Privacy Policy
Last updated 9 November 2026
This policy explains what Roushdys collects when you use Nabd and how it is used.
What we collect
- Account data: name, email, company, country and hashed password.
- Billing data: invoices and payment status. Card and wallet details are handled by Paymob — we never see or store them.
- WhatsApp session data: the encrypted session needed to keep your number connected, your phone number and profile name.
- Message metadata: time, direction, recipient and type of messages, kept for 30 days for usage, billing and support. We do not store message bodies, except the last few messages of a chat (for up to 24 hours) when the AI bot is enabled so it can reply in context.
- Technical data: IP addresses and logs for security and abuse prevention.
How we use it
- To provide, bill and support the Service.
- To send service emails (verification, receipts, renewal reminders, quota alerts).
- To prevent fraud, abuse and spam.
AI processing
If you enable the AI auto-reply bot, incoming messages and your business information are sent to our AI provider to generate replies. Providers process this data under their API terms and do not use it to train models where that option is available.
Sharing
We share data only with providers that help run the Service (hosting, payment processing by Paymob, email delivery, AI providers) or when required by law. We do not sell personal data.
Security
Data is encrypted in transit (HTTPS). API keys and passwords are stored hashed; provider secrets are encrypted at rest.
Your rights
You can access, correct, export or delete your data by contacting us. Deleting your account removes your sessions and personal data, except records we must keep for accounting.