Privacy Policy

This covers everything: what we hold, who controls it, where it lives, who else touches it, how long we keep it, and how to get it out. It replaces our separate trust page — one document rather than two half-answers.

Last updated 30 September 2026.

1. Who we are

airbees is operated by Middle East Integrated Technologies FZ-LLC, CWEP8800, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates (Dubai office: #7, Bel Rasheed Building, Nad Al Hammar, Dubai, UAE) — the controller of your account data and the processor of your customers' conversations, for every customer wherever they are. Contact us about anything on this page at privacy@airbees.ai.

2. The distinction that matters most

There are two very different kinds of data here, and we treat them differently.

Your account data — we are the controller. Your name, work email, phone number, business details, trade licence number, plan, wallet balance and invoices. We decide how this is handled, and this policy governs it.

Your customers' conversations — you are the controller, we are the processor. When someone messages your WhatsApp number, that conversation and anything in it belongs to your relationship with them, not ours. We process it on your instructions, to provide the service. You decide what your BEE asks, what is stored, and how long you keep it. You are responsible for having a lawful basis to message those people and for your own privacy notice to them.

We do not sell personal data. We do not use your customers' conversations to market to them, and we never contact them on our own behalf.

3. What we collect

From you: account and contact details, business verification information, billing and payment records, support correspondence, and product usage logs (which screens, which actions, error traces).

When you contact us: if you use the Contact us form, your name, business name, WhatsApp number and trade, and anything you write to us. If you message us on WhatsApp instead, the messages themselves and your number. We are the controller of these details. We use them to answer you and to follow up about airbees, we do not sell them, and the form's details are stored as a lead in our own airbees account — the same kind of record your own customers' enquiries become in yours — and are emailed to our sales team.

Through your BEE, on your behalf: the message content your customers send and receive, their WhatsApp phone number and display name, the structured details your BEE was configured to capture (for example budget, timeline or requirement), the lead score, and message delivery status.

We do not collect special-category data. Your BEE is configured not to solicit health, financial or biometric information, and our terms prohibit reconfiguring it to do so. If a customer volunteers something sensitive in free text, it is stored as ordinary message content and is subject to the same retention and deletion rules as everything else — we recommend you review and delete such messages where you do not need them.

4. Why we process it, and on what basis

To provide the service — performance of our contract with you.
To answer people who contact us — taking steps at your request before a contract, and our legitimate interest in replying to an enquiry.
To bill you accurately — contract, and our legal obligation to keep tax records.
To keep the platform secure and working — our legitimate interest in operating a safe service.
To improve the product — our legitimate interest, using aggregated and anonymised statistics that cannot identify you or your customers.
To process your customers' conversations — on your documented instructions, as your processor.

5. Where your data lives — the honest version

Your airbees data — leads, scores, transcripts, business configuration and billing — is stored in the region you choose. Message transport runs through WhatsApp and our messaging platform partner; AI processing runs at our model provider.

We do not claim end-to-end data residency, because nobody offering WhatsApp messaging honestly can. WhatsApp itself is not resident in any one country, and every business already using WhatsApp has accepted cross-border transit. What we control — our database, your configuration, your records — we place deliberately and state plainly. Regional hosting of our copy is available on request.

The data map

Your airbees records — leads, conversations, scores, configuration, wallet and billing: our database, in a single managed cloud region.
Message transport — WhatsApp (Meta Platforms) and our WhatsApp Business Solution Provider, whose infrastructure is hosted across more than one availability zone.
AI processing — our model provider, processing each request as it happens. We do not permit customer data to be used to train models.
Payments — Stripe, our payment processor, for your plan fee and your wallet top-ups. Card details never touch airbees systems; they go directly to Stripe. We keep Stripe's reference to your customer record and the history of what was paid, not your card number.

6. Sub-processors

We use these categories of sub-processor, and no others:

WhatsApp Business Solution Provider — message delivery and channel operations, including Live chat & campaigns.
Meta Platforms — WhatsApp message transport.
AI model provider (United States) — generating your BEE's replies. Customer data is not used to train models.
Managed cloud hosting provider — running the airbees application and database.
Stripe (payment processor) — your plan fee, your wallet top-ups and, when auto top-up is on, the automatic top-ups charged to the card you saved with Stripe. Card details are handled by Stripe and never reach our systems.
Business email and support tooling — handling your correspondence with us.

Live chat & campaigns

Live chat & campaigns — where you reply to customers yourself, send broadcasts and manage contacts and your WhatsApp profile — opens from The Hive in a new tab, at app.airbees.ai. It is a separate surface from this website and from The Hive.

Live chat & campaigns runs on our WhatsApp Business Solution Provider's platform; some sign-in and verification emails are sent from their address.

Because it runs on that platform, it uses tooling we do not control:

Analytics, embedded media, forms and billing components — these load on its pages; none of them bills you — your plan fee and wallet are billed by us.
Provider tracking — a click-tracking script that sets cookies on our provider's own domain.
One-time passcodes for Live chat & campaigns login and two-factor authentication are sent by our provider's mail system, from its own address; this sender cannot be changed. All other email from airbees comes from an @airbees.ai address.

We are asking the provider to reduce this list for white-label deployments and will update this section as that changes.

The current list naming each specific provider, and where each one processes data, is available on request at privacy@airbees.ai, and we will give you notice before adding a new sub-processor that handles personal data.

7. International transfers

Because message transport and AI processing (the latter in the United States) happen outside the UAE, your data crosses borders. Where required we rely on standard contractual protections with each sub-processor. Section 5 tells you exactly which parts of the path leave the region, rather than burying it.

8. How long we keep things

Lead records and conversation transcripts — kept while your account is active. On cancellation they remain exportable for 90 days, then permanently deleted.
Your business configuration — persona, approved facts, scoring rules — retained after cancellation so that returning is one click, and deleted on request at any time.
Enquiries you send us through Contact us or on WhatsApp — kept for as long as they are needed to answer you and follow up, and deleted on request at any time.
Billing and tax records — retained as long as tax law requires, which is longer than the rest and not something we can shorten on request.
Operational logs — a rolling short window for debugging and security.

You can export your data at any time while your account is active. We do not hold your data hostage to keep you as a customer.

9. Security

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to operate the service and is logged. Card data never reaches our systems. We will tell you without undue delay if a breach affects your data, and we will tell you what actually happened rather than issue a statement that says nothing.

10. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to processing based on legitimate interests. Write to privacy@airbees.ai and we will respond within 30 days.

If you are one of our customers' customers — someone who messaged a business using airbees — that business is the controller of your conversation, not us. Contact them directly. If you cannot reach them, write to us and we will pass your request on and support them in answering it.

11. Cookies

Our marketing site uses only what is necessary to serve the pages and keep them secure. The Hive uses a session cookie to keep you signed in. We do not run third-party advertising or cross-site tracking cookies on this site.

The sign-in cookie is strictly necessary — without it you could not stay signed in — so we do not ask permission for it, and there is nothing to switch off. It is HttpOnly, meaning no script on the page can read it, and it is scoped to airbees.ai and its subdomains so that signing in once carries you into Live chat & campaigns.

If that ever changes, you will be asked before anything is set. Should we add anything that is not strictly necessary — measuring which of our advertisements bring people here, for instance — it will be off until you choose it, refusing will take exactly one click, and the site will work either way.

12. Children

airbees is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18 through our own service.

13. Changes

If we change this policy materially we will give you notice before it takes effect, and the date at the top will change. We will not quietly widen what we do with your data and hope you do not read it.

14. Contact

privacy@airbees.ai for anything on this page. Our Terms of Service set out the commercial agreement this policy sits inside.