Legal Document

Privacy Policy

Last updated: October 8, 2026 — Version 1.1

This policy is based on the Personal Data Protection Law (PDPL) issued by Royal Decree No. (M/19) dated 9/2/1443H and its Implementing Regulations, issued by the Saudi Data and AI Authority (SDAIA), and is compliant with the Saudi E-Commerce Law.

1. Introduction

AWNK respects the privacy of its users and customers, and is committed to protecting their personal data in accordance with applicable Saudi regulations, most notably the Personal Data Protection Law.

This policy explains what data we collect, the legal basis for processing it, how it is shared, and your rights in relation to it.

2. Who We Are (Data Controller)

The AWNK service provider is a licensed sole proprietorship, registered under a Freelance Certificate issued by the Ministry of Human Resources and Social Development.

Business name: AWNK
Licensed activity: Mobile Application Software Development
Freelance Certificate: FL-219188518
National address: Riyadh, Kingdom of Saudi Arabia

For the purposes of the Personal Data Protection Law, AWNK acts as the Data Controller for personal data collected through its services.

3. Data We Collect

We collect the following categories of data, depending on how you use the service:

Category	Details
Identification data	Name, WhatsApp contact number, email address
Business data	Business name, trade activity, branches, billing information (for subscribed businesses)
Conversation content	Message text exchanged between your customers and the AWNK agent
Technical data	Usage logs, interaction times, performance reports, IP address
Payment data	Processed through an approved payment gateway; we do not store card details on our systems

4. Legal Basis and Purposes of Processing

We process your data on the following legal bases:

Contract performance: to provide and manage the service you subscribed to.
Legitimate interest: to improve the accuracy of AWNK's replies and develop the service.
Legal compliance: to fulfill obligations imposed by Saudi regulations.
Explicit consent: for any direct marketing purpose — your data will not be used for marketing without your prior explicit consent.

5. Sharing Data with Third Parties

To operate AWNK, we rely on trusted technology providers. This may involve sharing limited data with them:

Provider	Purpose	Processing Location
Meta (WhatsApp Business API)	Sending and receiving WhatsApp messages	Per Meta's global policies
Anthropic	Generating AWNK's intelligent replies	Per the provider's privacy policy
Approved cloud hosting provider	Hosting the site and database	Inside the Kingdom of Saudi Arabia
Email service provider	Sending notifications and alerts	Per the provider's policy
Google Fonts	Rendering fonts used on the site	Receives visitor IP when fonts load

We do not sell your personal data, and we do not share it with any third party for commercial purposes outside the scope of operating the service.

6. Cross-Border Data Transfer

Some technology providers (such as Meta and Anthropic) may process limited data outside the Kingdom of Saudi Arabia, under appropriate contractual and technical safeguards, and in accordance with the rules on cross-border personal data transfer set out in the Implementing Regulations of the Personal Data Protection Law.

We retain core data and the database on servers inside the Kingdom of Saudi Arabia.

7. Data Retention

We retain your data for the following periods, depending on its category:

Account and business data: throughout the subscription period, and for 12 months after it ends, then deleted or anonymized.
Conversation content: throughout the subscription period, and for 6 months after the last interaction, then deleted — unless the subscriber requests a longer period.
Financial and accounting data: in accordance with periods required by Saudi regulations (typically 10 years).
Technical logs: up to 12 months for security and analysis purposes.

8. Data Security

We take reasonable technical and organizational measures to protect your data, including:

Encryption of communications via HTTPS/TLS.
Restricting access to data to authorized personnel only.
Monitoring access and detecting unusual patterns.
Regular backups inside the Kingdom.
Masking phone numbers in technical logs.

In the event of a breach posing serious risk to your data, we are committed to notifying the Saudi Data and AI Authority (SDAIA) and affected data subjects within the legally required timeframes.

9. Your Rights

Under the Personal Data Protection Law, you have the following rights:

Right to know: the purpose of collecting your data and the parties with access to it.
Right of access: to obtain a copy of your personal data held by us.
Right to correction: to request correction or completion of inaccurate data.
Right to destruction: to request destruction of your data when it is no longer needed.
Right to withdraw consent: to withdraw your consent to processing at any time.
Right to complain: to file a complaint with the Saudi Data and AI Authority (SDAIA).

To exercise any of these rights, contact us at: legal@awnk.ai

We commit to responding to your request within 30 days of receipt.

10. Children's Privacy

AWNK services are not directed at children below the legal age of majority, and we do not knowingly collect their data. If we discover that we have collected data from a child below the legal age, we will delete it immediately.

11. Cookies

Our website uses essential cookies for its proper operation (such as login session). We do not use tracking cookies for marketing purposes without prior notice. For details, see our Cookies Policy.

12. Updates to This Policy

We may update this policy from time to time to keep pace with regulatory or operational developments. Any update will be published on this page, with the "last updated" date revised. Your continued use of the service after the update is published constitutes implicit acceptance of it.

13. Contact Us

For any inquiry or request regarding your personal data:

For contact and complaints: legal@awnk.ai