Privacy Policy

Last updated: 28 September 2026

1. Introduction

This Privacy Policy explains how RAI Cloud ("RAI Cloud", "we", "us", "our"), operated by Muhammad Ishaq, a business registered with the Federal Board of Revenue (FBR) of Pakistan, collects, uses, discloses and protects information when you use our website (coudrai.site), our RAI Cloud application, and our WhatsApp Business API and CRM services (collectively, the "Services").

By using our Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Services.

2. Who This Policy Applies To

This policy applies to:

• Business customers who sign up with RAI Cloud to use our WhatsApp Business API and CRM platform;
• Agents and team members that a business customer adds to their RAI Cloud account; and
• End customers — the people who message a business through WhatsApp using a number connected via RAI Cloud.

3. Information We Collect

a) Account & Business Information — name, business name, email address, phone number, password, business address and tax/registration details you provide when creating an account.

b) WhatsApp Business Account Data — your WhatsApp Business Account ID, phone number ID, business profile details and template messages, obtained through your authorisation via Meta's WhatsApp Cloud API.

c) Conversation Data — messages, media, contact names and phone numbers exchanged between your business and your customers on WhatsApp, which pass through our platform so you can manage them in your inbox.

d) Contact Lists — customer names, phone numbers and any tags or notes you upload or create for the purpose of sending broadcasts or organising your CRM.

e) Usage & Log Data — IP address, browser type, device information, pages visited and actions taken within the dashboard, used for security and product improvement.

f) Cookies — our website may use essential cookies to keep you logged in and remember basic preferences. We do not use cookies for third-party advertising.

4. How We Use Information

• To provide, operate and maintain the WhatsApp Business API and CRM Services;
• To deliver messages, campaigns and automated replies on your behalf;
• To authenticate your account and keep your data secure;
• To provide customer support and respond to enquiries;
• To improve our platform, fix issues and develop new features;
• To comply with legal, tax and regulatory obligations in Pakistan; and
• To communicate important service updates to you.

We do not sell personal data or conversation data to third parties, and we do not use your customers' WhatsApp messages for advertising purposes.

5. Sharing of Information

Because RAI Cloud operates on top of the WhatsApp Business Platform, message data is processed by Meta Platforms, Inc. in accordance with Meta's own Privacy Policy and WhatsApp Business Messaging Policy in order to deliver messages. We share information only:

• With Meta/WhatsApp, as required to send and receive messages through the Cloud API;
• With infrastructure and hosting providers who help us run the Services, under confidentiality obligations;
• When required by law, court order, or a valid request from a government authority; and
• With your consent, or at your direction (for example, when you export your own data).

6. Data Retention

We retain account and conversation data for as long as your account is active, or as needed to provide the Services. Once you request account or data deletion (see our Data Deletion page), we delete or anonymise your data within 30 days, except where we are legally required to retain certain records (for example, tax records) for longer.

7. Data Security

We use industry-standard measures — including encrypted connections, access controls and secure hosting — to protect information from unauthorised access, alteration or disclosure. No method of transmission or storage is 100% secure, and we continuously work to strengthen our safeguards.

8. Your Rights

Depending on your relationship with us, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your account and associated data;
• Withdraw consent for marketing communications; and
• Ask questions about how your data is processed.

To exercise any of these rights, contact us at info@raiishaq.online.

9. Children's Privacy

Our Services are intended for business use and are not directed at children under 18. We do not knowingly collect personal data from children.

10. International Data Transfers

As our Services rely on Meta's global WhatsApp Cloud API infrastructure, data may be processed on servers located outside Pakistan. We take reasonable steps to ensure such transfers are handled in line with applicable data protection standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

12. Shopify Integration and Store Customer Data

If a merchant connects their Shopify store to RAI Cloud (the "Shopify Integration"), the following applies in addition to the rest of this policy.

a) What we access. With the merchant's approval, RAI Cloud receives order and checkout events from Shopify (new order, order fulfilled, checkout started) and reads only the data needed to send the message: the customer's first name, phone number, order number and total, tracking number, and the checkout link. We do not request customers' email addresses or postal addresses.

b) Why we use it. Solely to send the merchant's own WhatsApp messages through the merchant's WhatsApp Business account: order confirmations, shipping updates and abandoned-checkout reminders, and to mark an order "COD Confirmed" or "COD Cancelled" in Shopify when the customer replies yes or no. We use this data for no other purpose.

c) Roles. The merchant decides why and how their customers' data is used and is responsible for having the customers' permission to message them. RAI Cloud processes the data only on the merchant's behalf and on their instructions.

d) Retention and deletion. Customer names and phone numbers held in abandoned-checkout records, and order references held in order-confirmation records, are automatically deleted 30 days after they are created. When a merchant uninstalls the app, the connection is deactivated immediately, and when Shopify sends its store-erasure request we delete that store's data. We also act on Shopify's customer data request and customer erasure requests. Messages that were sent form part of the merchant's WhatsApp conversation history in their inbox and are deleted according to our Data Deletion policy.

e) Security and sharing. The store's Shopify access token is stored in encrypted form, connections use HTTPS, and requests from Shopify are verified with Shopify's signature. Customer data is shared only with Meta/WhatsApp as needed to deliver the message. We never sell it.

f) Customer choice. If a customer replies "STOP" (or a similar opt-out word) to a message, we automatically stop messaging that customer on behalf of the merchant.

13. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact:

RAI Cloud (Muhammad Ishaq)
1, Sanawan Pati Khar, Kot Addu, District Muzaffargarh, Punjab, Pakistan
Email: info@raiishaq.online
Phone: +92 302 3331715