Privacy Policy

Last updated: August 2026

Rukn (شركة ركن العالمية لتصميم وبرمجة البرمجيات الخاصة, Commercial Registration 543865, Kuwait) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information across our website and the Waslo messaging platform.

Information We Collect

We may collect personal information that you voluntarily provide when you contact us, subscribe to our newsletter, or use our services. This may include your name, email address, phone number, company name, and any other information you choose to provide.

How We Use Your Information

We use the information we collect to provide and improve our services, respond to your inquiries, send newsletters (with your consent), and communicate with you about our offerings.

Messaging Platform Data

When a business subscribes to Waslo, our messaging platform, we process the content of conversations between that business and its customers. This includes message text, images, voice notes, documents, phone numbers, and profile names supplied by the messaging channel. We process this data solely to deliver the service the business has asked us to provide.

Our Role: Controller and Processor

For our own website, newsletter, and client enquiries, Rukn is the data controller. For conversations handled through Waslo, the subscribing business is the data controller and Rukn acts as its data processor: we process end-customer data only on that business's documented instructions. If you are a customer of a business that uses Waslo and you want your data corrected or deleted, contact that business directly, and we will support them in responding.

Meta Platforms

Waslo connects to WhatsApp, Instagram, and Messenger through Meta's business APIs. When a business connects a channel, Meta shares message content and account metadata with us so we can deliver and display those conversations. Our use of that data is governed by the Meta Platform Terms and Meta's developer policies in addition to this policy. We do not use Meta platform data for advertising, profiling, or resale.

Automated and AI Processing

Where a business enables the Waslo AI agent, message content and that business's own knowledge base are sent to third-party artificial intelligence providers to generate replies. This processing is automated. AI providers act as our sub-processors, are bound by contract, and do not use this content to train their models. A business can disable the AI agent at any time, and a human agent can take over any conversation.

Information Sharing

We do not sell your personal information. We may share your information with trusted service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements.

Sub-processors

We use a small number of third-party providers to deliver our services, covering messaging, artificial intelligence, hosting, and email infrastructure. A current list, with each provider's purpose and processing location, is published on our sub-processors page. We notify subscribing businesses before adding a new sub-processor that processes conversation data.

Data Retention

Conversation data is retained for as long as the subscribing business maintains an active account, and is deleted within 30 days of account termination unless a longer period is required by Kuwaiti law. Website enquiry and newsletter data is retained until you ask us to delete it. Operational logs are retained for up to 90 days.

International Transfers

Rukn operates from Kuwait. Some of our sub-processors, including our messaging and artificial intelligence providers, process data outside Kuwait, including in the European Union and the United States. Where we transfer personal data internationally, we rely on the contractual protections in our agreements with those providers.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Data is encrypted in transit using TLS and encrypted at rest. Access to production systems holding customer data is limited to authorised personnel.

Cookies

Our website may use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@byrukn.com.