Privacy notice
Draft — pending review by a Bahraini lawyer. Not legal advice.
Last updated: 2026-10-05
1. Who is responsible
For this website and your account, Click Automations, Kingdom of Bahrain (contact: clickautomationbh@gmail.com) is the data controller. When an automation handles your customers' data for your business, your business is the controller and Click processes it on your behalf.
2. What we collect
Only what we need: your name, email, WhatsApp number and business details when you fill in a form or create an account; technical logs needed to keep the site secure. We never ask for or store health records, ID numbers or card numbers.
3. Why
To answer your request, set up and run automations you buy, bill you, keep the service secure and meet legal obligations. We don't sell your data or use it for unrelated advertising.
4. Customer chats
When an automation stores conversations with your customers, it first shows them a consent notice. Conversation logs are kept for 30 days by default (you can change this) and you can export or delete them at any time.
5. Where data is stored
Our database is hosted by Supabase in the European Union (Frankfurt, Germany). Messaging uses Meta (WhatsApp) and AI features use Anthropic. Some of these providers process data outside Bahrain. Bahrain's Personal Data Protection Law (Law No. 30 of 2018) restricts transfers abroad; a local lawyer is reviewing these arrangements before launch.
6. How long
Form submissions: up to 12 months, unless they become a customer relationship. Account and billing records: as long as the law requires. Chat logs: 30 days by default.
7. Your rights
You can ask to access, correct, export or delete your data, and you can withdraw consent at any time by contacting us. You may also complain to Bahrain's Personal Data Protection Authority.
8. Security
Encrypted connections, access controls on every table so one customer can never see another's data, rate limits, signed webhooks and an audit log of admin actions.