Last updated: Friday 2nd October 2026

AI chatbot development in Dubai: rules bots, AI chatbots and AI agents on WhatsApp, Instagram and your website

A good AI chatbot for a Dubai business answers from facts the business approves, in Arabic and English, on the official WhatsApp Business Platform. When a person is needed, it hands over with the whole conversation attached. It also leaves the number, the chat history and the data with the business. This page explains the three kinds of bot, where to start, Meta's 2026 rule on AI providers and the UAE data laws that apply. It ends with the 14-day build we run at Learnmind.ai, and every rule links to its source.

A small team gathers around a laptop in a bright office in front of a large screen
A chatbot that books, quotes and hands over is a build project, not a plug-in.

The short answer

There are three kinds of bot. A rules chatbot follows buttons and keywords. An AI chatbot understands free text and answers from your facts. An AI agent also acts: it books, updates the CRM and sends a payment link.

Your own assistant is allowed on WhatsApp. Since 15 January 2026, Meta's terms bar AI providers from offering AI as the "primary (rather than incidental or ancillary)" function. A clinic or showroom answering its own customers is using AI incidentally.

The data law depends on where you are licensed. Mainland companies follow Federal Decree-Law No. 45 of 2021. DIFC and ADGM firms follow their own laws, and health providers also follow Federal Law No. 2 of 2019.

A bespoke build takes about two weeks. Ours starts with a 15-minute call on day 1 and goes live from about day 14. The business prepares nothing for that first call.

Keep the number and the data in your name. Meta lets a number move between providers with its display name, quality rating and approved high-quality templates kept. Write the rest of the exit into the contract.

Meta's fees sit on top of the build. From 1 October 2026, each business number gets 1,000 free service messages a month. After that, a service message to a UAE number costs USD 0.0157.

15 January 2026Meta's WhatsApp terms restrict general-purpose AI assistants offered by AI providers
1,000free service messages per business phone number per month, from 1 October 2026
USD 0.0157UAE rate per utility message, and per service message after the free tier, October 2026
250unique people a new business portfolio can message outside the 24-hour window, per rolling day
AEthe UAE is a supported region for storing WhatsApp Cloud API messages at rest
AED 500,000minimum fine for storing or processing UAE health data abroad outside the permitted cases

Rules chatbot, AI chatbot or AI agent: what you are actually buying

Quotes for "chatbot development" in Dubai often put three different products under one name. They differ in how they understand a customer, what they are allowed to do and how they go wrong. Ask which one you are being quoted for before you compare prices.

Rules chatbotAI chatbotAI agent that acts
How it understandsButtons, menus and keywords. Anything else gets "Sorry, I didn't understand."Free text in any wording. Better builds also read photos and voice notes.Everything an AI chatbot reads, plus the calendar, the CRM record and the conversation so far
What it can doShow a fixed answer or the next menuAnswer questions from an approved knowledge baseBook, reschedule, update the CRM, send a payment link, hand over to a person
How it failsThe customer loops through buttons and gives upA confident answer from a wrong or stale factA wrong action: a double booking, or a deposit link for the wrong amount
What it needs from youEvery path written out in advanceApproved facts, a tone and escalation rulesAll of that, plus access to your tools and written limits on what it may do alone
A Dubai example"Press 1 for Arabic, 2 for English"A customer asks in Arabic whether weekend parking is free, and gets the answer in ArabicA photo of a scratched bumper at 11pm: two questions, an inspection booked, the lead logged

The examples in the last row are illustrative. The rest of the table is our own comparison, not a standard taxonomy.

The real design decision is how much the bot may do on its own. A sensible first line is that it may book and reschedule, but never refund. Anything that moves money or makes a promise the business has not written down goes to a person.

WhatsApp's own policy points the same way. It says a business "may use automation when responding during the 24-hour window, but must also have available prompt, clear, and direct escalation paths". The paths it lists are an in-chat transfer to a human agent, a phone number, email, web support, an in-store visit or a support form. Only the in-chat transfer keeps the customer inside the conversation they started.

