Raabta by Komyosys

Privacy Policy

Last updated: 20 October 2026

Raabta is a WhatsApp customer-support platform made by Komyosys (“Komyosys”, “we”). Businesses (“our clients”) connect their WhatsApp Business number to Raabta so that an AI assistant and their team can answer their customers. This policy explains what data we handle, why, and the choices you have.

1. Who is responsible

• Our clients’ customers (people who message a business on WhatsApp): the business you messaged decides how your conversation is used; we process it on that business’s behalf and only to provide Raabta to it.
• Our clients and their staff (people who sign in to Raabta): Komyosys is responsible for this account data.

2. What we collect

• Conversations on a connected WhatsApp number: phone number, WhatsApp profile name, the messages, voice notes, images, documents, locations and contacts exchanged, delivery and read status, and ratings. If a business connects its WhatsApp Business app, also the messages it sends from the app, its WhatsApp contacts’ names and, if the business allows it, up to six months of earlier chats.
• Other channels a business turns on: for Instagram direct messages, your Instagram-scoped ID, name or username and the messages (links to photos you send); for email, your email address, name, the subject and text of your emails (attachment names only); for the chat on a business’s website, what you type and the name, phone or email you choose to give.
• Information derived from messages: voice-note transcripts, photo descriptions, a short summary, category, priority, mood and preferred language.
• From Meta, when a business connects WhatsApp: the IDs of its WhatsApp Business account and phone number and an access token that lets Raabta send and receive messages for that number. Tokens are kept in an encrypted vault.
• From Instagram, when a business connects its Instagram account: the account’s ID and username and an access token to read and answer its direct messages, kept in the encrypted vault. Disconnecting in Raabta stops all access.
• Client accounts: name, work email, role, sign-in times, settings and the actions taken in Raabta.
• Technical data: logs needed to run, secure and troubleshoot the service, and notification tokens for staff devices.

3. Why we use it

• To deliver and answer WhatsApp conversations for the business you contacted, and keep their history.
• To run the AI assistant and the features the business turned on (for example order confirmations).
• To keep the service secure and working, prevent abuse, and meet legal obligations.
• To measure and improve the service using counts that contain no message content or contact details.

We do not sell personal data, do not use conversations for advertising, and use data received through Meta’s WhatsApp Business Platform only to provide Raabta to the business that connected it.

4. AI processing

We use artificial intelligence to transcribe voice notes, describe photos, summarise and route conversations, suggest replies and, where the business enables it, answer customers automatically. AI replies are marked inside Raabta, and customers can ask for a person at any time. AI providers process content only to provide these features.

5. Who we share it with

Only service providers that help us run Raabta, under their data-processing terms:

• Meta Platforms (WhatsApp Business Platform, Instagram API) — to send and receive WhatsApp messages and Instagram direct messages.
• Supabase — database, encrypted file storage and server functions.
• Vercel — hosting of the Raabta web app.
• AI service providers — the AI features described above.
• Brevo — invitation and password emails to staff, and receiving and sending a business’s customer emails when it uses the email channel.
• PostHog (United States) — product usage statistics (counts and short codes only: never message text, phone numbers, names or other contact details).

Some providers process data outside Pakistan. We may also disclose data when required by law.

6. How long we keep it

Conversations are kept for as long as the business uses Raabta and needs them for its records. Technical logs and the activity history stay in the live system for 30–90 days and are then moved to encrypted, access-restricted archive storage, kept to investigate security incidents and disputes. When a business leaves, or when a valid deletion request is made, we remove the data from Raabta as described on our Data deletion page; a restricted record may be kept only where needed for security, disputes or legal obligations.

7. Security

Data is encrypted in transit and at rest, files are in private storage, access tokens are in an encrypted vault, each business only ever sees its own data, and access by staff and connected AI agents is permission-based and logged.

8. Your choices and rights

• Ask for a copy of your data, or ask for it to be corrected or deleted.
• Stop messaging a business at any time, or block its number in WhatsApp.
• Ask to speak to a person instead of the AI assistant.
• A business can disconnect Raabta at any time in its Meta Business settings or WhatsApp Business app.

Customers of a business can also contact that business directly. To make a request to us, email admin@komyosys.ai — see Data deletion. We may need to verify your phone number or account first.

9. Changes

We may update this policy. The date at the top shows the latest version.

10. Contact

Komyosys, Faisalabad, Pakistan. Email: admin@komyosys.ai.