From customers who message a business: WhatsApp phone number and profile name, the content of messages (text, and any voice notes, images or documents the customer chooses to send), times, delivery and read status, and the language of the conversation. From the business using it: the account holder's name and contact details, the assistant's settings, and the information the business gives the assistant to answer from, such as its services, prices, opening hours and frequently asked questions.

We share personal data only with the service providers we need to run the website and our services, and only what each one needs: Meta Platforms, which provides the WhatsApp Business Platform that carries Tothiq Assistant messages. Meta's own terms and privacy policy also apply to your use of WhatsApp. AI model providers, which process message content to generate the assistant's replies. Our hosting provider, which runs the server that holds the website and its database. Cloudflare, which provides the website's security, network delivery and spam check. Payment providers such as PayPal, when you pay us. Professional advisers, such as lawyers and accountants, when we need their advice. Authorities, when Kuwaiti law or a valid legal order requires it. A business that uses Tothiq Assistant can see the conversations its own customers have with it. We do not sell personal data to anyone.

Enquiries and form submissions: up to 24 months after our last contact with you, unless you become a client. Client records and invoices: for as long as Kuwaiti commercial and tax law requires. Analytics: up to 12 months. Tothiq Assistant conversations: for the period the business sets, and by default no longer than 90 days after the conversation. When a business stops using the assistant, its conversations and information are deleted within 30 days. Backups: deleted data disappears from our backups as they rotate, within 30 days.

Privacy Policy

Effective date: 26/9/2026

This policy explains what personal data Tothiq collects, why, how long we keep it and what you can ask us to do with it. It covers the tothiq.ai website in English and Arabic, the forms on it, and Tothiq Assistant, our AI assistant for WhatsApp.

Who we are

Tothiq AI Services and Solutions (شركة توثيق لخدمات وحلول الذكاء الاصطناعي), a one-person company registered in Kuwait under commercial registration no. 554122. Our office is at Capital Governorate, Qibla, Block 6, Street 46, Building 3B, Floor 1, Office 10, Kuwait 14006. In this policy, “Tothiq”, “we” and “us” mean this company.

Two different roles

How we handle your data depends on how you reach us.

When you use our website, contact us or become a client, Tothiq decides why and how your data is used. We are responsible for it.
When you message a business that uses Tothiq Assistant, that business decides why your data is used, and Tothiq processes your messages on its behalf and under its instructions. The business is responsible for telling you how it uses your data. This policy explains what Tothiq does as its service provider.

What we collect on the website

Forms

Our contact and enquiry forms ask for your name, company (optional), email address and/or WhatsApp or phone number, the service or topic you are asking about, how soon you need it, and your message. We also record the page you sent the form from, the language you used and the time. Each submission is stored in our website’s database and a notification is sent to our office inbox so we can reply.

To keep spam out, the forms use a hidden field, a timing check and Cloudflare Turnstile, which checks whether the visitor is a person. Turnstile processes your IP address and technical browser signals for that check only.

Cookies

We use a small number of cookies:

Necessary: a cookie that remembers your language (English or Arabic), a cookie that records your cookie choices, and security cookies set by Cloudflare to protect the site from abuse. The site cannot work properly without them.
Analytics: set only if you allow them in the cookie banner.

The cookie banner is provided by CookieAdmin. You can change your choice at any time from the cookie settings link shown on the site, or by clearing cookies in your browser.

Analytics

We measure visits with WP Statistics, which runs on our own web server; the data is not sent to an outside analytics company. It records the pages viewed, the referring site, browser, device type, and an estimated country. IP addresses are anonymised and are not stored in full. We use these figures only to understand which pages are useful. We do not use advertising trackers or build advertising profiles.

Messages, clients and purchases

If you message our business WhatsApp number or write to us, we keep the conversation so we can answer and follow up. If you become a client, we keep your contact details, your company details, what we agreed and your invoices. If you buy or register a Tothiq WordPress plugin or theme, we keep your account email, the site the licence is used on, the licence key and your purchase record. Payments are handled by the payment provider (such as PayPal); we never see or store your full card number.

Tothiq Assistant (WhatsApp)

Tothiq Assistant is an AI assistant that answers a business’s customers on WhatsApp. It is bilingual: it replies in the language the customer writes in, including Arabic and English. It runs on the WhatsApp Business Platform provided by Meta.

