Privacy Policy

Effective date: 15 October 2026

Arsal Solutions ("we", "us") operates AS Gateway, a web application that lets our business customers send and receive WhatsApp and SMS messages to their own customers. This policy explains what information we process, why, and the choices you have.

1. Information we collect

Account information. When a business customer has an account, we store their name, email address, password (stored as a secure hash) and account settings.

Message information. To deliver messages on behalf of our customers we process recipient phone numbers, message text, attachments (for example invoices) and delivery status (sent, delivered, read or failed). When a recipient replies through the WhatsApp Business Platform, we receive the reply, the sender's phone number and the time it was sent.

Service credentials. Customers may connect their own WhatsApp Business Account. Access tokens and app secrets are stored encrypted and are used only to send their messages.

Technical information. We record IP addresses, session information and service logs to keep the service secure and to diagnose problems.

2. How we use information

• To send and receive the messages our customers request, and to show them delivery status.
• To operate, secure and improve the service, prevent abuse and fix errors.
• To contact account holders about their account, billing and important service updates.

We do not sell personal information and we do not use message content for advertising.

3. Sharing

• Messaging providers. Messages are delivered through the WhatsApp Business Platform (Meta), WhatsApp connections set up by the customer, and SMS sent from the customer's own Android device and mobile network. These providers receive the data needed to deliver each message and process it under their own policies.
• Service providers that host or operate our systems, bound to protect the information.
• Legal reasons, when required by law or a valid request from a public authority.

4. Data retention

Messages and account data are kept while the customer's account is active, or until the customer deletes them. Service logs are kept for up to 30 days. When data is no longer needed it is deleted.

5. Security

We use HTTPS, access controls, hashed passwords and encrypted storage of provider credentials. No method of transmission or storage is completely secure, but we work to protect your information.

6. Your rights and data deletion

You can ask to access, correct or delete your personal information. If you received a message sent through our service, you can ask us to delete your phone number and messages. See our Data Deletion Instructions or email vickych.com@gmail.com.

7. Changes to this policy

We may update this policy. Changes are posted on this page with a new effective date.

8. Contact

Arsal Solutions
Email: vickych.com@gmail.com
Website: https://arsalsolutions.pk