Payments need one more rule. The same policy says: "Don't share or ask people to share full length individual payment card numbers, financial account numbers, personal ID card numbers, or other sensitive identifiers." An agent that takes a deposit therefore sends a link to a payment page. It never asks for a card number in the chat.

Rules chatbot
A bot that follows a decision tree of buttons and keywords written in advance.
AI chatbot
A bot that reads free text, and often images and voice, and answers from a knowledge base the business approves.
AI agent
An AI chatbot that can also act in other systems, such as a calendar, CRM or payment tool, within set limits.

WhatsApp, Instagram or the website: where to start

In our experience, most customer conversations in Dubai already happen on WhatsApp, so it is usually the first channel to automate. Instagram comes next for brands that sell through content and ads. A website widget is the weakest of the three on its own. It only works while the visitor keeps the tab open.

WhatsApp Business PlatformInstagram messagingChat widget on your website
Who startsThe customer, or you with an approved template to someone who opted inThe customer, by messaging your professional accountThe visitor, by opening the widget
Reply window24 hours from the customer's last message. From 1 October 2026, replies beyond 1,000 a month per number are charged.24 hours to respond to a message from an Instagram userNo platform window. Your own rules apply.
After the windowApproved template messages onlyA tagged reply when a human agent needs more timeUsually nothing, because the visitor has gone
Permission to message firstThe person gave you their number and opted in to hear from youNot needed for replies, because the customer writes firstYour own consent wording
Limit on first messages250 unique people per rolling 24 hours for a new business portfolio, rising in tiersCheck Meta's current documentationYour hosting capacity
Where the history livesOn the customer's phone, and in your WhatsApp Business account and toolsIn the Instagram inbox, and in your toolsOnly where your vendor stores it
Who sets the rulesMeta's terms, policy and pricingMeta's terms and developer rulesYou, within UAE law

Meta sets WhatsApp's messaging limits per business portfolio, and every number in that portfolio shares them. A group with three branch numbers in one portfolio therefore shares one limit on first messages. The tiers after 250 are 2,000, 10,000, 100,000 and unlimited.

A laptop showing code sits open on a wooden desk
Most of the work is in the instructions, the approved facts and the handover rules, not the code.

A WhatsApp button on the website solves the widget's problem. The conversation moves to an app the customer keeps on their phone, so a reply at 11pm still reaches them. Alcaz Media, a UAE performance marketing agency, has a Learnmind WhatsApp assistant that answers its leads within seconds, 24/7. The full case is on our results page.

An AI agent on WhatsApp needs the WhatsApp Business Platform, which works through Meta's API. The free WhatsApp Business app on a phone is a different product, compared in the WhatsApp Business app versus the API. For Instagram, see Instagram DM automation in Dubai.

Meta's 2026 rule on AI providers, and why your own assistant is still allowed

On 15 January 2026, Meta updated its terms for the WhatsApp Business Platform on what it calls AI Providers. Section 4.7 covers providers and developers of AI or machine learning technologies. It names "large language models, generative artificial intelligence platforms, general-purpose artificial intelligence assistants, or similar technologies".

They are "strictly prohibited" from using the platform to offer those technologies when they are the "primary (rather than incidental or ancillary) functionality being made available for use". Meta decides that "in its sole discretion". Meta's developer page puts it in one line. "AI Providers are only permitted to offer general-purpose AI assistants on the WhatsApp Business Platform where Meta is legally required to permit this use case."

Where Meta is legally required to allow them, it charges for each non-template message an AI provider delivers. That charging began on 16 February 2026, and Meta stopped it in the European markets it covered from 13 May 2026. The same page says businesses that are not AI providers keep the existing pricing.

The buildWhat the customer is really usingOn our reading of section 4.7
A clinic's assistant that answers about its own treatments, prices and bookingsThe clinic's serviceAllowed: the AI is incidental to the clinic
A car rental firm's agent that quotes, collects details and booksThe rental businessAllowed
A property agency's agent that qualifies overseas buyers and books viewingsThe agency's serviceAllowed
A WhatsApp number offering "ask the AI anything", from recipes to homeworkThe AI itselfNot allowed, unless Meta is legally required to permit it
A reseller offering the same open-ended assistant under many brand namesThe AI itselfNot allowed
A shop's assistant that drifts into long off-topic chatsUnclearA risk. Keep it on your own services and hand the rest to a person.

