Privacy Policy

Cookies Policy

Introduction

This Cookies Policy explains how Yafe ("Yafe" or "we") uses cookies and similar technologies when you visit our website or use our platform and services.

Please read this policy together with our Privacy Policy, which explains how personal data is collected, processed, stored, and protected.

By continuing to use the website or platform, you agree to the use of cookies as described in this policy.

Who We Are

Yafe is a Saudi technology company specializing in digital business communication solutions. Our services include WhatsApp Business solutions, AI assistants, automated replies, Callbot, marketing campaigns, and in-chat payment solutions.

What Are Cookies?

Cookies are small text files stored on your device when you visit websites.

These files help us:

• Recognize the user's device.
• Improve website performance.
• Save preferences and settings.
• Analyze website usage.
• Enhance user experience.
• Measure marketing campaign effectiveness.

Cookies do not directly identify you personally unless you voluntarily provide your data through the website or platform.

How Do We Use Cookies?

Yafe uses cookies for the following purposes:

Essential Cookies

These are necessary for the website and platform to operate correctly.

They are used for:

• Secure login.
• User authentication.
• Protecting accounts and systems.
• Preventing unauthorized use.
• Operating core website functions.

Some services may not work correctly if these cookies are disabled.

Analytics Cookies

These cookies help us understand how visitors use the website.

Data that may be collected includes:

• Number of visitors.
• Most visited pages.
• Browsing duration.
• Traffic sources.
• Website performance.

This data is used for statistical and analytical purposes only and is not intended to directly identify the user.

Marketing Cookies

These cookies are used to measure marketing campaign performance and improve the content and ads presented to users.

They may help with:

• Measuring marketing campaign effectiveness.
• Understanding visitor interests.
• Improving marketing messages.
• Displaying more relevant content to users.

Third-Party Cookies

Yafe may allow certain trusted service providers to use cookies on the website for the purposes described in this policy.

Key providers include:

Google

Google services are used for purposes such as:

• Analyzing website performance.
• Measuring visitor traffic.
• Monitoring technical performance.
• Measuring marketing campaign results.

Meta (Facebook & WhatsApp)

Meta services are used for purposes such as:

• Analyzing marketing campaign performance.
• Measuring ad engagement.
• Improving marketing targeting.
• Providing performance statistics and reports.

Data processing by these providers is subject to their respective privacy policies.

Managing Cookies

You can control, delete, or block cookies through your browser settings.

Most browsers allow users to:

• View stored cookies.
• Delete cookies.
• Block all cookies.
• Block specific cookies.
• Receive a notice before cookies are stored.

Please note that disabling some cookies may affect website performance or certain features.

Data Protection

Any data collected through cookies is handled in accordance with Yafe's Privacy Policy and in compliance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL). Where a legal or technical requirement applies to obtain user consent before using certain types of cookies, Yafe will request such consent and provide the ability to update cookie preferences or withdraw consent where available, in accordance with applicable laws and regulations.

Policy Updates

Yafe may update this Cookies Policy from time to time to reflect technical, regulatory, or operational changes.

Any updates will be published on this page with the new effective date indicated.

Continued use of the website after updates are published constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Cookies Policy or how Yafe uses cookies, you may contact us at:

Security and Compliance Policy

Issue Date: 08/07/2026

Introduction

At Yafe, information security, privacy, and compliance are at the core of all our services and operations.

We are committed to protecting customer data, maintaining the security of our platform, and complying with applicable laws and regulations in the Kingdom of Saudi Arabia.

This page outlines the procedures, controls, and practices Yafe applies to ensure the confidentiality, integrity, and availability of data.

Security by Design

Yafe's services are built with security practices intended to protect data and reduce operational and security risks.

We continuously review and improve security controls and operational procedures to provide a secure and reliable environment for our customers.

Data Protection

Yafe applies a range of technical and organizational measures to protect customer data throughout its lifecycle.

These measures include:

• Encrypting data in transit using secure communication protocols (TLS).
• Encrypting stored data using approved encryption standards.
• Protecting data against unauthorized access, modification, or disclosure.
• Applying secure controls and procedures for data handling and storage.

Access Management and Permissions

Access to systems and data is limited to authorized personnel only and according to business requirements.

Access management controls include:

• Multi-factor authentication (MFA).
• User identity verification and permission management.
• Role-based access permissions.
• Periodic review and monitoring of access rights.
• Logging and tracking activities and operations within systems.

Infrastructure Security

Yafe relies on a secure technical infrastructure and applies best practices to protect systems and services.

Security measures include:

• Network and system protection controls.
• Continuous monitoring of security activities.
• Threat detection and response.
• Vulnerability and security risk management.
• Applying approved security configurations for systems and services.

Backup and Business Continuity

Yafe is committed to ensuring service continuity and minimizing the impact of outages or unexpected incidents.

Measures include:

• Performing regular data backups.
• Disaster recovery plans.
• Business continuity procedures.
• Incident response and recovery mechanisms.

Compliance

Yafe complies with applicable laws, regulations, and regulatory requirements related to data protection and information security in the Kingdom of Saudi Arabia.

Our compliance framework includes:

• Personal Data Protection Law (PDPL).
• Privacy and data protection requirements.
• Risk management and information security practices.
• Regulatory and contractual obligations linked to our services.

Information Security Management

Yafe applies governance practices and security controls aimed at strengthening data protection and continuously improving security levels.

This includes:

• Security policies and procedures.
• Risk assessment and management.
• Continuous improvement of security controls.
• Raising security awareness and applying appropriate operational controls.

Data Hosting and Location

Yafe applies the controls necessary to protect customer data and comply with relevant regulatory requirements.

Customer data is hosted and managed within the Kingdom of Saudi Arabia in accordance with applicable laws and regulations.

Our Commitment

Security and compliance are a fundamental part of Yafe's commitment to its customers and partners.

We continuously develop our security controls and improve our operational and oversight practices to maintain a secure and reliable platform that supports our customers' business growth with confidence.

Contact Us

For any inquiries related to security, compliance, or data protection, you may contact us at: