This English translation is provided for convenience. If there is any difference, the Arabic version prevails.

Privacy Policy

Effective date: 11 August 2026

Flow Less Company, as the company that owns and operates the Watsio platform and app ("we", "the platform" or "the service"), is committed to protecting the privacy of your data and your customers' data. This policy explains how data is collected, used, stored and shared. It is designed to comply with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL), app store requirements and Meta policies.

1. Company information (data controller)

Legal name: Flow Less Company (شركة فلو ليس)
Unified national number / Commercial Registration: 7053798596
VAT number: 314666440600003
National address: Riyadh – Al Yasmin District – Anas Ibn Malik Street – Postal code 13326 – Building number 3998 – Additional number 6622, Kingdom of Saudi Arabia.
Email for contact and legal requests: privacy@flowless.chat
Website: www.watsio.com (operated by Flow Less Company — www.flowless.chat)
Phone number: +966594005858

2. Data we collect

We collect the minimum data needed to run the service efficiently:

Account data: name, email address, phone number and encrypted password.
WhatsApp content data (messages and media): we store the content of messages, conversations and media sent and received through the service so you can manage your communication with your customers.
Metadata: message send times, delivery and read statuses, and phone numbers.
Usage and crash data (Analytics & Crash Data): we use tools such as Firebase Analytics, Crashlytics, Sentry and Meta Analytics to collect technical data about how the app is used, device type, operating system and crash logs, in order to improve app performance.

3. Where and how we store your data

Local hosting: in line with Saudi regulations, all your core data and databases are hosted and stored on secure, reliable servers inside the Kingdom of Saudi Arabia.
Operational emails: operational emails, such as email confirmation and account notifications, are sent through an email provider hosted outside the Kingdom (Germany). This covers only the recipient's address and the content of that email, and does not include the content of WhatsApp conversations.
Data retention period: we keep the content of your WhatsApp messages, conversations and media for a maximum of one year (12 months), unless you (the user) delete it manually from your dashboard before that period ends. Once you delete it, it is permanently erased from our servers.
Account deletion: you can request deletion of your account and all associated data at any time through the app settings or by contacting us. On deletion, your data is permanently erased in accordance with applicable regulations.

4. Sharing data with third parties and AI processors

We never sell your data. Data is shared only to run the service and provide the features you requested:

WhatsApp service providers (BSPs): to provide the messaging service, we use the official connection providers 360dialog and Meta Cloud API. Sending and receiving are subject to Meta's privacy policies.
Payment gateways: payments and subscriptions are processed securely through Tap Payments. We do not store your credit card details on our servers.
AI features: Watsio provides advanced features (such as conversation summaries, reply suggestions and ticket classification). To provide these features, the relevant conversation text is exchanged securely and temporarily with advanced external language models, namely OpenAI and Groq. Data is sent over encrypted channels (API) and is used only to generate real-time replies and results. These third parties are not allowed to use your data or your customers' data to train their general language models.
Analytics tools: we share anonymous technical usage data with analytics providers (such as Firebase) to improve the user experience.

5. Your rights (under Saudi regulations and app store requirements)

As a user, you have the right to:

Access: request a copy of the data we process about you.
Correction: correct any inaccurate data.
Destruction / deletion: delete your conversations manually at any time, or request deletion of your entire account.
Withdrawal of consent: you can turn off AI features or disconnect your Meta account from your account settings.

To exercise any of these rights, please contact us at: privacy@flowless.chat.

6. Protection of children

The service is intended for businesses (B2B) and is not meant for anyone under 18 years of age. We do not knowingly collect children's data.

7. Changes to this privacy policy

We may update this policy from time to time to keep up with technical or legal changes. We will notify you of any material changes by email or through an in-app notice.