Meta decides what counts as primary "in its sole discretion", so the right column is our reading, not a ruling. The safe design is the one a business would want anyway: an assistant that knows one business deeply and nothing else.

The training clause matters more than most buyers realise.

Section 4.7 lets a business retain an AI provider as its solution provider. The business then may not let its WhatsApp data be used "to create, develop, train, or improve any machine learning or artificial intelligence systems". Fine-tuning a model "for your exclusive use" is allowed.

Ask any developer, in writing, where your chats go and whether any shared model learns from them.

The background is in what ended for general-purpose assistants on WhatsApp in January 2026.

What the business must supply, and what it should not have to

A chatbot is only as good as the facts it reads. The developer should do most of the writing. The business supplies facts and decisions, because only the business can make them.

InputWho supplies itWhy it mattersIllustrative example
Services and pricesDeveloper drafts from your website; you correct itThe most-asked question, and the costliest to get wrong"Consultation AED 300, deducted if treatment is booked the same day"
What varies in a priceYouStops the bot quoting one number for a job that depends on size or season"Tinting from AED 900; exact quote after we see the car"
Booking rulesYouPrevents impossible or double bookingsLead time, buffer between slots, which staff do which service
Escalation rulesYou decide; the developer writes themDefines exactly when a person takes overAny complaint, any refund, any medical question, any order above a set value
Tone samplesYou forward real replies your best person sentThe persona is tuned against themTen to twenty WhatsApp replies, in English and Arabic
PoliciesYouStops the bot inventing exceptionsDeposits, cancellations, late arrivals, refunds
Who takes over, and whenYouA handoff needs a named person or teamFront desk until 9pm, then the manager on call
Meta setup itemsYou, guided step by stepMeta asks for them before the number goes liveA phone number not on WhatsApp now, a Facebook login, a card for Meta's fees, your logo and privacy page link

The last row comes from what our own free trial asks for. The number must be able to receive a text or a call and must not be on WhatsApp already, so a spare SIM is ideal. Meta asks for a logo and a link to the website's privacy page. WhatsApp's policy separately makes the business responsible for "maintaining a published privacy policy".

What a business should not have to do: write conversation flows, configure webhooks, or learn Meta's developer console. If a quote assumes your team will write the knowledge base from scratch, ask who is accountable when it is wrong.

Arabic quality: eight tests to run before you sign

"Speaks Arabic" can mean three different things. It may mean Modern Standard Arabic, the formal written language. It may mean Gulf dialect, which is how many customers actually type. It may also mean Arabic written in Latin letters and numbers, often mixed with English.

Dialect is where systems are weakest, because the data is thinnest. The MADAR project, from researchers in Qatar, the UAE, the US and Bahrain, built a parallel corpus of 25 Arabic city dialects. Its Gulf cities were Doha, Muscat, Riyadh and Jeddah. No city in the UAE was among the 25.

Emirati Arabic is still being documented. Ramsa, a 41-hour Emirati speech corpus with 157 speakers, appeared as a preprint in March 2026. The best speech recognition model its author tested had an average word error rate of 0.268, roughly one word in four wrong.

Then there is Arabizi. Kareem Darwish describes it as "Arabic text that is written using Latin characters". It is common "in informal settings such as social networking sites" and often mixed with English. His 2013 system detected Arabizi mixed with English with 98.5% accuracy, and converted it to Arabic script with 88.7% accuracy. The scores are from 2013; the habit is what matters for a Dubai inbox.

Send thisA good botA weak bot
"كم السعر؟" (how much?) with no contextAsks which service, in ArabicReplies in English, or pastes the whole price list
"ابي موعد بكرة العصر" (I want an appointment tomorrow afternoon, in Gulf dialect)Offers tomorrow's afternoon slots in the same registerAsks the customer to rephrase, or answers in stiff formal Arabic
"salam, 3indkum mawa3eed el youm?" (Arabizi: any appointments today?)Understands it and answers helpfullyTreats it as broken English
"Hi, ابي اعرف the price for laser"Answers the price question once, in the customer's mixSwitches language mid-sentence at random
A 20-second Arabic voice noteUnderstands it and replies, in text or a voice noteIgnores it or asks for text
A customer who switches from English to Arabic halfwayFollows the switchStays in English
A price written in Arabic-Indic digits, such as "٣٠٠"Reads it as 300Misreads or ignores the number
A complaint in ArabicHands over to a person, with the Arabic thread attachedSends a cheerful generic apology

The test messages are illustrative. Run them live, on your own number if you can. Ask a native speaker on your team, not the developer, to judge the replies.

