Privacy policy

01Who we are

Hashinclude is an engineering company based in Dubai, United Arab Emirates. We build and operate software for businesses and public bodies. This policy covers two things: this website, and the messaging services we run on the WhatsApp Business Platform and Instagram on behalf of client businesses.

When you message a business that uses our service, that business decides why and how your data is used. We process it on their instructions. For this website, Hashinclude is responsible for your data.

02What we collect

On this website

• Details you send us through the contact form or the chat assistant: your name, email address, mobile number, company and what you asked about.
• Usage information collected by Google Analytics and Hotjar, such as pages visited, approximate location, device and browser. These tools set cookies.

When you message a business that uses our service

• Your phone number or Instagram account id, the name on your profile, and the messages and media you exchange with the business.
• Notes the business adds about your inquiry, and a record of when and how you agreed to or declined marketing messages.

When a business connects its WhatsApp or Instagram account to us

• The business name, WhatsApp Business Account id, phone number id, Instagram account id, and the access permission the business grants through Meta’s sign-up flow. We never see the Facebook password of the person who connects the account.

03How we use it

• To reply to your enquiry to Hashinclude and manage our relationship with you.
• To deliver messages between you and the business you contacted, help its staff reply, and send reminders or updates you have agreed to receive.
• To keep the service secure, investigate faults, and keep an audit record of actions taken in it.
• To understand how this website is used so we can improve it.

Some replies to routine questions, such as prices, locations and timings, are drafted automatically from information the business has published. Automatic replies are limited by fixed rules, and a person at the business reviews anything outside them. Marketing messages are sent only with your consent. Reply STOP to any message to opt out.

04Who we share it with

We do not sell personal data. We share it only with:

• The business you are messaging, which sees its own conversations and no one else’s.
• Meta Platforms, because WhatsApp and Instagram messages travel through Meta’s systems under Meta’s own terms and privacy policy.
• Service providers that host our systems, provide website analytics, or provide the AI models used to draft replies. They process data only to provide that service to us.
• Authorities, where the law requires it.

Data we receive from Meta is used only to provide the messaging service to the business that connected its account. We do not use it for advertising or combine it across businesses.

05How long we keep it

Conversation data is kept for as long as the business you messaged uses our service, or until you or the business ask us to delete it. Website enquiries are kept for as long as needed to respond and to maintain our business relationship. Records of opt-outs are kept so that we can continue to honour them.

06Your rights and data deletion

You can ask to see, correct or delete the information held about you at any time, and you can withdraw consent to marketing messages. These rights apply under the UAE Personal Data Protection Law and similar laws elsewhere.

To have your data deleted, do either of the following:

1. Email hello@hashinclu.de from any address, giving the phone number or Instagram username you used and the business you messaged.
2. Send the word DELETE to the business on the same WhatsApp or Instagram conversation.

We remove your contact record, conversation history and notes within 30 days and confirm when it is done. We keep only the record of your opt-out, where the law requires it.

A business that connected its WhatsApp or Instagram account can disconnect us at any time in Meta Business settings, under Integrations, or by emailing us. On disconnection we delete the stored access permission, and we delete the business’s conversation data within 30 days of its request.

07Security

Data is encrypted in transit and at rest, access is limited to the staff who need it, and actions in the service are recorded in an audit log. More detail is on our security page.

08Changes and contact

We will post any change to this policy on this page and update the date at the top. Questions and requests go to hello@hashinclu.de. Hashinclude, Dubai, United Arab Emirates.