Effective Date: December 2025
Yafe Company (“we”, “us”, or “our”) is committed to protecting the privacy of users and ensuring that personal data is processed in accordance with the regulations applicable in the Kingdom of Saudi Arabia and in compliance with the Personal Data Protection Law issued by the Saudi Data and Artificial Intelligence Authority.
The Yafe platform operates as a technology platform that enables organizations to manage communication with their customers through WhatsApp by providing automation tools, conversation management, and integrations with various systems.
By using the Yafe platform or its services, you acknowledge and agree to the terms set forth in this Privacy Policy.
1. Scope of the Policy
This policy applies to:
- Users of the Yafe platform
- Organizations that use the platform’s services
- Individuals whose data is processed through our clients’ use of the platform
In some cases, Yafe acts as a data processor on behalf of the entities using the platform, while the entity using the platform acts as the data controller.
2. Data We Collect
2.1 Personal Data
We may collect personal data when registering on the platform or using its services, such as:
- Full name
- Email address
- Phone number
- Organization or company name
- Job title
- Other contact information voluntarily provided
2.2 End User Data
When organizations use the platform to communicate with their customers through WhatsApp, data such as the following may be processed:
- Phone number
- Message content
- Data entered into forms
- Interaction data related to messages
Such processing takes place based on the instructions of the entity using the platform.
2.3 Technical Data
We may automatically collect technical data when the platform is used, including:
- Internet Protocol address
- Device type
- Browser type
- Operating system
- Platform usage logs
- Performance and technical error data
3. Legal Basis for Data Processing
Personal data may be processed based on one of the following legal grounds:
- Consent of the data subject
- Performance of a contract or provision of a service
- Compliance with a legal obligation
- Legitimate interest that does not conflict with the rights of the data subject
4. Purposes of Data Processing
We use data for the following purposes:
- Operating the platform and providing its services
- Managing user accounts
- Enabling organizations to communicate with their customers through WhatsApp
- Improving service quality and user experience
- Developing new platform features
- Analyzing system usage
- Protecting the platform against fraud or unauthorized use
- Complying with applicable laws and regulations
5. Data Sharing
Yafe does not sell personal data to any third party.
Data may be shared in the following situations:
Service Providers
We may work with technical service providers to help operate the platform, such as hosting or cybersecurity providers. These providers are required to protect the data and are not permitted to use it for any other purpose.
Legal Compliance
Data may be disclosed if required under applicable laws, in response to requests from competent government authorities, or pursuant to a judicial order.
Business Transfers
In the event of a merger, acquisition, transfer of ownership, or sale of part of the company’s business, data may be transferred to the new entity in accordance with applicable regulations.
6. Transfer of Data Outside the Kingdom
Some data may be processed through technical service providers located outside the Kingdom of Saudi Arabia.
In such cases, Yafe undertakes the necessary measures to ensure that personal data is protected in accordance with the regulatory requirements governing cross-border data transfers.
7. Data Security
Yafe implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data during transmission
- Access control and authorization mechanisms
- Monitoring of security activities
- Periodic data backups
8. Data Retention
Yafe retains personal data only for the period necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
Once the purpose of processing has been fulfilled, the data will be deleted or anonymized in accordance with the applicable procedures.
9. Data Subject Rights
In accordance with the Personal Data Protection Law, the data subject has the right to:
- Be informed about how their data is collected and processed
- Access their personal data
- Request correction of inaccurate data
- Request deletion of data once the purpose of processing has ended
- Withdraw consent for data processing at any time unless another legal basis applies
Requests to exercise these rights can be submitted through the contact methods provided in this policy.
10. Security Incident Notification
In the event of a security incident that may lead to personal data leakage, loss, or unauthorized access, Yafe will take the necessary actions to address the incident and notify the relevant authorities when required.
11. Cookies
The Yafe platform uses cookies to improve the user experience and analyze platform usage.
Users can control cookie settings through their browser settings. However, disabling cookies may affect some platform functionalities.
12. Updates to the Privacy Policy
This Privacy Policy may be updated from time to time in accordance with regulatory or technical changes. Any updates will be published on this page along with an updated effective date.
13. Contact
For inquiries related to privacy or data protection, you may contact us through:
Email: info@yafe.sa
WhatsApp: 00966534292450
Address: Riyadh – Al Taawun District Prince Saud bin Abdulaziz bin Mohammed Road