A Learnmind agent auto-detects Arabic and replies in the customer's own language, and it handles voice notes customers send. More on dialect in an Arabic and English AI assistant on WhatsApp.

Hosting and data: which UAE law applies to your chatbot

A chatbot processes personal data from the first message: a name, a phone number, often a voice. The federal law's definition of personal data lists a person's voice among the things that can identify them (Article 1). Which law governs the rest depends on where the business is licensed and what it does.

Where your business sitsMain lawWhat it means for a chatbot
Mainland UAE companyFederal Decree-Law No. 45 of 2021, in force since 2 January 2022Consent or another listed basis (Article 4). Fair, transparent and lawful processing (Article 5). Tell people what you do with their data before you start (Article 13).
DIFC firmDIFC Data Protection Law, DIFC Law No. 5 of 2020People can object to solely automated decisions with serious effects and require a manual review (Article 38). Regulation 10, introduced in September 2023, adds notice duties for AI systems.
ADGM firmADGM Data Protection Regulations 2021Administrative fines of up to USD 28 million, and a data protection fee to pay
Clinic or other health providerFederal Law No. 2 of 2019 on ICT in health fields, which also applies in free zonesHealth data on UAE services may go abroad only in permitted cases (Article 13); records kept at least 25 years (Article 20)
Bank or lenderThe federal law excludes banking and credit data that has its own legislation (Article 2)Check locally with your regulator and compliance team

The federal law's exclusions are in Article 2(2). They include health data with its own legislation, banking and credit data with its own legislation, and free zone companies with their own data protection laws. That is why a DIFC firm and a Deira clinic can face different rules for the same chatbot.

The federal law's Executive Regulations had "yet to be issued" according to a Chambers practice guide updated on 10 March 2026. Once they are issued, controllers and processors get six months to comply (Article 29). We could not confirm the position on the day of writing.

Federal Decree-Law No. 45 of 2021What it says, in shortWhat it means for the build
Article 5Data limited to what the purpose needs, and not kept once the purpose is metLog what you need and set a retention period for chats
Article 7(5)The controller appoints a processor with sufficient technical and organisational guaranteesYour developer is usually your processor. Ask how they secure your data.
Article 8(4)The processor erases the data when processing ends, or hands it to the controllerWrite the exit into the contract
Article 13(2)Before processing, tell people the purposes, who receives the data inside and outside the UAE, and the cross-border safeguardsSay it in your privacy policy, in plain words
Article 18(4)On request, a human reviews decisions made by automated processingYour handoff path doubles as this
Articles 22 and 23Transfers abroad, including where needed to perform a contract with the person (Article 23(1)(d))AI processing often runs abroad. Record the basis you rely on.

The article summaries are our translation from the official Arabic text. They are a guide for planning a build, not legal advice.

Hosting has a practical answer for WhatsApp itself. Meta's Cloud API offers local storage, and the UAE (AE) is on its list of supported regions. With it switched on, message content may still sit in Meta data centres abroad while in use, for up to 60 minutes. After that it is kept at rest only in the region chosen.

CountryListed as a WhatsApp Cloud API local storage regionIf you serve customers there
UAEYes (AE)Local storage available
BahrainYes (BH)Local storage available
Saudi ArabiaNot listedCheck locally
QatarNot listedCheck locally
KuwaitNot listedCheck locally
OmanNot listedCheck locally

Local storage covers Meta's copy of the messages. It does not cover the AI model, the CRM or the developer's own database, which each run somewhere. Ask the developer to name each system and where it runs.

Clinics: health data has its own rule.

