Privacy Policy
Last updated: 3 November 2026
This policy explains how Waafi, operated by Flavoria Company, collects, uses and protects personal data when you use the Waafi website, platform and services, including our WhatsApp Business Platform integration services. “We” and “our” in this policy refer to Flavoria Company as the platform operator.
Data we collect
Contact details you send us (name, email, phone), data of subscribing businesses and their teams, messages sent and received through WhatsApp Business on behalf of the subscribing business, and technical data needed to run and secure the service.
How we use data
To provide the platform and its services to the subscribing business, answer enquiries, issue invoices, improve and protect the service, and comply with applicable law. We do not sell personal data or use it for advertising.
WhatsApp Business data
When a business connects its number to the platform, messages and contact data are processed only to provide the messaging service to that business. The business remains responsible for its customers' data, and we act as its processor.
Sharing
We share data only with service providers required to run the service (such as hosting, messaging, payments and AI service providers), to the extent necessary, or where required by law.
AI features
Where a business enables AI features (such as conversation summaries, assisted replies or a staff assistant), the related messages and data may be processed by our AI service providers (Google Cloud Vertex AI and OpenAI) solely to deliver those features to that business. We do not use this data to train AI models, our providers process it under business terms that do not allow training on it, and the business can turn these features off.
Transfers outside the Kingdom
Some data may be processed or stored by service providers outside Saudi Arabia, such as in the European Union and the United States, under contractual safeguards and in line with the Regulation on Personal Data Transfer outside the Kingdom.
Retention and security
We keep data for as long as we provide the service and as required by law afterwards, and apply security controls including encryption, isolation between businesses and restricted access.
Your rights
You may request access to, correction or deletion of your data, or object to its processing, by contacting us at the email below or through the Data Deletion page.
Contact
For any privacy question, email us at the address shown at the bottom of the page.