"Platform": Refers to the Autorply website, applications, and all affiliated digital services.

"Client" or "User": Any individual or entity utilizing the Platform's services.

"Personal Data": Any information that identifies a user directly or indirectly, such as name, phone number, email address, IP address, chat content, browser data, or device data.

"Data Processing": Any action performed on data, such as collection, storage, transfer, modification, deletion, or analysis.

"Third Parties": Entities that collaborate with Autorply in operating or enhancing services (e.g., Meta, payment processors, cloud storage providers, telecom partners).

"Applicable Laws": Refers to the laws, regulations, and policies enforced in the Kingdom of Saudi Arabia, in addition to the terms and policies of external service providers such as Meta.

2.1 This policy applies to all data collected through the Platform, including the website, mobile applications, or API integrations.

2.2 By using the Platform, you consent to the collection and processing of your personal data in accordance with this policy.

2.3 Autorply adheres to the applicable personal data protection regulations enforced in the Kingdom of Saudi Arabia and the standards imposed by external providers such as Meta.

4.1 Most data is entered voluntarily by the user through registration forms, in-flow forms, account settings, or campaign interfaces.

4.2 Some data is collected automatically via cookies or usage analytics tools.

4.3 Autorply does not collect any data without the user's knowledge or consent.

6.1 Autorply does not share your personal data with third parties without your explicit consent, except in the following cases:

• Governmental or regulatory entities upon official request
• Service partners (e.g., Meta, payment gateways, email providers) strictly for service delivery
• Data hosting companies (e.g., AWS or similar), under secure and confidential contractual agreements

6.2 All parties receiving data are bound by strict confidentiality and data protection obligations.

8.1 Autorply implements industry best practices to safeguard your data, including:

• Encryption during storage and transmission
• Two-factor authentication
• Intrusion detection and prevention systems
• Regular encrypted backups
• Periodic security audits

8.2 Employees are trained in privacy policies, and unauthorized access to data is strictly prohibited.

8.3 Data Breach Notification: In the event of a security breach affecting the confidentiality or integrity of your personal data, Autorply commits to notifying you within the legally required timeframe using available communication channels. We will take all necessary technical and organizational measures to minimize the impact, including immediate investigation, assessment of scope, and coordination with authorities where applicable.

9.1 We retain user data only as long as necessary to provide services or meet legal requirements.

9.2 Upon account termination, data will be deleted within 30 days unless otherwise required by law.

9.3 Upon conclusion of the relationship, users may request a copy of their data or its complete deletion.

10.1 WhatsApp Business API services are subject to Meta's privacy policies. When using such services through Autorply, your data is processed under Meta's standards, available at: https://www.facebook.com/business/gdpr

10.2 Autorply does not access your message content unless required for support or legal compliance and only with official consent.

10.3 Autorply is a certified Meta Business Partner and complies with all relevant data protection and integration agreements.

11.1 Some data may be stored or processed on servers located outside the Kingdom of Saudi Arabia, strictly through providers that comply with recognized data protection standards.

11.2 Where cross-border data transfer occurs, Autorply ensures contractual safeguards are in place in line with applicable data protection regulations.

13.1 Autorply reserves the right to update this policy at any time, in accordance with legal or service developments.

13.2 Users will be notified of material changes via email or through the Platform.

13.3 Continued use of the Platform after such changes constitutes explicit acceptance of the updated policy.