Under Article 13 of Federal Law No. 2 of 2019, health data about services provided in the UAE may go abroad only in cases set by a decision of the health authority. Breaking that rule carries a fine of AED 500,000 to 700,000 (Article 24).

WhatsApp's policy adds a limit of its own. It says not to use WhatsApp for telemedicine or to "send or request any health related information" where regulations demand systems that meet "heightened requirements". Decide what clinical information the bot will ever see before anyone builds it.

For the full picture on messages, see WhatsApp and UAE data protection law. Clinics should also read WhatsApp for Dubai clinics.

The build, stage by stage, and what to ask at each one

Every serious build passes through the same stages, whatever the developer calls them. The questions below are the ones that separate a plan from a sales deck.

StageWhat should happenAsk the developerRed flag
DiscoveryA short call that maps services, pricing logic, common questions and tone"What will you need from us after this call?"A 30-page questionnaire
KnowledgeApproved facts drafted from your site and corrected by you"Will it only say what we approved?""It learns from the internet"
PersonaName, tone, discovery questions, objection handling and escalation rules"Can we read it before it goes live?"No written persona at all
IntegrationsCalendar and CRM connected, with limits on what the bot may change"What can it do without asking us?"Full write access to everything
TestingReal questions from your inbox, in English and Arabic, including the awkward ones"Which of our past messages did you test with?"Only tested on invented questions
LaunchLive on your number, watched closely in the first days"Who reads the conversations in week one?"Launch and leave
After launchSame-day updates when prices or services change"How fast does a price change go live?"Changes queued for a monthly release
A team stands around a small board on a desk, planning a project
The first week of a good build is mapping how customers actually ask, and what the answers must be.

Testing deserves the most time. A bot that handles the twenty most common questions well and hands over the rest is worth more than one that attempts everything. In our view, most failed pilots come down to what the bot was allowed to guess, not to the model. If you are comparing whole agencies, see choosing an AI automation agency in Dubai.

Who owns the bot, the number and the data

Ownership is the clause buyers skip and regret. The number, the chat history and the approved knowledge are the business's assets. A good contract says so before anything is built.

AssetWho should hold itWhyPut this in the contract
The WhatsApp number and accountThe business, in its own Meta business portfolioA number can move to another provider and keep its display name, quality rating and approved high-quality templatesThe account sits in your portfolio; the developer gets partner access
Conversation historyThe businessMeta's migration guide does not say that chat history movesA full export in a readable format on exit
Approved knowledge, persona and rulesThe businessThey encode your prices, policies and voiceA copy of every approved answer and rule
Customer recordsThe businessIt is your customer listThe CRM in your name, or a full export on exit
Training on your chatsNobody elseMeta's terms bar using WhatsApp data to train other AI modelsNo shared model learns from your conversations
The developer's copy of your dataDeleted at the endArticle 8(4) of the federal lawDeletion confirmed in writing

Meta's guide to moving a number between WhatsApp Business accounts lists what it keeps: "display names, quality ratings, template messaging limits, Official Business Account statuses, and approved, high-quality templates". Registration is instant, so messages keep flowing. Templates take time to duplicate and cannot be used until they finish.

Before a move, Meta lists these conditions:

If a developer registers your number in their own portfolio, moving away later depends on their cooperation. Ask on day one whose portfolio it will sit in.

Running costs after launch: Meta's fees and the upkeep

There are two running costs: Meta's message fees and the work of keeping the bot accurate. Meta has charged per message since 1 July 2025, priced by the country calling code of the recipient's number. From 1 October 2026, service messages and utility messages inside the 24-hour window are charged too. Each business phone number gets 1,000 free service messages a month.

Message type, to a UAE numberOctober 2026 rateTypical use by a chatbot
ServiceUSD 0.0157 after the first 1,000 a month per numberThe bot's replies to customers who wrote first
UtilityUSD 0.0157Booking confirmations and reminders sent as templates
MarketingUSD 0.0576Offers to people who opted in

One month of Meta fees for a Dubai clinic, October 2026

Setup: one business number, customers on UAE numbers.

Service replies: 2,600 sent by the bot. The first 1,000 are free; 1,600 × USD 0.0157 = USD 25.12.

