WatsayPay (“WatsayPay,” “we,” “us,” or “our”) is operated by Creative Reach Technologies, based in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, mobile application, and platform (collectively, the “Service”).

By creating an account or using WatsayPay, you agree to the collection and use of information as described in this policy.

Our Commitment to You

Your data belongs to you. We do not sell your personal information, your customers’ information, or your financial data to anyone — ever. We do not use your data for advertising or share it with third parties beyond what’s strictly necessary to run the Service (such as processing a payment or delivering an invoice you send). Your information is protected with industry-standard security and used only to provide and improve WatsayPay for you.

1. Information We Collect

Account Information
Name, business name, email address, phone number, WhatsApp number, and password when you register.
Business & Financial Information
Trade License details, Tax Registration Number (TRN), bank account or payment details required to receive payments through the platform, and billing information for your subscription.
Customer Data You Add
Names, contact details (phone/email), invoice and quotation history, payment history, and outstanding balances for the customers you invoice through WatsayPay.
Usage Data
Log data, device information, IP address, and how you interact with the platform, collected automatically.
Communications Data
Messages sent through WhatsApp or email integrations for invoice/quotation delivery and payment follow-ups.

2. How We Use Your Information

We use the information we collect only to:

• Create and manage your account
• Generate and send invoices, quotations, and retention contracts
• Process and facilitate payments through our payment partners
• Send automated payment reminders and follow-ups on your behalf
• Provide the AI Assistant feature and improve its responses
• Maintain your real-time dashboard and reporting
• Communicate with you about your account, billing, and service updates
• Comply with UAE VAT and legal record-keeping requirements
• Improve and secure the platform

We never use your data for purposes beyond providing and improving the Service.

3. How We Share Your Information

We do not sell your data, under any circumstances. We share information only where necessary to operate the Service:

• Payment processors (e.g., Stripe) to process online payments. We do not store full card details on our servers.
• WhatsApp Business API / Meta to deliver invoice and quotation links and automated reminders you send.
• Email service providers to deliver invoices, quotations, and notifications sent by email.
• Cloud hosting and infrastructure providers to operate and secure the platform.
• Legal or regulatory authorities where required by UAE law, such as tax or financial reporting obligations.

If you are a business using WatsayPay to invoice your own customers, you are the data controller for your customers’ information, and WatsayPay acts as a data processor on your behalf. See our Data Processing Agreement for details.

4. Data Retention

We retain your account and financial data for as long as your account is active and as needed to comply with UAE tax, accounting, and legal record-keeping requirements (typically a minimum of 5 years for financial records under UAE law). You may request deletion of your account, subject to our obligation to retain financial records as legally required.

5. Data Storage & International Transfers

Your data may be stored on servers located in or outside the UAE. Where data is transferred outside the UAE, we take steps to ensure it remains protected in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

6. Your Rights

Under UAE data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent for optional data processing (e.g., marketing communications)
• Object to certain uses of your data

To exercise these rights, please reach out to us via our Contact page.

7. Data Security

We use industry-standard security measures, including encryption and access controls, to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies

Our website uses cookies to improve your browsing experience and understand how visitors use our site.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use of the Service after changes constitutes acceptance.