Rasoul

Rasoul

Privacy Policy

What we collect, why, and who sees it — and what we will not do with your data under any circumstances.

Last updated: 18 August 2026

1. Introduction

This policy explains how Rasoul handles data when you use the Rasoul platform. Read it alongside the terms of service; together they form the agreement between us.

There are two different kinds of data here, and they are treated differently: your data as our customer, and your customers' data passing through the Platform. For the second kind we are a processor acting on your behalf, and you are the controller.

2. What we collect

Account data — which you provide:

  • Name, email address, and a hashed password that nobody can read, including us.
  • Subscription details: plan, start and end dates, and payment history.

WhatsApp data — which arises from connecting your number:

  • The session data needed to keep the number connected, and the phone number itself.
  • Messages sent and received through the number, contact names and numbers, and delivery and read states.
  • The tags, customer lists and campaigns you create.

Technical and operational data:

  • Error and request logs needed to run and diagnose the service, including IP address and request time.
  • A record of sign-in sessions (approximate device and time) so you can review who has accessed your account.

What we do not collect: your bank card details never pass through our servers and are not stored by us.

3. Why we use it

  • Running the Service: delivering your messages, showing your conversations, executing your campaigns.
  • Protecting your account: verifying identity, detecting suspicious sign-ins, preventing abuse.
  • Billing: determining your plan, its usage limits, and renewal reminders.
  • Support: diagnosing a fault you reported.
  • Improving the product: aggregate usage statistics, about the product and not about people.

And for nothing else — not for advertising, not for sale, and not for sharing with data brokers.

4. The AI agent

If you enable the AI agent, the inbound message and the business information you wrote yourself are sent to a language model provider (Google Gemini) to generate a reply, which is then returned to you. This happens only if you enable the feature, and never for a number you have not enabled it on.

Your conversations and your customers' content are not used to train our models or anyone else's, and we do not sell that content to anyone.

5. Who we share it with

We do not sell your data. We share it only with the service providers we need in order to run the Platform, and only to the extent required:

  • The hosting and database provider our servers run on.
  • The email provider used for operational messages (account confirmation, password reset).
  • The language model provider, within the limits described in the previous section.
  • Payment channels, in order to complete and collect a subscription.

We may also disclose data where the law requires it under a formal order, or where disclosure is necessary to protect our rights or someone's safety. We will tell you when that happens unless the law prevents us.

6. Cookies

We use no cookies for advertising or cross-site tracking. What we do use is strictly necessary for operation, and there are four:

  • access_token — your session token. HttpOnly, so no JavaScript can read it.
  • refresh_token — renews the session without making you sign in again. Also HttpOnly.
  • session_present — a simple flag telling the interface a session exists. It carries no secret.
  • rasoul_locale — the interface language you chose.

7. Site analytics

We measure visits to our site with a tool we built ourselves, designed not to know who you are. What it sends is: the path you visited, whether a new visit just started, the referrer on the first request of a visit, and a random identifier your browser generates for itself and keeps in localStorage — not a cookie.

That identifier is not derived from anything about you, is not linked to your account, and is not exported to anyone. Clearing site data in your browser generates a new one and severs the link to the previous one permanently. We send nothing about your device or browser, and no part of the address beyond the path.

8. How long we keep it

  • Account data: for as long as your account is active.
  • Messages and conversations: for as long as the number is connected to your account, or until you delete them.
  • Operational and error logs: a short period sufficient for diagnosis, then deleted.
  • Billing records: for the period the law requires commercial records to be kept.

When you delete your account, your data and conversations are deleted within a reasonable period, except where the law requires us to retain something. Backups rotate and are replaced within a limited window.

9. Security

  • All communication with the Platform is encrypted over HTTPS.
  • Passwords are stored with a one-way hashing function and cannot be recovered.
  • Session tokens are HttpOnly and protected against cross-site request forgery (CSRF).
  • API keys carry specific scopes and any of them can be revoked immediately.
  • Internal access to production data is limited to operational necessity.

No system is perfectly secure. In the event of a breach affecting your data, we will tell you what we know and what you should do, without undue delay.

10. Your rights

At any time you may ask to:

  • See the data we hold about you.
  • Correct anything inaccurate.
  • Delete your account and your data.
  • Export your data in a machine-readable format.
  • Object to or restrict a particular kind of processing.

To exercise any of these, write to support@rasoul.site. We respond within 30 days at most, and may ask you to verify your identity in order to protect your account.

11. Children's data

The Service is aimed at businesses and may not be used by anyone under 18. We do not knowingly collect children's data, and will delete it immediately if we become aware of any.

12. International transfers

Some data may be stored or processed on service providers' servers outside your country. Where that happens, we contract with providers that commit to an appropriate level of protection for your data.

13. Changes to this policy

We may update this policy. Where there is a material change in what we collect or how we use it, we will notify you by email or inside the Platform before it takes effect.

14. Contact

For any privacy question, or to exercise your rights: support@rasoul.site, or WhatsApp on +201032572357.

Back to home