Where your data is stored

• All Wasl data — database, files and queues — lives on a single dedicated server at Contabo, in a data centre in Germany (European Union).
• No copy of your data is kept in other countries except as described under backups and sub-processors below.
• The servers are not inside the Kingdom of Saudi Arabia. If your organisation requires in-Kingdom data residency, tell us before subscribing — we would rather say it now than have you discover it later.

• Conversations, messages, contacts, CRM data, workflows, campaigns and the audit log: in PostgreSQL, isolated per workspace at the database level (Row-Level Security).
• Media (images, voice, documents, video) received from your customers or uploaded by you: in object storage on the same server (MinIO), under per-workspace paths.
• Channel tokens, AI-provider keys and API keys: encrypted (AES-256-GCM) and never displayed again after entry; API keys are stored as hashes only.
• AI: the knowledge you upload is chunked and embedded by a model running on our own server — it does not leave the server for that step.

• A daily backup of the database, media and queues, encrypted before it leaves the server, is uploaded to operator-owned Google Drive storage off-server.
• The decryption key is not kept with the backups, and restores are rehearsed regularly rather than assumed.

• The Wasl operations team accesses the server for operations and maintenance and does not read a workspace’s conversations except on that workspace’s support request or when an incident requires it.
• The channel platforms you connect (Meta for Messenger, Instagram, WhatsApp and Threads; Telegram; TikTok; X; YouTube): messages pass through them because they are their platforms, under each platform’s terms.
• Your AI model provider: you choose it and enter its key (Claude, OpenAI, OpenRouter, Groq, a local server…). The conversation text needed for a reply is sent to it on each AI reply; nothing is sent if AI is switched off.
• A speech-transcription provider if enabled, and the payment gateway for your subscription (it receives billing data, never conversations).

• While your account exists, your data stays as it is — nothing is deleted silently, not even after a free trial ends.
• Raw webhook events are swept 30 days after processing, as are settled delivery statuses; the messages themselves remain.
• Workspace deletion: an owner request with a cancellable seven-day grace period, after which the workspace is closed and all access blocked; final erasure then runs in stages and is logged.

• Export: a workspace owner can export everything in an open format (NDJSON per table plus media) from Settings at any time — we have rehearsed importing it into an empty database and getting the workspace back as it was.
• Deleting one customer’s data: the “Data deletion” page explains the steps, and Meta platforms have an automated deletion callback on user request.
• The Saudi Personal Data Protection Law applies to processing of residents’ data wherever it happens; this page is the disclosure of where processing and transfers take place, and the Privacy Policy covers purpose and legal basis.

The service is operated by «to be completed with the legal entity name». Data matters: support@growthmedia.online. See the Privacy Policy and Data deletion.