Privacy Policy

1. About this policy

Nahal Desk is an omnichannel customer messaging product provided by Nahal Labs. It helps authorized business teams connect supported communication channels such as Facebook Messenger and WhatsApp Business Platform and manage customer conversations from a shared workspace.

This policy explains what information Nahal Desk processes, why it is processed, how it is protected, and the choices available to workspace owners, authorized users, and people who communicate with connected business channels.

2. Information we process

• Workspace and user information needed to provide access, roles, assignments, audit history, and account administration.
• Connected-channel identifiers and configuration metadata, such as Facebook Page identifiers, WhatsApp Business Account identifiers, phone-number identifiers, and connection status.
• Customer conversation data received through connected providers, including sender identifiers, message text, timestamps, delivery/read status, and supported attachment metadata or content needed to display the conversation.
• Technical and security information such as webhook event identifiers, error information, request metadata, and audit records used to operate, secure, and troubleshoot the service.

3. How we use information

• To receive, organize, display, route, assign, and reply to customer conversations on behalf of the connected business.
• To connect and verify supported provider accounts and maintain webhook subscriptions and message-delivery status.
• To provide workspace permissions, operational history, security controls, support, diagnostics, and service improvement.
• To comply with applicable law, enforce our terms, and protect Nahal Labs, our customers, and users from abuse or security threats.

4. Connected platforms and service providers

When a workspace connects a third-party messaging platform, information is also processed under that platform's own terms and privacy rules. Nahal Desk may use infrastructure, hosting, storage, monitoring, email, or security providers where reasonably necessary to operate the service. We do not sell personal information to advertisers.

5. Credentials and security

Provider credentials are intended to be handled server-side and protected using appropriate technical controls. Nahal Desk is designed so provider secrets are not returned to ordinary browser users. We use reasonable administrative and technical safeguards, including access controls and encrypted transport, but no internet service can guarantee absolute security.

6. Retention

We retain information only for as long as reasonably needed to provide the service, maintain security and auditability, resolve disputes, meet contractual obligations, or comply with law. A workspace owner may request deletion as described in the Nahal Desk Data Deletion Instructions.

7. Your choices and requests

Authorized workspace owners can disconnect supported channels and can request deletion of Nahal Desk account or workspace data. People who communicated with a business through Facebook, WhatsApp, or another provider may also contact the relevant business directly regarding conversation data held by that business, or contact Nahal Labs where a Nahal Desk deletion request is appropriate.

8. Changes to this policy

We may update this policy as Nahal Desk changes or as legal and provider requirements evolve. The current version and its last-updated date will be published on this page.