Privacy Policy

This Privacy Policy explains how information is collected, used, and protected when you visit Rabea Shaban's website (https://www.rabea-shaban.com) or communicate with us through our contact form or associated WhatsApp Business API channels.

We collect only the minimum information needed to respond to inquiries and operate our technical services. We never sell, rent, or trade your personal data to advertisers or data brokers.

When you voluntarily submit the contact form (/contact), the data is sent to our contact endpoint (/api/contact) and includes:

• Name
• Email address
• Subject (optional)
• Message content

This information is used solely to review and reply to your inquiry via email (rabea.elzayate@gmail.com) through our mail delivery provider (SMTP or Web3Forms). It is not added to marketing lists.

The website stores display preferences locally in your browser (localStorage under the key rabea_portfolio_settings) to remember your UI choices across visits:

• Theme mode (light, dark, or system)
• Accent color, button style, and font size
• Selected language (English or Arabic) and animation preference

These preferences stay on your device, are not used for cross-site tracking, and can be cleared anytime via your browser settings.

When you send messages to our WhatsApp Business number or interact with our WhatsApp Cloud API integration connected to our webhook endpoint (whaths.vercel.app), Meta transmits webhook payloads that may include:

• Sender phone number, WhatsApp ID, and profile name (when provided by WhatsApp)
• Message content or incoming media metadata
• Timestamps and message delivery/read status updates

This data is processed strictly to receive, verify, and reply to WhatsApp messages. Currently, webhook events are handled transiently in serverless runtime logs hosted on Vercel and are not persisted in an external database.

Operating the website and WhatsApp webhook relies only on essential infrastructure and communication providers:

• Meta Platforms (WhatsApp Business Cloud API) to deliver WhatsApp messages and webhook events
• Vercel for hosting the website, serverless webhook endpoint, and operational runtime logs
• Email transport providers (SMTP / Web3Forms) to deliver contact form messages

Contact inquiries and messages are retained only as long as reasonably necessary to respond to your request or deliver requested services. Traffic to the website and webhook is served over HTTPS, and environment credentials are restricted to server configuration.

You may request access to, correction of, or permanent deletion of your personal data (including contact form emails or WhatsApp interaction records under our control) at any time:

• Send an email to: rabea.elzayate@gmail.com
• Use the subject line: Data Deletion Request
• Include the email address or WhatsApp phone number used so we can locate and remove the relevant records

We will confirm and complete deletion requests for records under our control promptly (within 7 business days). Browser UI preferences can be cleared immediately from your browser's site storage.