Privacy Policy

Data Controller And Contact

MatnBot is operated by ITBeep in Saudi Arabia. ITBeep controls the account and service data needed to provide MatnBot, while each customer remains responsible for the customer data and messaging activity it submits to its workspace. For privacy questions, access requests, export requests, or deletion requests, contact privacy@matnbot.com.

Data Categories

• Account and workspace information such as names, email addresses, roles, and audit events.
• Bot configuration, AI instructions, uploaded knowledge files, and generated answers.
• Conversation content from connected channels, including WhatsApp messages and metadata.
• Operational data such as webhook receipts, delivery status, errors, rate-limit events, and security logs.
• Billing records and payment status handled through the configured payment provider.

Purposes

• Provide the AI bot, inbox, ticketing, and human handoff features requested by customers.
• Secure workspaces, enforce roles, investigate abuse, and maintain auditability.
• Operate WhatsApp automation, including webhook processing, template-policy enforcement, and delivery tracking.
• Improve reliability through diagnostics, rate limiting, backup, and recovery workflows.

Meta And WhatsApp Data

When a customer connects a Meta or WhatsApp asset, MatnBot uses the authorized account, phone-number, message, webhook, template, and delivery-status data only to provide the connected-channel automation selected by that customer. MatnBot does not sell connected channel message data or use it for unrelated advertising profiles.

Meta deauthorization and data-deletion callbacks are processed through signed requests. Raw signed requests, access tokens, app secrets, and external user identifiers are not intentionally exposed in public pages, status pages, or ordinary support views.

Service Providers And International Processing

ITBeep uses Hetzner for production infrastructure and OpenAI for configured AI processing. Meta and WhatsApp process connected-channel data under their own platform terms. Limited information may also be processed by configured email, payment, monitoring, and backup providers when those services are enabled for a customer. ITBeep limits each provider to the data and purpose needed to deliver, secure, support, or bill the service.

Providers may process data outside the customer's country. Where required, ITBeep uses contractual, access-control, and security measures intended to protect those transfers.

Cookies And Similar Storage

The application uses authentication/session storage needed to keep users signed in and protect private dashboard routes. Final cookie names, analytics choices, and retention values are minimized to what is needed for security, authentication, and service operation.

Retention And Deletion

Default WhatsApp retention is 7 days for raw webhook payloads, 30 days for normalized event payloads, 365 days for messages, 30 days for media, 90 days for AI and tool artifacts, and 365 days for tickets and operator annotations. Workspace policy and legal obligations may adjust these periods within supported limits. A valid legal hold may temporarily suspend deletion.

Data deletion can be requested through the data deletion page. The request flow creates an opaque case code and requires ownership verification before account or conversation data is deleted.

User Rights

Depending on the applicable law and account relationship, users may request access, correction, export, restriction, objection, or deletion. MatnBot reviews requests, verifies ownership where needed, and responds through the contact channel provided.

Government And Legal Requests

ITBeep reviews the legal basis and scope of government requests, challenges requests that appear unlawful or excessive where permitted, limits disclosure to the minimum required, and documents the request and response. ITBeep may notify affected customers unless the law prohibits notice.