Utility reminders: 400 appointment reminders × USD 0.0157 = USD 6.28.

Marketing: 300 offers to opted-in customers × USD 0.0576 = USD 17.28.

Meta's bill: USD 48.68 for the month, paid to Meta directly, separate from the build.

Illustrative example, using Meta's October 2026 UAE rates.

Our free trial page puts the per-reply fee at about AED 0.06 after the 1,000 free each month. Model your own volume with the WhatsApp pricing calculator in AED.

Upkeep is the larger cost in time. A bot that quotes last month's price does more damage than no bot. These are the changes that trigger an update:

What changesExampleWhat must be updated
Prices or packagesA summer offer starts or endsApproved facts, and any template that quotes a price
Opening hoursRamadan hours, or a public holidayHours, booking rules and the out-of-hours handoff
Meta's pricingThe 1 October 2026 change to service and utility messagesCost forecast and template plan
Meta's policyThe WhatsApp Business Messaging Policy, last updated on 23 September 2026Escalation paths, opt-in wording
What customers askA new question appears many times in a weekA new approved answer

Marketing messages also need recorded opt-in, which we cover in WhatsApp marketing consent in the UAE.

Twelve questions to ask any chatbot developer in Dubai

Print this table and take it to every meeting. A developer who answers all twelve plainly is worth a second conversation.

QuestionA good answerA red flag
1. Is it on the official WhatsApp Business Platform?Yes, through Meta's APIAn unofficial bridge or a web-session tool
2. Whose Meta business portfolio holds the number?YoursTheirs
3. How does it stay within Meta's AI provider rule?It only serves your business and your customers"It can answer anything"
4. Where are the chats, the model and the CRM hosted?Names each system and its region"In the cloud"
5. Will any shared model learn from our chats?No, in writingA vague answer
6. What does it say when it does not know?It hands over to a personIt makes a best guess
7. How does a person take over?In the same chat, with the history attachedThe customer is told to call
8. Can we read every conversation?Yes, in an operator viewMonthly reports only
9. Which kinds of Arabic does it handle?Shows dialect, Arabizi, mixed messages and voice notes liveShows a translated menu
10. How fast does a price change go live?The same dayThe next release
11. What will Meta charge on top?Quotes the per-message rates"Included", with no numbers
12. What do we keep if we leave?The number, an export, the knowledge base, deletion of their copySilence

Questions 3 to 5 are the ones most buyers miss. They decide whether the bot is still yours, and still allowed, in a year's time.

How Learnmind builds this

Learnmind.ai is based in Dubai and builds bespoke AI systems for customer conversations. That means WhatsApp AI agents, Instagram and Facebook comment and DM automation, an AI voice receptionist for phone calls, and an AI-first CRM. Builds are bilingual in English and Arabic. Here is the build, day by day.

  1. Day 1: a 15-minute callWe map your services, pricing logic, common questions and brand voice. You prepare nothing.
  2. Days 2 to 5: the personaName, tone, discovery questions, objection handling and escalation rules.
  3. Built and tested on real questionsThe system is built, connected to your calendar and CRM, and tested against the questions your customers actually send.
  4. Live from about day 14The agent goes live on your number, and you see every conversation in the operator view.
  5. Updates the same dayWhen a price, service or policy changes, we update the agent that day.

Once live, the WhatsApp agent does these jobs:

From our results page: Alcaz Media is a UAE performance marketing agency. Its WhatsApp assistant answers leads within seconds, 24/7, qualifies them, shares pricing and books strategy sessions. It handles images and voice notes, and deflects spam. It sends the agency's founder a summary with the full transcript.

The case study says it runs at a fraction of a junior SDR's cost, typically AED 8,000 to 15,000 a month in the UAE. For Lola's Lashes, a UK beauty brand, we manage more than 500 Facebook and Instagram comments a month, 24/7, with responses within minutes in the brand's tone. We also work with healthcare and aesthetics clients we cannot name.

You can try it before you commit. The free 14-day WhatsApp AI trial runs on your own number; the trial is free, and Meta bills its own message fees directly. For phone calls, our AI voice receptionist Starter plan is USD 299 a month with no setup fee. It includes 500 minutes, costs USD 0.25 a minute over, and goes live in 48 hours on your existing number.

