Privacy Policy

This Privacy Policy explains how Domatrics FZ LLC, trading as Botmatrics and registered in a free zone in the United Arab Emirates ("Botmatrics", "we", "us", "our"), collects, uses, discloses and safeguards information in connection with our website and our platform for WhatsApp marketing, sales, support and commerce automation (together, the "Service").

This draft covers the sections a platform handling personal data across multiple countries typically needs, including cross-border transfer, GDPR-style and CCPA-style rights language. It has not been reviewed by qualified legal counsel in any jurisdiction and should be before it is relied on or published as final. It should also be reconciled with your actual data flows, sub-processor list and retention periods before publication.

1. Scope, and Our Two Roles

This policy covers two different relationships, because they carry different obligations:

• Visitors and Customers. When you visit our website, book a demo, or register a Botmatrics account, we act as the data controller of the personal data you give us directly (e.g. name, work email, phone, company).
• End users messaged through the Service. When a business customer uses Botmatrics to message its own customers on WhatsApp, we act as a data processor (or service provider) on that business's behalf. We process that conversation data only under the customer's instructions and for the purpose of providing the Service; the business customer remains the controller responsible for its own end users' data, including obtaining consent to message them. If you are an end user with a question about a message you received, please contact the business that messaged you directly.

2. Information We Collect

• Account and contact information: name, work email, phone number, company name and role, provided when you register, book a demo, or contact sales or support.
• Billing information: billing address and payment details, processed on our behalf by our payment processor; we do not store full card numbers ourselves.
• Customer Data processed on your behalf: WhatsApp conversation content, contact lists, templates, workflow configuration and campaign data you or your end users submit through the Service, as described in Section 1.
• Usage and device data: log data, IP address, browser and device type, pages viewed and actions taken in the dashboard, collected automatically, including through cookies and similar technologies (see our Cookie Policy).
• Communications: records of support requests, demo bookings and other correspondence with us.

3. How We Use Information

• to provide, operate, maintain and improve the Service;
• to process payments and manage subscriptions;
• to communicate with you about the Service, including support, security notices and, where permitted, product updates;
• to respond to inquiries and provide customer support;
• to monitor and analyse usage and performance, and to detect, investigate and prevent fraud, abuse and security incidents;
• to comply with legal obligations and enforce our agreements; and
• for other purposes disclosed to you at the time of collection, with your consent.

4. Legal Bases for Processing

Where applicable data protection law requires a legal basis, we rely on: performance of a contract with you (providing the Service you signed up for); our legitimate interests (operating, securing and improving the Service, and direct marketing to business contacts, balanced against your rights); compliance with a legal obligation; and, where required, your consent (for example, for certain marketing communications or non-essential cookies), which you may withdraw at any time.

5. How We Share Information

We do not sell personal data. We share information with:

• Meta / WhatsApp Business Platform. Messages sent and received through the Service are transmitted via the WhatsApp Business Platform, operated by Meta Platforms, Inc. and its affiliates, which processes that data under its own terms and privacy policy.
• Service providers. Cloud hosting, payment processing, analytics, customer support and email delivery providers, who process data on our behalf and under contractual confidentiality and security obligations.
• Professional advisers and authorities. Where necessary to comply with law, respond to a lawful request, or protect our rights, safety or property, or that of others.
• Corporate transactions. In connection with a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality protections.

6. International Data Transfers

We are based in Dubai, United Arab Emirates and use service providers located in other countries, including the WhatsApp Business Platform's global infrastructure. Where we transfer personal data across borders, including out of the European Economic Area, United Kingdom or other jurisdictions with data transfer restrictions, we use appropriate safeguards recognised under applicable law, such as standard contractual clauses, to protect that data, and we take reasonable steps to ensure recipients provide an adequate level of protection.

7. Data Retention

We retain personal data for as long as needed to provide the Service and for legitimate business purposes, such as maintaining performance, complying with legal, tax and accounting obligations, and resolving disputes. Customer Data processed on a business customer's behalf is generally retained for the duration of the subscription and for a limited period after termination to allow export, as described in our Terms of Service, after which it is deleted or anonymised unless a longer period is required by law.

8. Data Security

We use administrative, technical and physical safeguards designed to protect personal data against unauthorised access, loss, misuse or alteration, including encryption in transit, access controls and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. If you are in the European Economic Area or United Kingdom, these rights arise under the GDPR/UK GDPR; if you are a California resident, you may have similar rights under the CCPA, including the right to know what personal information we collect and to request its deletion, without discrimination for exercising these rights. To exercise a right, contact us at privacy@botmatrics.com; if you are an end user of one of our business customers, we will generally direct your request to that customer, who controls your data. You also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. Cookies

Our website uses cookies and similar technologies to operate, secure and improve the site, and to understand how it is used. See our Cookie Policy for details and how to manage your preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date and, for material changes, provide additional notice where required by law.

13. Contact Us

For privacy questions or to exercise your rights, contact us at privacy@botmatrics.com. Botmatrics is operated by Domatrics FZ LLC, Dubai, United Arab Emirates.