Privacy Policy
What Rabet touches, why, where it is stored, and how you take it back or delete it.
Two different roles
Rabet stands in two distinct positions toward two kinds of data:
- Your account data — company name, email, phone, subscription and payment history. Here we are the controller, and this policy governs it.
- Data you put inside your workspace — your employees and your customers' conversations. Here we are only a processor acting on your instructions. You decide what is collected, who sees it, and when it goes.
In practice: we do not read your customers' conversations, do not mine them, do not train models on them, and never sell or rent them. Our engineers access workspace data in one case only — a fault you asked us to fix, and only as far as fixing it requires.
What we collect about you as an account holder
- Company name and sector; owner name, email and phone.
- Plan, billing cycle, trial and subscription dates.
- Payment records: amount, currency, status, invoice number and the gateway's transaction reference.
- An operational event log (signup, payment, upgrade, suspension) and the IP address of login and signup attempts, used to prevent abuse and guessing.
Card data never reaches us. Payment happens on the Qi gateway's own page; we receive only the result. We never see, store, or can charge your card.
What you store inside your workspace
- Employees: name, phone, email, wage, schedule, leave, advances, deductions.
- Attendance: punch times, GPS coordinates at the moment of the punch, and a selfie photo if you enable that requirement. This is sensitive data — enable it only with a reason, and tell your staff.
- Conversations: your customers' WhatsApp, Messenger and Instagram messages and attachments, their numbers or IDs, and WhatsApp call records.
- Vault: secrets you store yourself, encrypted in your own database.
- Devices: push tokens for your staff's phones, and an audit log.
Where it is stored
On a server we rent in a data centre in Frankfurt, Germany. Every company gets a fully isolated workspace — its own process, directory, database and keys, not a shared table separated by an ID. All traffic is TLS-encrypted. Backups are taken daily and deleted automatically after 14 days.
Who we share with
| Party | What reaches them | Why |
|---|---|---|
| Meta (WhatsApp, Messenger, Instagram) | Messages and attachments you send or receive | They are the channel itself. Also governed by Meta's own policies |
| Qi payment gateway | Transaction amount, reference, your email | Collecting subscription fees |
| Email provider | Your email address and message body | Login codes, invitations, invoices |
| Apple and Google | Device token and notification payload | Delivering push notifications |
| Storage provider | An encrypted copy of your database | Off-site backups, if you enable them |
And no one else. No advertisers, no data brokers, no advertising trackers inside the product.
Retention
- Workspace data: as long as your account exists.
- After account deletion: the workspace is wiped immediately and disappears from backups within 14 days.
- Billing records: kept as long as accounting and tax obligations require. They contain no workspace content.
Your rights
Access and export your data from inside the product at any time, free and without asking us; correct anything yourself; delete your account following these steps; or write to legal@rabetdesk.com with an objection or complaint.
Security
Per-company process and directory isolation, encryption in transit, email two-factor authentication, per-user permissions, an audit log that the interface cannot edit, and login rate limits. No system is perfect; if a breach affects your data we will tell you as soon as we know.
Children
The service is for businesses; accounts are opened by adults only.
Changes
We email you before any material change takes effect. The date at the top of this page shows the last update.
Contact
AL-ASID GENERAL TRADING, PUBLIC TRANSPORT, AND CARGO AND BICYCLE RENTAL COMPANY LLC · Reg. M.SH.A-2-34329 · D-U-N-S 663097669 · Building 13, Alley 37, Mahalla 601, Al-Burj Street, Al-Mansour, Baghdad, Republic of Iraq
Privacy: privacy@rabetdesk.com · Legal: legal@rabetdesk.com