Privacy Policy
Last updated: July 23, 2026
This policy explains how the EtcBot platform — owned and operated by FTH Digital Marketing (Riyadh, Saudi Arabia) — collects, processes, and protects your personal data, in accordance with the Saudi Personal Data Protection Law (PDPL) and related regulations. By using our website or platform you acknowledge this policy.
1. Who we are
The data controller for etcbot.ai and the early-access waitlist is FTH Digital Marketing, Riyadh. Once the platform launches, the subscribing business (our customer) is the controller of its end-customers' data, and we act as a processor on its behalf under a data processing agreement.
2. Data we collect
From the website: waitlist form data (name, business, WhatsApp number, email, sector). From the platform once launched: user account data, the business account's WhatsApp conversation content (messages, files, phone numbers, and Meta user identifiers), consent records, and technical usage logs (IP addresses, sign-in logs).
3. Purposes of processing
Operating the service and its features (inbox, campaigns, customer management); contacting you about early access and launch; improving the service and its security; legal compliance. We do not sell your data and never share it with any party for their own marketing.
4. Legal basis & consent
We process waitlist data based on your explicit consent when submitting the form; you may withdraw it at any time. Platform data is processed to perform the contract with the subscribing business and to meet our legal obligations. Marketing messages over WhatsApp require the end-customer's prior documented consent, and stop requests are honored immediately.
5. Sharing & processors
WhatsApp messages pass through the WhatsApp Business Platform provided by Meta under its terms and policies. We use infrastructure providers to host and process data under agreements preserving confidentiality and security. We may disclose data where required by law or a competent judicial authority.
6. Storage & data transfers
Website and platform data is currently hosted on secure infrastructure outside the Kingdom (European Union — Germany), with contractual and technical controls protecting cross-border transfer in line with the PDPL and its regulations. Hosting may move inside the Kingdom in the future.
7. Security & retention
We apply encryption in transit and at rest for sensitive data, restricted access controls, and audit logging. We retain data only as long as needed for the purpose it was collected for or as required by law, after which it is deleted or anonymized.
8. Your rights
Under the PDPL you have the right to be informed, to request access to and a copy of your data, to request correction or destruction, and to withdraw consent. Contact us at the address below and we will respond within the statutory periods.
9. Updates
We may update this policy from time to time; the updated version is published on this page with its date, and material changes will be notified through an appropriate channel.
For privacy inquiries or to exercise your rights: [email protected] — or write to FTH Digital Marketing, Riyadh, Saudi Arabia.