Privacy Policy

Ruwwad LLC ("Raqi.io", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (raqi.io) and use our platform services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Data Controller

The data controller responsible for your personal data is:

Ruwwad LLC
Email: info@raqi.io
Support: support@raqi.io

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Profile picture (via Google OAuth)
• Organization/workspace name
• Password (if applicable, stored in hashed form only)

2.2 Messaging Data

When you connect messaging channels (Instagram, Facebook Messenger, WhatsApp, Telegram, Email), we process:

• Conversation messages:text, media, and attachments
• Contact information:name, profile picture, and platform identifiers of your customers/leads
• Message metadata:timestamps, read receipts, delivery status
• Channel credentials:access tokens, stored encrypted

2.3 Usage Data

We automatically collect:

• IP address and approximate location
• Browser type, version, and operating system
• Pages visited, features used, and time spent
• Referring URL and exit pages
• Device identifiers and screen resolution

2.4 AI-Processed Data

When you use our AI features (AI agents, automated responses, content generation), we process:

• Conversation context provided to AI models
• AI-generated responses and suggestions
• Custom training data and brand voice settings you configure

2.5 Payment Information

Payment processing is handled by our third-party payment processor (Stripe). We do not store your complete credit card details. We receive and store only the last four digits of your payment card, billing address, and transaction history.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service:deliver omnichannel messaging, AI agent functionality, workflow automation, and analytics
• Process conversations:route messages between your connected channels and your team inbox
• Power AI features:generate AI responses, suggestions, and automated workflows using third-party AI providers
• Manage your account:authenticate users, manage subscriptions, process payments
• Communicate with you:send service updates, security alerts, and support notifications
• Improve the Service:analyze usage patterns, debug issues, and develop new features
• Ensure security:detect fraud, prevent abuse, and enforce our Terms of Service
• Comply with legal obligations:respond to lawful requests from authorities

4. Legal Bases for Processing

We process your personal data under the following legal bases (as applicable under GDPR and similar regulations):

• Contract Performance:processing necessary to provide the Service you subscribed to (Article 6(1)(b) GDPR)
• Legitimate Interest:processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security (Article 6(1)(f) GDPR)
• Consent:where you have given explicit consent for specific processing activities, such as marketing communications (Article 6(1)(a) GDPR)
• Legal Obligation:processing necessary to comply with applicable laws and regulations (Article 6(1)(c) GDPR)

5. Data Sharing & Third Parties

For a complete and up-to-date list, visit our Subprocessors page. We may also disclose your information if required to do so by law, in response to a valid legal process, or to protect the rights, property, or safety of Ruwwad LLC, our users, or the public.

6. Meta Platform Data

When you connect your Facebook Page, Instagram Business Account, or WhatsApp Business Account to our Service, we access and process data through Meta Platform APIs in accordance with the Meta Platform Terms and Meta Developer Policies.

Specifically:

• We access only the data necessary to provide the messaging and automation features you configure.
• We do not sell Meta Platform data to third parties.
• We do not use Meta Platform data for purposes unrelated to the Service.
• We do not use Meta Platform data to build user profiles for advertising.
• Access tokens are stored securely and are never exposed to unauthorized parties.
• We comply with all Meta Platform rate limits and data handling requirements.

User Data Deletion

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service:

Upon account termination, you may request an export of your data before deletion by contacting support@raqi.io.

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit:all data transmitted to and from our Service uses TLS 1.2 or higher.
• Encryption at rest:database records and file storage are encrypted using AES-256.
• API key security:API keys are hashed using SHA-256 before storage; raw keys are displayed only once at creation.
• Authentication:we support Google OAuth and secure session management via Supabase Auth.
• Access controls:role-based access control (RBAC) with workspace-level data isolation.
• Infrastructure:our backend runs in isolated Docker containers with automated deployments.

For more details, visit our Security page. While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access (Article 15 GDPR):request a copy of the personal data we hold about you.
• Right to Rectification (Article 16 GDPR):request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17 GDPR):request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing (Article 18 GDPR):request that we limit how we use your data.
• Right to Data Portability (Article 20 GDPR):receive your data in a structured, machine-readable format.
• Right to Object (Article 21 GDPR):object to processing based on legitimate interest.
• Right to Withdraw Consent (Article 7(3) GDPR):withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at info@raqi.io. We will respond within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know:request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete:request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination:we will not discriminate against you for exercising your CCPA rights.
• Right to Opt-Out of Sale:we do not sell your personal information.

11. International Data Transfers

Your data may be transferred to and processed in the United States, where our infrastructure providers are located. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements with all subprocessors.
• Compliance with the EU-U.S. Data Privacy Framework where applicable.

12. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such data promptly. If you believe a child under 16 has provided us with personal data, please contact us at info@raqi.io.

13. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience with the Service. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by posting a prominent notice on the Service or by sending you an email notification. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@raqi.io
• Support: support@raqi.io
• Website: raqi.io

Raqi.io is a product of Ruwwad LLC.