What happens to your customers' data with Bader
Bader keeps each business's data separate from every other business's, does not sell it and does not use it to train models for other clients. Message text is kept 90 days by default; you can set 7 to 3,650 days. On request we export your data and delete it. Bader always tells customers it is an AI.
Your data stays yours and separate
Each business's data is kept apart from every other business's, and that separation is enforced in the database. Bader runs on your own WhatsApp number and your own Meta business account.
Who can see the conversations
Your staff, in their dashboard, with named accounts and a login by a one-time link sent to their email. No passwords. Our team accesses client data only to run the service, give support, and export or delete data when you ask. Those requests are done with admin tools and recorded in a register that cannot be edited. The register holds counts and dates, never message text.
No selling, no training
We do not sell the data, we do not use it for our own marketing and we do not use it to train models for other clients.
How long messages are kept
Message text is kept 90 days by default. After that a nightly job replaces it. You can set the period anywhere from 7 to 3,650 days in your dashboard. Summaries older than the period are deleted, and customer names are cleared from old booking proposals. Booking records, the conversation record (dates, counts, references) and saved customer details (name, language) stay until you ask us to delete them. Backups can still hold erased data for up to 30 days.
Customers can opt out
A customer can send STOP (in English, Arabic or Arabizi) or ask to stop in plain words. Bader confirms once, and then every message to that person is blocked, including alerts to staff. START turns messages back on.
Honest about being an AI
Bader says it is an AI assistant and offers a person from your team. It never pretends to be human.
Who processes data for us
The providers that process data include Meta (WhatsApp), Anthropic and Google Gemini (writing replies), Cloudflare and Resend (login emails), plus hosting, monitoring and backup providers. We confirm the hosting region and the full list in the agreement.
Export and deletion
On request our team exports your data as a JSON file plus your knowledge files, then deletes it.
What we do not claim
We do not claim security certifications, and we do not use phrases such as "bank-level security". Connections are encrypted. If you need something specific, ask on the quick call and we answer in the agreement.
FAQ
Does Bader train AI models on my customers' messages?
No. We do not use client data to train models for other clients.
Where is the data stored?
We confirm the hosting region in the agreement. We do not state a region before then.
Can I get my data back, or have it deleted?
Yes. We export it as a JSON file plus your knowledge files and then delete it on request. Backups can keep erased data for up to 30 days.
Who in your team can read my conversations?
Our team accesses client data only to run the service, give support, and export or delete data on request. Each such request is recorded in a register that holds counts and dates, not message text.
What if a customer does not want messages?
They send STOP, in English, Arabic or Arabizi, and every message to that person is blocked until they send START.
Is Bader GDPR compliant?
We handle your customers' data on your instructions, and you stay in control of it. We do not claim certifications we do not hold. Ask for the data section of the agreement on the call.