عربيLet’s talk
Legal

Privacy Policy

This policy explains how Respark Digital Solutions collects, uses and protects personal data across its website, its services to businesses, and Respark Echo, its customer-conversation platform.

Last updated: 5 October 2026

1. Who we are

Respark Digital Solutions W.L.L ("Respark", "we", "us") is a Bahraini company providing digital services to businesses, including strategy, design, systems development, automation and marketing. In the Kingdom of Saudi Arabia, its services are provided through its service provider and agent, Super Metal Trading Company.

⁦RESPARK DIGITAL SOLUTIONS W.L.L⁩ (⁧ريسبارك للحلول الرقمية ذ.م.م⁩), Commercial Registration No. 157120.

Address: Building 966, Road 4035, Block 540, Al Diraz, Kingdom of Bahrain.

Email: info@respark-os.com · Phone: +973 3236 0205

Service provider and agent in the Kingdom of Saudi Arabia: ⁦Super Metal Trading Company⁩ (⁧شركة المعدن الفائق التجارية⁩), a limited liability company, Commercial Registration No. 4030614305, Unified No. 7048973528, VAT No. 312867321300003.

Its address: 29 Apex Workspace, Sultan Ibn Salman Street, Al Nuzhah, Jeddah, Kingdom of Saudi Arabia · Mobile: +966 53 854 1945

2. Scope

  • The website respark-os.com and its subdomains.
  • The services we provide to our business clients.
  • Respark Echo: an application that connects our business clients' WhatsApp Business accounts and Instagram professional accounts through Meta's official APIs (WhatsApp Business Platform and Instagram API), so their conversations with their own customers can be archived and analysed on their behalf.

3. Data we collect

a) Website visitors and people who contact us:

  • Information you choose to send us: name, phone or WhatsApp number, email address and the content of your message.
  • Basic technical logs kept by our hosting provider for security and operations, such as IP address, browser type and request time.
  • Our website does not use advertising or analytics cookies.

b) Our business clients:

  • Contact and billing details of client representatives, and details of the accounts and digital assets a client authorises us to access to deliver the service.

c) Respark Echo data (on behalf of a client business, after it connects its accounts with its consent):

  • Messages exchanged between the business and its customers on WhatsApp or Instagram: text, media descriptions and identifiers, timestamps and message direction.
  • End-customer identifiers made available by Meta: profile display name, WhatsApp number or Instagram-scoped ID.
  • Contacts and up to six months of conversation history when a WhatsApp Business app number is connected, only if the business chooses to share them during onboarding.
  • We do not receive payment card data through this platform.

4. Our role for Respark Echo data

The client business is responsible for its customers' data (the controller), and we process that data on its behalf and only on its instructions (the processor). The client business must give its customers appropriate notice and obtain any consent required by law and by Meta's policies.

5. How we use data

  • To provide, operate and support our services and respond to enquiries.
  • For Respark Echo clients: to keep a conversation archive and provide that same business with reports and analysis, such as frequent questions, objections, response times and sales opportunities, to improve its customer service and marketing.
  • To protect our systems and detect misuse.
  • To meet legal and regulatory requirements.

We do not sell personal data, we never use one client's data for another client, and we do not use Respark Echo data for our own advertising.

6. Who we share data with

  • Meta Platforms, as provider of the WhatsApp and Instagram platforms through which messages travel.
  • Supabase, our database provider (data centre in Mumbai, India).
  • Vercel, which hosts our website and interfaces.
  • Super Metal Trading Company, our service provider and agent in the Kingdom of Saudi Arabia, to the extent needed to serve our clients there.
  • AI analysis providers, such as Anthropic, when a client requests automated analysis, and only to the extent needed. Under their commercial terms they do not use this data to train their models, and we never use platform data to train any AI model.
  • Public authorities where we are legally required to.

These providers process data on our behalf and only to deliver the service. This may involve transferring data outside the Kingdom of Bahrain, in which case we apply reasonable safeguards.

7. Retention

  • Website enquiries: for as long as needed to respond or for the business relationship.
  • Respark Echo data: for the duration of our service to the client business and in line with its documented instructions, including a historical archive for analysis, for as long as it remains necessary for that purpose. We review the archive with the business at least once a year and delete what is no longer needed.
  • We delete the data or return it to the client business within 30 days of the service ending or of its request.
  • Deletion requests from end customers, including for archived data, are handled as described on our Data Deletion page.

8. Security

  • Encryption in transit (HTTPS).
  • Row-level access rules in our database, with access restricted to the server.
  • Access tokens and secrets kept server-side only.
  • Verification of Meta's signature on every incoming webhook before it is processed.

9. Your rights

Under the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018), you may ask to access, correct or delete your personal data, and object to its processing. If your data reached us through a business that uses Respark Echo, you can contact that business or contact us directly, and we will coordinate with it to fulfil your request.

10. Minors

Our services are intended for businesses, and we do not knowingly collect data directly from anyone under 18.

11. Changes

We may update this policy from time to time and will publish any change on this page with its update date.

12. Contact

⁦RESPARK DIGITAL SOLUTIONS W.L.L⁩ (⁧ريسبارك للحلول الرقمية ذ.م.م⁩), Commercial Registration No. 157120.

Address: Building 966, Road 4035, Block 540, Al Diraz, Kingdom of Bahrain.

Email: info@respark-os.com · Phone: +973 3236 0205

Service provider and agent in the Kingdom of Saudi Arabia: ⁦Super Metal Trading Company⁩ (⁧شركة المعدن الفائق التجارية⁩), a limited liability company, Commercial Registration No. 4030614305, Unified No. 7048973528, VAT No. 312867321300003.

Its address: 29 Apex Workspace, Sultan Ibn Salman Street, Al Nuzhah, Jeddah, Kingdom of Saudi Arabia · Mobile: +966 53 854 1945