Privacy and data location

These answers come from our published privacy notice, data retention and data deletion pages. Those pages are the reference if anything differs.

Where is my customer data held?

All the details are on our data residency page, which we keep current. It says where the data sits today and the state of each region being prepared.

Will you move my data without telling me?

No. We will not change where your data sits without telling you first.

What data do you collect?

"The account details you enter, the customer conversations that arrive through the channels you connect, and basic service usage data."

Who can reach it?

"You and your team, according to the roles you set, and our engineers when you ask for support — every such session is logged with who, when, and for how long."

Do you use my customers' messages for ads or AI training?

No. For messages from WhatsApp, Instagram and Facebook: "We do not use it for advertising, we do not sell it, and we do not train AI models on it."

What leaves your servers?

"WhatsApp messages pass through Meta by nature. When Hadir AI is enabled, conversation content is sent to the model provider for the reply, and the reply is stored in your region. Invoices and payment details pass through the gateway you choose."

How long do you keep my data?

• Conversations and contacts: for the life of the subscription, until erasure.
• A workspace paused for non-payment or at the end of a trial: kept whole until erasure is requested.
• Export files: deleted 3 days after they are built.
• Audit logs: 365 days.
• Invoices: as long as tax law requires; they survive erasure, and they contain no conversation content.

How do I have my data deleted?

The workspace owner requests erasure from Settings in the account area. A 14-day period starts, cancellable from the same page; after it the workspace is deleted with its conversations and contacts, and user names and email addresses are anonymised. If you want a copy first, export it before requesting erasure. See Export and erase your data.

I messaged a business that uses Hadir Chat. How do I delete my data?

That data belongs to the business; we process it on their behalf. Ask the business directly, which is fastest, or write to privacy@hadir.chat with the phone number or account you messaged from and the name of the business. We pass the request to them and complete it within 30 days.

Do you sign a data processing agreement?

Yes. We sign a DPA in Arabic. Request it from privacy@hadir.chat.

What happens if there is a breach?

"Affected workspace owners are notified within 72 hours of our becoming aware of a breach touching their data — its nature, likely effect and our response — and the authorities as the law requires."