Introduction

This policy explains how OpsBrain ("we", "the app") collects, processes, and protects your personal data in a manner aligned with the Saudi Personal Data Protection Law (PDPL).

Data We Collect

• Account and profile data (name, email, login information).
• WhatsApp conversations and leads.
• CRM contacts and deals.
• Ad performance data from advertising platforms.
• Technical usage data needed to run the service.

Purposes of Processing

We process data to operate the service, manage conversations and leads, generate AI replies and marketing copy, measure campaign performance, and improve the service and provide support.

Legal Basis & Consent (PDPL)

We rely on your consent, along with legitimate interest and contractual necessity, as the legal basis for processing. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

WhatsApp Opt-In and Opt-Out

WhatsApp messages require the recipient's explicit opt-in. Any recipient may stop messages at any time by replying STOP, and we will honor that request promptly.

Third-Party Processors

• Supabase — database, authentication, and hosting infrastructure.
• Anthropic — AI-generated replies and copy.
• OpenAI — optional image generation.
• Twilio / Meta — sending and receiving WhatsApp messages.
• Ad platforms (Meta, Google, TikTok, Snapchat) — ad performance data.

International Data Transfers

Some data may be processed outside the Kingdom of Saudi Arabia by the providers listed above. We apply appropriate safeguards consistent with the PDPL's cross-border transfer requirements.

Data Retention

We retain data for as long as you use the service and for as long as necessary to fulfil the processing purposes or to comply with legal obligations, after which we delete or anonymize it.

Your Rights Under PDPL

• Right to access your data.
• Right to correct inaccurate data.
• Right to delete your data.
• Right to withdraw consent at any time.

To exercise any of these rights, contact us at privacy@yourcompany.example.

Contact

For any privacy inquiry: privacy@yourcompany.example