A privacy policy written for how WESSAAL operates today.

Who we are and scope

WESSAAL is a Saudi operations service operated by WISAL AL MASI ESTABLISHMENT FOR INFORMATION TECHNOLOGY. This policy applies to wessaal.com and WESSAAL services that reference it, including official communication and Smart Attendance.

Your organization may use WESSAAL as the customer or employer and may determine certain processing purposes and product settings. WESSAAL processes the data needed to provide and secure the service.

Data we may process

• Account and organization data such as name, email, phone number, permissions and workspaces.
• Communication operations data such as channels, templates, statuses and conversation information needed to provide the service.
• Attendance data such as check-in time, attendance status, workplace geofence verification result and workplace Wi-Fi verification status when enabled.
• Technical and security data such as network address, browser or device information, sign-in logs and session identifiers.
• Subscription, invoice and payment-related information needed for billing; sensitive payment data is handled by the applicable payment provider under its process.

Location and Smart Attendance

When Smart Attendance is enabled, WESSAAL may use device location and Wi-Fi information to verify that a check-in or check-out occurs within the workplace controls configured by the organization.

The service is designed to verify the attendance action when it occurs, not to continuously track an employee's location. Available settings may vary based on the organization's configuration and employee notices.

Why we use data

• Create accounts and workspaces and provide requested product functionality.
• Operate official communication, templates, conversations, chatbot and automation features when enabled.
• Perform Smart Attendance verification and provide statuses, alerts and operational reports.
• Protect accounts and systems, prevent abuse, troubleshoot incidents and improve reliability.
• Manage subscriptions, billing, support, legal requests and applicable compliance obligations.

When we share data

We do not sell user data. We may share the minimum necessary data with infrastructure, hosting, payment, support and communications providers needed to deliver the service, or with external channels a customer chooses to connect, such as Meta and WhatsApp services.

We may disclose information when required by law, to protect rights or security, or as part of a business reorganization subject to appropriate safeguards.

Retention and security

We retain information for as long as needed to provide the service, meet contractual and legal obligations and resolve disputes, then delete or de-identify it when there is no longer a legitimate need to keep it.

We use reasonable technical and organizational safeguards, but no electronic transmission or storage method can guarantee absolute security. Customers are also responsible for protecting their accounts and permissions.

Your rights and contact

Depending on applicable law and your relationship with the organization, you may have rights to request access, correction, deletion or restriction of certain processing. Where the organization controls the relevant data, we may direct the request to it or assist it with the response.

For privacy questions, contact info@wessaal.com. We may request appropriate information to verify identity before acting on a personal-data request.

Changes to this policy

We may update this policy as services or legal requirements change. The current update date and version are shown at the top of this page, and we may provide additional notice for material changes.