Hadeelo

Data processing agreement

Last updated ⁨21 October 2026⁩

This agreement is part of the terms of service between Knowledge Treasures LLP, India (“we”) and the business using Hadeelo (“you”). It covers the personal data of your customers and contacts that Hadeelohandles for you. You decide why and how that data is used (you are the “controller”); we handle it only for you (we are your “processor”).

1. What we handle, and why

  • Whose data: people who message your business on WhatsApp, and people on customer lists you add.
  • What data: WhatsApp phone numbers and profile names; messages, photos, voice notes, videos and documents; delivery information; and the names, labels, notes and preferences your staff add.
  • Why: only to provide Hadeelo to you — receiving, showing, storing, sending and organising your WhatsApp conversations — for as long as you use Hadeelo.

2. Only on your instructions

We use this data only to provide Hadeelo as you use and configure it. These terms and your use of Hadeelo are your instructions. We never use the data for our own purposes, never sell it, never use it for advertising and never use it to train artificial intelligence. If we believe an instruction breaks data protection law, we will tell you.

3. Confidentiality

Everyone at Knowledge Treasures LLP who can access the data is bound to keep it confidential.

4. Security

  • All data travels encrypted (HTTPS).
  • Each business can reach only its own data; passwords are stored only in scrambled form.
  • The key Meta gives us to send messages for your number is stored locked (encrypted) and is used only for your business.
  • Files are kept in private storage; access is given only to your signed-in staff, through links that expire in 5 minutes.
  • The database refuses any access that does not come through Hadeelo’s own servers.

5. Other companies we use (sub-processors)

You allow us to use these companies to provide Hadeelo. Each is bound to protect the data as we are.

  • Meta Platforms — Carries WhatsApp messages (WhatsApp Business Platform). Where: United States / Ireland.
  • Supabase — Database and file storage. Where: Frankfurt, Germany.
  • Vercel — Website and servers. Where: Servers in Frankfurt, Germany (US company).
  • Google (Gemini AI) — Translation, voice notes to text, AI Answers and Build My Flow — Premium, only when switched on. Not used if the business connects its own AI key (then the business’s own agreement with Google or OpenAI applies). Where: Varies.
  • Google, Apple, Mozilla — Deliver alerts to staff devices, only if alerts are switched on (content encrypted). Where: Varies.

We will tell you before adding or replacing one, by email or inside Hadeelo, so you can object. If you object for good reason and we cannot find a solution, you may close your account.

6. Data outside the European Union

The data is stored in Germany. Some sub-processors are based in the United States, and we support Hadeelo from India. Where data leaves the European Union, we rely on the European Union’s standard contractual clauses or another lawful safeguard.

For businesses in Oman: the owner’s consent, given when the account is created, covers keeping the business’s data outside Oman as Oman’s Personal Data Protection Law requires. You remain responsible for your own customers’ consent to receive your messages.

7. Helping you

  • People’s requests: if one of your customers asks to see, correct or delete their data, we help you do it (see Delete my data). If they ask us directly, we pass the request to you.
  • Security incidents: if we learn of a breach affecting your data, we tell you without undue delay, with what we know, so you can meet your own duties.
  • We give you the information you reasonably need to show that this agreement is followed, and answer your questions about it.
  • Requests from the police, courts or other authorities: we have never had one. If we do, we check that the request is lawful before we answer, we give only the minimum information it asks for, we keep a record of the request and of what we sent, and we tell you unless the law forbids it.

8. When you leave

When your account closes, you can ask for a copy of your conversations first. Then we delete your data within 30 days, including files and our raw copies of WhatsApp notices, unless the law requires us to keep something — in which case we tell you what and why.

9. Contact

Knowledge Treasures LLP, India · sales@knowledgetreasures.com