Privacy Policy

Abbu is a bilingual (Arabic and English) AI coworker for teams. Your team uses Abbu primarily through Telegram, where it can read your organisation's own documents, answer questions and cite its sources, and draft paperwork from your templates. Organisation administrators also have access to a web admin dashboard.

This Privacy Policy explains what information we collect when you and your organisation use Abbu, how we use it, who we share it with, and the choices and rights available to you. It applies to the Abbu service and our public website.

This is an initial version (v1) of our Privacy Policy for an early-stage product. We expect it to evolve as the service matures, and we will update this page when it does.

We collect the following categories of information so that Abbu can do its job for your organisation:

We use the information above to provide, operate, and improve the Abbu service. In practice, this means using your organisation's documents to answer questions and point back to the source it relied on, and drafting and quality-checking paperwork from your templates in Arabic and English.

Abbu is hosted in Saudi Arabia, and we aim to keep customer data within the Kingdom of Saudi Arabia, consistent with our commitment to data residency in the Kingdom.

Where a limited part of the service necessarily involves a third party that operates from elsewhere, we work to ensure such processing is handled appropriately and only as needed to run the service. Our use of messaging platforms is described in the sharing section below.

Abbu is designed so that each customer organisation's data is logically separated from every other organisation's data. Your documents, conversations, and drafts belong to your organisation and are not used to answer another organisation's questions.

When Abbu answers a question, it draws on your organisation's own materials and cites the source document or section it relied on, so your team can verify the answer.

We do not sell your organisation's content. We share information only with the service providers we rely on to run Abbu, and only to the extent needed to deliver the service. These providers act on our instructions and are expected to handle information appropriately.

The categories of providers we use include:

Because Abbu works inside Telegram, your interactions with Abbu pass through that platform, and Telegram's own terms and privacy practices apply to your use of it. We encourage you to review Telegram's policies to understand how it handles information.

We use messaging platforms only to enable your team to chat with Abbu, not for any unrelated purpose.

Abbu generates answers and drafts using AI, and it cites the source documents it relied on so your team can check them. While we design Abbu to ground its answers in your organisation's own materials and to reduce errors, AI-generated output can still be incomplete or inaccurate.

Abbu is a tool to assist your team, not a substitute for professional, legal, or other expert advice. Please review Abbu's answers and drafts, and verify them against the cited sources, before relying on or acting on them.

We retain information for as long as it is needed to provide the service to your organisation, to meet legal and operational requirements, and to keep the service secure and reliable.

When information is no longer needed for these purposes, we take steps to delete or de-identify it. Administrators can also contact us about removing specific content, as described below.

Consistent with the Saudi Personal Data Protection Law (PDPL), individuals whose personal data we process may have rights in relation to that data, including:

To exercise any of these rights, please contact us at basil@abbu.io. Where personal data sits within an organisation's account, we may need to work with that organisation's administrator to handle your request, and we may need to verify your identity before acting.

We will respond to requests in line with applicable Saudi law.

We use industry-standard measures designed to protect the information entrusted to us, and we treat the security of customer data as a priority. We aim to protect information against unauthorised access, alteration, and loss, but no system can be guaranteed to be completely secure.

If you have a security concern or question, please contact us at basil@abbu.io.

As an early-stage product, Abbu will continue to evolve, and so will this policy. When we make changes, we will update this page so it reflects our current practices, and we encourage you to review it from time to time.

If you have any questions about this Privacy Policy or how we handle information, please contact us at basil@abbu.io. This policy is governed by the laws of the Kingdom of Saudi Arabia.