العربيةEN

Privacy Policy

Last updated: October 2026

This policy sets out what data we collect, why, and who can reach it. It applies to both Rabtt360 products.

1. What we collect

Account data: your name, email, company name, and a password stored hashed — we do not keep the password itself and cannot recover it.

Usage data: member counts and execution counts, for billing and plan limits.

Technical logs: IP address, browser and request time, for security and abuse detection.

Data you enter: contacts, messages, workflows and the credentials of services you connect. This is your data and we treat it as such.

2. How it is held

On Automation, every customer gets a separate database and an encryption key of their own. No key is reused between customers, and isolation is enforced at the system level rather than by query filters.

Third-party credentials are stored encrypted and never appear in any interface or log.

3. Who can reach it

You and the team members you invite, according to the roles you grant. Our technical team can see account data only — company name, plan, usage. Our admin console does not show the contents of your conversations or workflows and cannot decrypt your credentials.

We do not sell your data or share it for marketing with anyone.

4. Service providers

We rely on providers to operate the service, each reaching only what their function requires:

  • DigitalOcean — server hosting.
  • Customer.io — operational email.
  • Meta / WhatsApp Business API — for the CRM product only.
  • Paymob — payment processing. Card details never reach our servers.

5. Retention

Account data for the life of your subscription. Execution logs are deleted automatically after 7 days by default. After account closure your data is deleted within 30 days, with backups ageing out over a further 7.

6. Your rights

You may request a copy of your data, its correction, or deletion of your account and everything attached to it. Contact us and we will respond within 30 days.

7. Cookies

We use one necessary cookie to hold your sign-in session. We use no advertising trackers and share no data with ad networks.

8. Security

What follows describes what the platform does. It is not a list of certifications we hold:

  • All traffic runs over HTTPS.
  • Passwords are stored with a slow hashing function.
  • Daily backups with a tested restore.
  • Isolation between customers at the container, network and database level.

9. Contact

Email: info@rabtt360.com · Contact form: rabtt360.com/en/contact