See how a Learnmind system goes live for the full process.

Frequently asked questions

Who builds AI chatbots for WhatsApp in Dubai?
Learnmind.ai, based in Dubai, builds bespoke WhatsApp AI agents in English and Arabic. It also builds Instagram and Facebook DM and comment automation, an AI voice receptionist and an AI-first CRM. A build starts with a 15-minute call and goes live from about day 14. You can also start with a free 14-day trial on your own number.

How long does it take to build an AI chatbot for a Dubai business?
A bespoke WhatsApp agent takes about two weeks at Learnmind. There is a 15-minute call on day 1, the persona on days 2 to 5, then building and testing on real questions. It goes live from about day 14, and changes after launch are made the same day.

Is an AI chatbot still allowed on WhatsApp after Meta's 2026 rule change?
Yes, for a business's own customer service, on our reading of the terms. Since 15 January 2026, Meta bars AI providers from offering AI as the "primary (rather than incidental or ancillary)" function, unless legally required. An assistant answering a business's own customers about its own services is incidental to that business.

Does a chatbot in the UAE have to store data inside the UAE?
Not as a general rule for mainland companies: the federal data law allows transfers abroad in the cases in Articles 22 and 23. Health data is different, because the health ICT law allows it abroad only in permitted cases. Meta offers local storage for WhatsApp messages in the UAE region.

Can an AI chatbot understand Gulf Arabic and Arabizi?
Good ones can, but dialect is where systems are weakest, because there is less data. Test it yourself with a Gulf dialect request, an Arabizi message, a mixed English and Arabic message and a voice note. Ask a native speaker on your team to judge the replies.

Who owns the WhatsApp number if we change chatbot developer?
You should, if the number sits in your own Meta business portfolio. Meta lets a number move between providers and keep its display name, quality rating and approved high-quality templates. Chat history is not mentioned in Meta's guide, so agree an export in the contract.

How much does it cost to run a WhatsApp chatbot in the UAE?
There is the build, and there are Meta's message fees. From 1 October 2026, each number gets 1,000 free service messages a month. To a UAE number, further service messages and all utility messages cost USD 0.0157 each, and marketing messages USD 0.0576. The build is bespoke, and it starts on day 1 with a 15-minute call where Learnmind maps your services, pricing logic, common questions and brand voice.

Do we have to tell customers they are talking to an AI in the UAE?
We found no specific AI disclosure rule in Federal Decree-Law No. 45 of 2021, but processing must be fair and transparent. In the DIFC, Regulation 10 requires notice when a person first uses a service whose AI system processes their data. If a customer asks whether they are talking to a person, the answer should be true.

Can a WhatsApp chatbot take payments?
An AI agent can send a link to a payment page inside the conversation. WhatsApp's policy says not to ask people to share full payment card numbers in the chat. So the card details go on the payment page, never in a message.

Want a WhatsApp AI agent that knows your business?

We build agents that answer from facts you approve, in Arabic and English, and hand over to your team with the whole conversation attached. You see every conversation in the operator view.

How we checked this, and what we could not settle

Checked: the Meta pages in the sources were read on 2 October 2026, except as noted below. The terms and the WhatsApp Business Messaging Policy both show a last-updated date of 23 September 2026.

The UAE federal data law was read in the official Arabic text linked from the UAE government portal, and the English summaries are our translation. The DIFC law is the March 2022 consolidated version. The health ICT law is the English translation published by Emirates Health Services.

Not settled: we could not open the text of DIFC Regulation 10 itself. Its description here comes from a Mayer Brown briefing of 19 January 2026 and a Chambers guide updated on 10 March 2026. We could not confirm whether the federal law's Executive Regulations have been issued since March 2026.

Meta's pricing page did not load in full for us on the day. The October 2026 UAE rates and the free tier were verified on Meta's pricing documentation on 27 September 2026. The worked example, tables, Arabic test script and twelve questions are our own work.

Sources

Written by Edmund Gay, Learnmind.ai, Dubai. Rules, figures and quotations come from the sources listed; the comparisons, our reading of Meta's terms and the worked example are our interpretation.