What it processes

From customers who message a business: WhatsApp phone number and profile name, the content of messages (text, and any voice notes, images or documents the customer chooses to send), times, delivery and read status, and the language of the conversation.
From the business using it: the account holder’s name and contact details, the assistant’s settings, and the information the business gives the assistant to answer from, such as its services, prices, opening hours and frequently asked questions.

How it works

When a customer sends a message, WhatsApp delivers it to our system. The assistant identifies the language, looks up the answer in the business’s own information, uses an AI language model to write a reply in the same language, and sends it back through WhatsApp. Where the business has set it up, the assistant passes the conversation to a member of the business’s staff, for example when the customer asks for a person or when the question is outside what the assistant knows.

The assistant does not make decisions that have legal or similarly significant effects on anyone. Businesses using it must tell their customers that they are talking to an automated assistant and must have the customer’s permission to contact them on WhatsApp, as WhatsApp’s own business policies require.

What we do not do with message content

We do not sell it or share it with advertisers.
We do not use it to train AI models, ours or anyone else’s. The AI providers we use process it only to produce the reply, under terms that do not allow them to train on it.
We do not use one business’s customer conversations for another business.
We only read conversations when the business asks us to, or when it is necessary to fix a fault, prevent abuse or meet a legal obligation.

Why we use personal data

To reply to your enquiry and give you the service you asked for (to take steps before a contract, or to perform it).
To run Tothiq Assistant for the businesses that use it (on their instructions).
To send invoices, reminders about renewals and service messages (to perform our contract).
To keep the website and our systems secure and free of spam (our legitimate interest).
To understand how the website is used and improve it (your consent, given through the cookie banner).
To keep records that the law requires (legal obligation).

We follow the data protection rules that apply to us in Kuwait, including the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority (CITRA), and the laws of other GCC countries where we serve clients.

Who we share it with

We share personal data only with the service providers we need to run the website and our services, and only what each one needs:

Meta Platforms, which provides the WhatsApp Business Platform that carries Tothiq Assistant messages. Meta’s own terms and privacy policy also apply to your use of WhatsApp.
AI model providers, which process message content to generate the assistant’s replies.
Our hosting provider, which runs the server that holds the website and its database.
Cloudflare, which provides the website’s security, network delivery and spam check.
Payment providers such as PayPal, when you pay us.
Professional advisers, such as lawyers and accountants, when we need their advice.
Authorities, when Kuwaiti law or a valid legal order requires it.

A business that uses Tothiq Assistant can see the conversations its own customers have with it. We do not sell personal data to anyone.

Data outside Kuwait

Some of our providers, including Meta, Cloudflare and AI model providers, process data in other countries. When data leaves Kuwait, we use providers that protect it with contractual and security safeguards, and we send only what is needed for the service.

How long we keep it

Enquiries and form submissions: up to 24 months after our last contact with you, unless you become a client.
Client records and invoices: for as long as Kuwaiti commercial and tax law requires.
Analytics: up to 12 months.
Tothiq Assistant conversations: for the period the business sets, and by default no longer than 90 days after the conversation. When a business stops using the assistant, its conversations and information are deleted within 30 days.
Backups: deleted data disappears from our backups as they rotate, within 30 days.

How we protect it

Traffic to the website and between our systems is encrypted. Access to personal data is limited to the people who need it, with individual accounts and strong passwords. The website is protected by Cloudflare’s firewall, and we back it up regularly. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as the law requires.

Your rights

You can ask us to:

tell you what personal data we hold about you and give you a copy;
correct data that is wrong or incomplete;
delete your data;
stop using your data for a particular purpose, or withdraw a consent you gave;
stop sending you messages.

To make a request, use our contact form and choose “Privacy or data deletion request”. We reply within 30 days. We may ask you to confirm that the data is yours before we act. For deletion, see our data deletion instructions.

If your request is about messages you sent to a business that uses Tothiq Assistant, you can ask that business directly, or ask us and we will handle it with the business.

Children

Our website and services are for businesses and adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date. If the change is significant, we will also tell our clients directly.

Contact us

Tothiq AI Services and Solutions, Capital Governorate, Qibla, Block 6, Street 46, Building 3B, Floor 1, Office 10, Kuwait 14006.

Send us a message through the contact form, or on WhatsApp at +965 9776 6454, Sunday to Thursday, 9:00–15:00 Kuwait time.

See also our Terms of Service and Data Deletion Instructions.