Legal
Privacy Policy
Last updated: 6 November 2026
RAL Software Services ("RAL", "we", "us") is registered in the Kingdom of Bahrain (CR No. 196651-1). We build software that helps businesses message their customers on WhatsApp through the WhatsApp Business Platform provided by Meta. This policy explains what data we process, how and why we process it, and how you can ask us to delete it.
1. Who this policy covers
- Business customers who connect their WhatsApp Business Account to our software.
- End users who send messages to, or receive messages from, those businesses through our software.
- Visitors to our websites, including raltech.dev, operated under the RAL Technologies name. Section 12 explains cookies and advertising on those websites.
2. Data we process
- Business account data: business name, contact name, email, phone number, WhatsApp Business Account ID, phone number ID, and message templates.
- Message data: the content of messages sent and received through our software, the phone numbers and WhatsApp profile names of the people in the conversation, and delivery and read status.
- Access tokens: tokens issued by Meta that let our software act on a business's WhatsApp account with its permission.
- Technical data: IP address, browser type, and logs needed to run and secure the service.
We only get data from Meta that a business has allowed us to access through Meta's permission screens.
3. How and why we use it
- To send and receive WhatsApp messages on behalf of the business that connected its account.
- To create and manage message templates for that business.
- To show conversation history and message status to that business.
- To provide support, keep the service secure, and prevent abuse.
- To meet our legal obligations.
We do not sell personal data. We do not use message content for advertising or to train artificial intelligence models.
4. Legal basis
We process data to perform our contract with business customers, for our legitimate interest in running a secure service, and where required by law, in line with the Bahrain Personal Data Protection Law (Law No. 30 of 2018). For end-user data, the business that uses our software is the data controller, and we process that data on its instructions.
5. Sharing
We share data only with:
- Meta Platforms, to deliver WhatsApp messages. Meta's use is covered by the WhatsApp Business Policy.
- Hosting and infrastructure providers that store and process data for us under confidentiality obligations.
- Authorities, when the law requires it.
6. Storage and security
We encrypt data in transit (HTTPS/TLS), limit access to staff who need it, and store access tokens securely. Data may be processed outside Bahrain by our hosting providers under appropriate safeguards.
7. How long we keep data
We keep data for as long as the business account is active, or until deletion is requested. When a business disconnects its account or closes it with us, we delete its data within 30 days, unless the law requires us to keep it longer.
8. How to delete your data
Anyone who uses our software, or whose messages pass through it, can ask us to delete their data:
- Email info@raltech.dev with the subject "Data Deletion Request".
- Include your business name or the WhatsApp phone number the request is about.
- We confirm the request within 7 days and delete the data within 30 days.
You can also remove our app's access at any time in your Facebook settings under Settings & Privacy, then Settings, then Business Integrations, or in Meta Business Suite. When access is removed, we stop receiving new data and delete stored data within 30 days.
9. Your rights
You may ask to access, correct, or delete your personal data, or object to how we process it. Email info@raltech.dev. You can also complain to the Personal Data Protection Authority in Bahrain.
10. Children
Our service is for businesses. It is not meant for anyone under 18.
11. Changes
If we change this policy, we will update the date at the top of this page.
12. Websites, cookies and advertising
When you visit our websites, our hosting and security providers process technical data such as your IP address, browser type and the pages you request, so the site can be delivered and protected against abuse. We do not ask you to create an account to read the site, and we do not sell personal data.
Our websites may show advertising served by Google AdSense. Google and other third-party vendors use cookies to serve ads based on your previous visits to this website and to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our sites and other sites on the internet. You can:
- Opt out of personalised advertising from Google in Google Ads Settings.
- Opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
- Read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
- Block or delete cookies in your browser settings. The site still works without them.
Where the law requires your consent for these cookies, for example for visitors in the European Economic Area or the United Kingdom, consent is requested through a notice before personalised ads are shown. We process website data in line with the Bahrain Personal Data Protection Law (Law No. 30 of 2018), and you can use the rights in section 9 for this data too.
13. Contact
RAL Software Services
Flat 10, Building 2975, Road 7543, Block 575, Kingdom of Bahrain
Email: info@raltech.dev
Phone: +973 3821 8181