Privacy Policy

Account data: your mobile number, application or business name, contact email, and the application logo you upload during onboarding.

Usage data: verification request logs (destination, channel, delivery status, time) and the credit ledger — both required to operate the service and bill correctly.

End-user data: the phone numbers you send verification codes to on behalf of your application. We process them only to deliver the code and never use them for anything else.

We use your data to run the service: sending and checking codes, metering credits, reviewing new accounts to prevent fraud and impersonation, and improving delivery quality.

We do not sell your data or your customers' data to any third party, and we never use end-user phone numbers or emails for marketing.

We rely on trusted providers to operate the platform: a licensed Saudi SMS provider to deliver text messages, Meta Platforms Ireland Limited to deliver messages over the WhatsApp Business Platform, an email provider for platform emails such as receipts and account notices, a certified payment gateway to process payments (we never store your card details on our servers), and Amazon Web Services (AWS), which hosts the platform and its database in the Frankfurt region.

When you send over WhatsApp, the recipient's phone number and the verification code are passed to Meta so it can deliver the message; Meta processes that data under its own terms and privacy policy.

Each provider receives only the minimum data needed to do its job.

Verification codes are stored hashed — they cannot be read back — and expire within minutes. We keep verification logs and financial records for as long as needed for billing and regulatory compliance.

Recipient phone numbers are masked in our operational logs: we record a short prefix and the last four digits only, so a full number is never written to a log line.

Our security controls include encrypted connections, API keys stored hashed and shown only once, and restricted internal access to data.

You may request access to, correction of, or deletion of your personal data, as guaranteed by the Saudi Personal Data Protection Law. Email support@tawked.com and we will respond within a reasonable time.

Step-by-step instructions for deleting an account, or for a message recipient to have their number removed, are on our data deletion page.

For any question about this policy or your data, email support@tawked.com, or reach us through the contact page or WhatsApp.