Privacy Policy

The Services are operated by [Company Legal Name], a company registered in Malaysia (Registration No. [Company Registration Number]), with a registered address at [Business Address]. For privacy-related enquiries, contact us at [Privacy Contact Email]. For general support, contact [Support Email].

We collect the following categories of information:

• Account data: name, email address, phone number, business name, login credentials, and profile information.
• Workspace and team data: workspace name, team members, roles, permissions, and internal notes.
• Customer and contact data: contact records that you upload, import, or receive through the Services, including names, phone numbers, tags, attributes, and notes.
• WhatsApp data: when you connect WhatsApp Official, we process conversation metadata and message content (text, media, templates, delivery and read status) required to deliver the Services.
• Operational data: automation rules, broadcast campaigns, assignment events, reports, usage activity, billing records, and support interactions.
• Technical data: IP address, device and browser information, cookies, session identifiers, log files, and analytics events.

We use the information we collect to:

• Provide, operate, secure, and maintain the Services.
• Connect and integrate with WhatsApp Official / Meta Cloud API and related messaging infrastructure.
• Route, assign, automate, and monitor conversations across your team.
• Send broadcasts, notifications, and service messages where permitted by applicable laws and Meta's policies.
• Generate reports and analytics for performance, billing, and product improvement.
• Provide customer support, prevent abuse, detect fraud, and enforce our Terms of Service.
• Comply with legal, regulatory, tax, and audit obligations.

We process personal data based on your consent, the performance of a contract with you, our legitimate interests in operating and improving the Services, and to comply with legal obligations under applicable Malaysian laws including the Personal Data Protection Act 2010 (PDPA).

We use trusted third-party providers to deliver parts of the Services. These may include:

• Meta Platforms / WhatsApp Business Platform — messaging infrastructure.
• Database, authentication, and storage providers (e.g. Supabase).
• Cloud hosting and content delivery providers.
• Analytics, monitoring, and error-tracking tools.
• Payment processors and billing platforms.
• Email, notification, and customer support tools.

These providers are bound by contractual obligations to protect your data and may only process it to deliver services to us.

You are solely responsible for obtaining all required consents, permissions, and notices from your own customers and contacts before uploading their data to Nuha Chat, sending them messages or broadcasts, automating conversations, or otherwise processing their personal data through the Services. You must comply with WhatsApp Business Messaging Policy, Meta's Commerce Policies, PDPA, and other applicable laws.

We retain personal data for as long as your account is active or as needed to provide the Services. After account closure, we may retain certain records where required for legal, billing, audit, fraud prevention, or security purposes. You may request deletion as described in our Data Deletion Instructions.

We implement industry-standard technical and organizational measures including encryption in transit, role-based access control, audit logs, and regular security reviews. No system is 100% secure; you are responsible for maintaining the confidentiality of your account credentials.

Subject to applicable law, you may have the right to access, correct, update, or request deletion of your personal data; object to or restrict certain processing; and withdraw consent. To exercise your rights, contact us at [Privacy Contact Email].

Your information may be processed and stored in countries outside Malaysia where our service providers operate. Where required, we put appropriate safeguards in place to protect your data in accordance with applicable laws.

Nuha Chat does not sell personal data to third parties. We do not share customer conversation content for advertising purposes.

The Services are intended for businesses and are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be notified through the Services or by email. Continued use after the effective date constitutes acceptance of the updated policy.

For privacy questions or requests, email [Privacy Contact Email] or write to us at [Business Address].