Privacy Policy
Last updated: November 10, 2026
Marsa Space (Unified No. 7055408384) operates the Marsa Bots platform. We protect data in line with Saudi Arabia’s Personal Data Protection Law (PDPL) and its regulations.
Our role
For your end customers’ data (their messages and details in conversations) you are the controller and we are a processor acting on your behalf only to provide the service. For your account data (name, email, billing) we are the controller.
Data we process
Account and team data, the knowledge you upload, conversations received through connected channels (text, images, voice notes transcribed to text), leads captured by the bot, and usage and billing data.
Service providers
We rely on trusted providers: Supabase (database and storage), Vercel (hosting), Anthropic (Claude models that generate replies), a speech-to-text provider, Meta (WhatsApp and Instagram) and Moyasar (payments). Some processing may occur outside the Kingdom under the regulatory transfer controls.
Security
Every organization’s data is isolated with row-level security, channel tokens are encrypted (AES-256-GCM) and every webhook signature is verified. The bot is designed never to ask for passwords, verification codes or card details, and card numbers are redacted from messages automatically.
Retention & deletion
We keep data for as long as you subscribe; you can delete bots and conversations at any time. When you close your account we delete your data within 30 days unless the law requires otherwise.
Your rights
You have the right to be informed, access, correct, destroy and withdraw consent, and to complain to SDAIA. Contact us on WhatsApp at +966 53 322 1575.