Arah Marketing

Privacy Policy

Last updated: October 23, 2026

This Privacy Policy explains how Arah Marketing ("the Service"), operated by PT Arah Creation Network ("we", "us", "our"), collects, uses, and protects your information.

1. Information We Collect

When you use the Service, we may collect:

  • Account information you provide (name, email).
  • Data from platforms you connect (including Google and YouTube, TikTok, and Meta/Facebook/Instagram), such as your profile information, YouTube channel information, video/post lists, comments, and advertising account and campaign data — limited to what the connected platform's API returns and what you've authorized via that platform's OAuth consent screen.
  • Access and refresh tokens issued by connected platforms, stored encrypted.
  • WhatsApp data, if you connect a WhatsApp Business number (see section 2): the WhatsApp Business Account and phone number details, the content and timestamps of messages exchanged with your customers, the phone numbers and profile names of those customers, message delivery status, synced chat history and contacts from your WhatsApp Business App, and the connection access token (stored encrypted).

2. How We Use Information

We use collected information to:

  • Operate the features you use — signing in, connecting and publishing to YouTube, posting content, moderating comments, and displaying analytics.
  • Maintain and refresh your platform connections (e.g. token refresh).
  • Provide workspace administrators visibility into connection status for support purposes.

We do not sell your data to third parties.

2a. WhatsApp Data

You can connect your existing WhatsApp Business App number to the Service through Meta Embedded Signup (coexistence mode). You keep using the WhatsApp Business App on your phone. We receive data about your WhatsApp Business Account from Meta's WhatsApp Business Platform only for the account you choose to connect.

  • We use it to show your WhatsApp conversations in one shared inbox, to let your team reply, and to keep a record of conversations, contacts, and message status.
  • If you enable AI-assisted replies, the content of the relevant conversation is sent to our AI provider (OpenAI) to generate a reply. Disable AI replies in your workspace settings to prevent this.
  • We do not use WhatsApp data for advertising, do not sell it, and do not share it with other customers of the Service.
  • Free-form replies are only sent within 24 hours of a customer message. Outside that window, and for broadcasts, only message templates approved by Meta are sent, and broadcasts only reach contacts who opted in. Customers who reply STOP are removed from broadcasts automatically.

As the business using the Service, you are responsible for having a lawful basis to process your customers' WhatsApp messages, for collecting their opt-in before sending marketing messages, for not using WhatsApp for products or services Meta prohibits, and for informing them as required by applicable law.

3. Data Storage and Security

Access and refresh tokens are encrypted at rest. Access to connected-account data is scoped to the workspace that authorized the connection. We take reasonable technical measures to protect stored data against unauthorized access.

Data is stored on servers hosted by our infrastructure provider (Dewabiz, Indonesia). We use the following service providers to process data on our behalf: Dewabiz (hosting and storage) and OpenAI (AI-generated replies, United States, only if you enable that feature).

4. Third-Party Platforms

Your use of connected platforms (including Google and YouTube, TikTok, and Meta) is also governed by their own privacy policies. We only access data those platforms make available through their official APIs, within the scopes you authorize.

5. Data Retention and Deletion

You may disconnect a linked account at any time, which revokes and removes the associated stored tokens. Disconnecting stops further data collection from that platform. Conversation records already stored in your workspace remain until you ask us to delete them.

You can request deletion of your data, including WhatsApp conversations and contacts, by emailing us (see section 6). Requests made through Meta's data deletion flow are handled at /api/meta/data-deletion.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at helloarahnetwork@gmail.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

8. Contact

Questions about this policy can be sent to helloarahnetwork@gmail.com.