Privacy policy

Hadeelo is a service that lets a business answer its WhatsApp messages from one shared screen. It is run by Knowledge Treasures LLP, India (“we”). This page explains what information Hadeelo holds, why, who else handles it, and how to have it deleted. Questions: sales@knowledgetreasures.com.

Two kinds of people, two roles

• Businesses that use Hadeelo (the owner and their staff). For their account details, we decide how the information is used.
• Their customers — people who send a WhatsApp message to a business that uses Hadeelo. That conversation belongs to the business. We only store and process it on the business’s behalf and on its instructions, as set out in our data processing agreement. If you are one of these customers, the business you wrote to is responsible for your messages; you can also contact us and we will help.

What we hold

About businesses and their staff:

• Business name; each staff member’s name and email address.
• Passwords — stored only in scrambled form (a “hash”), so nobody, including us, can read them.
• A sign-in cookie on your device, lasting up to 30 days, and a count of wrong password attempts to stop guessing.
• The WhatsApp Business account you connect: its phone number, the account and number identifiers Meta gives it, and the access key that lets Hadeelo send and receive messages for you.
• If you switch on alerts: an address your browser gives us so we can send alerts to that phone or computer.
• The business’s settings: opening hours, automatic replies, approved message wording, labels and campaigns.

About the business’s WhatsApp customers (held for the business):

• Their WhatsApp phone number and the profile name they chose on WhatsApp.
• The messages exchanged with the business, including photos, voice notes, videos and documents.
• Delivery information from WhatsApp (sent, delivered, read).
• Anything the business’s staff add: a name they save for the customer, labels, private notes, who looks after the chat, and whether the customer asked to stop receiving offers.
• Customer lists the business chooses to add to Hadeelo.

We also keep a copy of the raw notices WhatsApp sends us, for up to 90 days, so we can investigate problems.

Why we hold it, and on what basis

• To provide the service the business signed up for: showing, sending and organising its WhatsApp conversations. For business accounts, this is needed to perform our contract with the business.
• To keep accounts secure and to investigate faults — our legitimate interest in running a safe, working service.
• For customers’ messages, we act only on the business’s instructions. The business decides why it holds them and is responsible for having a lawful basis.
• To meet legal obligations.

We use WhatsApp data only to run Hadeelo for the business that connected it — never for our own purposes. We do not sell any of this information, we do not use it for advertising, we do not use it to train artificial intelligence, and we do not send marketing to a business’s customers ourselves.

Who else handles the data

• Meta Platforms (WhatsApp Business Platform) — carries every WhatsApp message to and from the business, under the WhatsApp Business terms, acting for the business.
• Razorpay — takes payments for Hadeelo plans (UPI, cards, net banking). Card and bank details go straight to Razorpay; we never see or store them. We only receive the amount, the date and whether the payment went through.
• Supabase — stores the database and files, in Frankfurt, Germany.
• Vercel — runs the Hadeelo website and servers. The servers that handle your data are in Frankfurt, Germany.
• Google (Gemini AI) — only for Premium businesses that switch on translation, voice notes to text, AI Answers or Build My Flow: it reads those messages, voice notes or website pages to translate them, write them out or write the business’s answer, under Google’s paid-service terms, which don’t let Google use them to train its AI. A business that connects its own AI key instead sends them to the company it chose (Google or OpenAI), under its own agreement with that company.
• Google, Apple or Mozilla push services — only if you switch on alerts: they deliver the alert to your device. The alert’s content is encrypted before it leaves us.
• Cloudflare (Turnstile) — the check on the sign-up page that tells people from robots. It sees your internet address and browser details on that page only, for this check alone.

Each of these handles the data only to provide their part of the service. We will update this page before adding any new one.

Where the data is accessed

The data is stored in Germany. Some of our providers (Vercel, Meta and Cloudflare) are companies based in the United States, and we support Hadeelo from India, so the data may be accessed from outside the European Union. Where the law requires it, we rely on the European Union’s standard contractual clauses to protect it.

Businesses in Oman: Oman’s Personal Data Protection Law (Royal Decree 6/2022) asks for express consent before personal data is kept outside Oman. The business owner gives that consent when creating an account. Each business is responsible for having its own customers’ consent to receive messages and for telling them that the business uses Hadeelo.

How long we keep it

• Conversations, files and settings: for as long as the business keeps its Hadeelo account.
• When a business closes its account, or asks us to delete its data: deleted within 30 days — including files and the raw WhatsApp notices.
• Raw WhatsApp notices: 90 days at most. Sign-in cookies: up to 30 days.

How we protect it

• Everything travels encrypted (HTTPS).
• Each business can see only its own conversations and staff.
• Files are kept in private storage. Only signed-in staff of that business are given access to a file, through a link that expires after 5 minutes.
• The database refuses any access that does not come through Hadeelo’s own servers.

Your rights

• Ask for a copy of the information we hold about you (including in a form you can take elsewhere), have it corrected or deleted, or ask us to limit or stop using it — write to sales@knowledgetreasures.com.
• Customers of a business can reply STOP to stop receiving offers from that business through Hadeelo. To stop all messages from a business, tell the business — it must respect that.
• How to have data deleted is explained step by step on our Delete my data page.
• If you live in the European Union, you may also complain to your local data protection authority.

Children

Hadeelo is a tool for businesses and is not meant for use by children.

Changes

If we change this policy, we will update this page and its date. For significant changes we will tell business owners by email or inside Hadeelo.

Contact

Knowledge Treasures LLP, India · sales@knowledgetreasures.com

Our data protection officer can be reached at the same address: sales@knowledgetreasures.com.