Privacy Policy

Last updated: 4 September 2026

This Privacy Policy describes how Sabena ("Sabena", "we"), Depok, Indonesia, collects, uses and protects personal data when you use the Sabena platform at sabena.khairul.id (the "Service"). Contact: email@sabena.id.

1. Who we are

Sabena is a software-as-a-service customer messaging platform. Our customers ("Clients") are businesses that use Sabena to manage conversations with their own customers over WhatsApp and other channels. We act as a data processor for message data our Clients handle through the Service, and as a data controller for Client account data.

2. Data we collect

• Account data: name, email, password (hashed), company name, billing details.
• Data received from Meta Platforms when a Client connects a WhatsApp Business Account through Meta's Embedded Signup: WhatsApp Business Account ID, phone number IDs and display numbers, message templates and their approval status, quality rating, and an access token used to act on the Client's behalf.
• Message data: content, media, timestamps, delivery status and the phone numbers of the Client's customers who message the Client, as delivered to us by WhatsApp/Meta webhooks or sent by the Client from Sabena. Where a Client enables WhatsApp Business App coexistence, this also includes chat history (up to 180 days) and address-book contacts the Client chooses to share.
• Technical data: IP address, browser, device, log and cookie data needed to run and secure the Service.

3. How we use data

To provide the Service (display a shared inbox, send and receive messages on the Client's instruction, manage templates), to bill, to secure and troubleshoot the Service, to communicate service notices, and to comply with law. We do not sell personal data and do not use message content for advertising or to train machine-learning models.

4. Sharing

We share data only with: Meta Platforms (to deliver WhatsApp messages, under Meta's terms); infrastructure providers that host the Service ([hosting provider, region]); payment processors ([Stripe/PayPal/…]); and authorities when required by law. All providers are bound by data-processing agreements.

5. Retention

Account data is kept while the account is active. Message data and Meta-derived data are kept while the Client's WhatsApp account remains connected and are deleted within 30 days after the Client disconnects the account or deletes their Sabena account, except where law requires longer retention. Backups expire within 90 days.

6. Your rights and data deletion

You may access, correct, export or delete your data. Clients can disconnect a WhatsApp account at any time from Channel Setup, and delete their whole account from Settings → Account; both actions delete the related data as described above. Customers of a Client should contact that Client; you may also email [email] with the subject "Data deletion request" and we will respond within 30 days.

7. Security

Data is encrypted in transit (TLS) and at rest; access tokens are stored encrypted; access is role-based and logged.

8. Cookies

We use strictly necessary cookies for login sessions and security. No advertising cookies.

9. Children

The Service is not directed to children under 18.

10. Changes

We will post changes on this page and update the date above.