone number used in the conversation, naming the store you dealt with. We respond within 30 days. On deletion we erase your conversations, voice notes and delivery details held for that store, retaining only what law requires (such as invoice records) and your opt-out record.

Security

• TLS encryption in transit for all traffic
• Encryption at rest for sensitive integration credentials
• Signature verification on every inbound WhatsApp request
• Per-store data isolation
• Least-privilege access for the operations team

Children

The service is intended for merchants and their adult customers. We do not knowingly collect data from anyone under 18.

Contact

Mobtara Inc., 5937 Av Auteuil, Brossard, QC J4Z 1N1, Canada — privacy@mobtara.com