Privacy Policy

Last updated: July 2026

RABT ("RABT", "we", "our", "us") is an omnichannel business messaging platform operated by RABT Business Ltd, a company registered in England & Wales (Company No. 17223646), operating in the Kingdom of Saudi Arabia under the trade name Global OdooTech.

This Privacy Policy explains what personal data we collect, how we use it, how we store and protect it, and how you can exercise your rights — including when you interact with businesses that use RABT through WhatsApp, Facebook Messenger, Instagram, Telegram, or website live chat.

1. Who We Process Data For

RABT provides software to business customers ("Business Users"). When you message a business through Messenger, Instagram, WhatsApp, or another channel connected to RABT, that business is the data controller of your conversation, and RABT processes the data on its behalf.

2. Information We Collect

a) Account data (Business Users): name, email address, phone number, company details, and billing information.

b) Data received from Meta Platforms (Facebook Messenger, Instagram, WhatsApp Business Platform): When a Business User connects a Facebook Page, Instagram professional account, or WhatsApp Business account, we receive through Meta's APIs:

• Message content sent to and from the connected Page or account (text, images, and other media);
• Sender identifiers assigned by Meta (Page-Scoped ID / Instagram-Scoped ID) and, where permitted, the sender's public profile name and profile picture;
• Message metadata such as timestamps and delivery status;
• Basic Page / account information needed to operate the connection (Page name, Page ID, Instagram account ID).

We access this data solely to display conversations to the Business User in their RABT inbox, to enable them to reply, and to provide optional automated (AI-assisted) replies configured by the Business User. We do not use Meta Platform data for advertising, profiling unrelated to the messaging service, or resale.

c) Technical data: log data, IP addresses, and device/browser information used for security and service operation.

3. How We Use Information

• To deliver, operate, and secure the RABT messaging service;
• To route messages between end customers and Business Users;
• To generate optional AI-assisted replies where the Business User has enabled this feature (see Section 5);
• To process subscriptions and payments;
• To comply with legal obligations.

4. Data Sharing

We do not sell personal data. We share data only with:

• Meta Platforms, Inc. — to send and receive messages through Messenger, Instagram, and the WhatsApp Business Platform;
• AI providers (OpenAI, L.L.C. and Anthropic, PBC) — message text may be transmitted to these providers to generate automated replies, only when the Business User enables AI features. These providers are contractually restricted from using the data to train their models under the API terms we operate on;
• Infrastructure providers (cloud hosting, push notifications) — under data-processing agreements;
• Payment processors (Stripe) — for billing of Business Users;
• Public authorities where required by law.

5. AI-Assisted Replies

Business Users may enable automated replies powered by third-party large-language-model providers. When enabled, the content of incoming messages is processed to produce a reply. Business Users can disable AI processing at any time, and conversations can be taken over by a human agent at any point.

6. Data Retention

Conversation data is retained for as long as the Business User's account is active or as needed to provide the service. Business Users may delete conversations at any time. When a Business User disconnects a Facebook Page or Instagram account, we stop receiving data from Meta for that asset. Upon account termination, associated data is deleted within 90 days, except where retention is required by law.

7. Data Deletion Requests

You may request deletion of your personal data at any time. Full instructions are available at: https://globalodootech.com/legal/data-deletion

If you contacted a business through Messenger or Instagram and want your conversation data deleted from RABT, you may contact the business directly or email us at [email protected] identifying the business and the channel used, and we will process the deletion within 30 days.

8. Your Rights

Subject to applicable law — including the Saudi Personal Data Protection Law (PDPL) and the UK GDPR — you may request access to, correction of, portability of, or deletion of your personal data, and you may object to or restrict certain processing. Contact: [email protected].

9. Security

We use encryption in transit (TLS), access controls, and audit logging to protect personal data.

10. Children

RABT is not directed at individuals under 18 and we do not knowingly process their data.

11. Changes

We will post any changes to this policy on this page with an updated revision date.

12. Contact