Privacy Policy

Last updated: 17 June 2026  ·  AutoNex (Operated by Autonex Technology, KSA)

1. Who We Are

AutoNex ("we", "our", "us") is a WhatsApp AI automation platform for local businesses in Saudi Arabia and the GCC. Our service lets businesses automate bookings, answer FAQs, and handle customer conversations via WhatsApp Business API.

2. Data We Collect

Business account data (collected from you when you sign up):

• Name, email address, business name, vertical, and WhatsApp Business number
• Payment information processed securely through Moyasar (we do not store card numbers)
• Business configuration: hours, AI instructions, staff accounts

Customer conversation data (received when your customers message your business):

• WhatsApp phone numbers (wa_id) of customers who message your business
• Message content, timestamps, and media sent to your business number
• Reservation details, preferences, and feedback submitted through the AI

Usage data:

• Dashboard activity, feature usage, and conversation counts for billing and analytics

3. How We Use Your Data

• To operate and deliver the AutoNex service (routing messages, running the AI, storing bookings)
• To bill you via Moyasar and manage your subscription
• To send you service notifications (escalation alerts, digest emails)
• To improve model quality using anonymized, aggregated patterns, never individual conversations
• To comply with legal obligations under Saudi law and Meta's WhatsApp Business Platform policies

4. Who We Share Data With

• Meta (WhatsApp), messages are transmitted through Meta's WhatsApp Business API. Meta's own Privacy Policy applies.
• Moyasar, Saudi-certified payment processor for subscription billing. PCI DSS compliant.
• Anthropic, AI inference for generating replies. Data is processed per Anthropic's API usage policy; it is not used to train public models.
• Infrastructure providers, PostgreSQL database, Redis cache, and file storage hosted in EU/GCC regions.

We do not sell, rent, or share personal data with advertisers or third-party marketers.

5. Data Retention

• Conversation messages: retained for 12 months from the date of the message, then automatically deleted.
• Reservation and customer records: retained while your account is active and for 90 days after cancellation.
• Account and billing records: retained for 7 years as required by Saudi accounting regulations.

6. Your Rights

Under the Saudi Personal Data Protection Law (PDPL) and applicable regulations, you have the right to:

• Access, request a copy of your personal data
• Correction, ask us to correct inaccurate data
• Deletion, request deletion of your personal data (subject to legal retention obligations)
• Portability, receive your data in a structured format
• Withdraw consent, your customers can request data deletion by messaging your business number and asking the AI to "forget me"

To exercise your rights, email us at privacy@autonex.ai.

7. Cookies and Local Storage

The AutoNex dashboard uses:

• An authentication cookie (_anx_token) to keep you signed in, strictly necessary, no consent required.
• localStorage for dashboard preferences (language toggle, UI state), stored only in your browser.

We do not use advertising cookies or third-party tracking scripts.

8. Security

We protect your data with TLS 1.3 encryption in transit, AES-256 encryption at rest, database-level tenant isolation, and role-based access controls. API credentials (Meta access tokens, Moyasar keys) are stored encrypted at rest.

9. Changes to This Policy

We will notify active account holders by email at least 14 days before material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

For privacy questions or requests, contact our data team:
Email: privacy@autonex.ai
AutoNex Technology, Kingdom of Saudi Arabia