What this policy covers
This policy applies to the Kaçırma website, user accounts, business workspaces, support conversations, and the workflow services connected to them.
Services provided independently by WhatsApp, authentication providers, payment providers, hosting companies, and other third parties are governed by their own privacy terms. This policy does not replace those terms.
Information we handle
Account and business information may include your name, email address, sign-in details, profile image, account identifiers, acceptance records, business name, contact person, phone number, city, service areas, business hours, language preferences, and workspace settings.
An Affiliate application may also include applicant type, legal or business name, country, promotion channel, target audience, and one identity document uploaded through the dedicated KYC field for manual review.
To operate the service, we may also process team members, roles, access permissions, subscription status, invoices, and transaction records. Payment-card details may be handled by a third-party payment provider; Kaçırma may receive only the subscription and transaction information needed to manage the account.
Technical information may include IP address, browser and device details, cookies and session identifiers, sign-in times, features used, connection status, error logs, security events, and diagnostic data.
Conversations and business records
When a business connects Instagram or WhatsApp, Kaçırma may process message content, sender and recipient details, timestamps, delivery status, media references, and the other message data required to run the workflows the business has enabled.
For a linked-device connection, Kaçırma also processes connection and session identifiers, device-link state, and limited provider metadata needed to create, secure, monitor, and recover the connection. QR contents are used transiently for pairing and are not stored in the consent audit record.
Details from those conversations may become records about orders, appointments, properties, landlords, customer requirements, matches, viewings, and follow-ups. Those records may contain personal information about buyers, tenants, landlords, employees, and other people involved in the conversation.
The business is responsible for giving any required notices, obtaining any required permission, and having a valid legal basis for sending and processing this information through Kaçırma.
Why we use information
We may use information to create and protect accounts, connect authorized Instagram and WhatsApp accounts, run business workflows, display business records, manage team access, provide support, and administer subscriptions.
We may also process information to secure the service, detect misuse or suspicious activity, investigate errors, understand performance, communicate important product changes, and meet legal obligations.
Depending on the law that applies, processing may be based on entering into or performing a service agreement, meeting a legal obligation, pursuing a legitimate interest, or obtaining consent where consent is required.
Kaçırma does not sell personal data. We do not use a business’s or customer’s conversations to sell advertising.
On the Kaçırma website we use Google Analytics, Google advertising tools, and the Meta Pixel. Using cookies and similar identifiers, these tools record page visits, button clicks, sign-ups, and purchases so that we can measure how Kaçırma’s advertising performs and show Kaçırma ads on Google, YouTube, Instagram, and Facebook to people who have visited the website before. After you sign up, your email address and account ID are sent to Meta in hashed (one-way encrypted) form, together with your IP address and browser details, to measure advertising results.
Google and Meta may associate this data with your account on their own services and process it under their own privacy policies. You can turn off personalized ads in the ad settings of your Google and Meta accounts, or block or delete cookies in your browser. This measurement covers only visits to the Kaçırma website and your Kaçırma account; it does not cover the conversations of businesses or their customers.
How AI features process information
When a business uses AI-assisted replies, classification, summaries, matching, or similar features, the parts of messages and workflow context needed for that feature may be processed by an AI service provider.
We aim to send only the information needed for the selected feature. Users should not place identity documents or other highly sensitive data in messages, AI prompts, or general uploads. An Affiliate applicant should use only the dedicated private identity-document field provided in the application.
AI-generated suggestions or outputs may be stored in the workspace when needed to keep a conversation or workflow moving.
The roles of the business and Kaçırma
The business decides why information about its customers, landlords, employees, orders, and other business records is used and which workflows are enabled. Kaçırma processes that information to provide the service, apply the business’s settings, and follow its instructions.
Kaçırma may separately manage processing needed for account administration, security, billing, support, service analytics, and direct interactions with the Kaçırma website.
Customers and landlords should usually contact the business first when a request concerns a conversation or record held for that business.
Who may receive information
We may share information with providers that support hosting, databases, storage, messaging, AI processing, email, authentication, payments, monitoring, customer support, security, and analytics and advertising (Google and Meta). They receive only what is reasonably needed to perform their role.
Affiliate identity documents are available only through the restricted Platform Admin review route and may be stored by the infrastructure provider used for private application storage. Access to the review route is logged for audit purposes.
Information may also be available to authorized users of the business, messaging services required for the Instagram and WhatsApp connections, public authorities where disclosure is legally required, or relevant parties involved in a merger, acquisition, or business transfer.
Some providers or infrastructure may process information outside the user’s country. Where required, we aim to put appropriate contractual, technical, or legal safeguards in place.
How long we keep information
We retain information for as long as reasonably needed to provide the service, protect account and security records, meet legal obligations, resolve disputes, and enforce agreements.
Accounts, conversations, media, business workflow records, technical logs, support records, and backups may have different retention periods. After an account is deleted, limited information may remain temporarily in backups, security records, or commercial and legal records that must be preserved.
Affiliate identity documents are retained only while reasonably needed for application review, account administration, dispute handling, security, or a legal obligation. Where no retention obligation applies, the private document is deleted when the related account is safely deleted or the document is replaced.
When information is no longer needed, we delete it or make it no longer identifiable to a particular person where this is technically and legally feasible.
How we protect information
Kaçırma uses technical and organizational safeguards such as account controls, separation of data between businesses, access restrictions, protection of integration credentials, security logging, and controls over operational access.
Affiliate identity documents use randomized storage names, private storage, restricted Admin access, no public file URL, and audited document-view events.
No system can be guaranteed completely secure. Users should protect their passwords, review team access regularly, use trusted devices, and report suspicious activity without delay.
Your privacy rights
Depending on where you are and which law applies, you may have the right to access personal information, correct inaccurate information, request deletion, receive a copy, restrict or object to processing, or withdraw consent where processing is based on consent.
A request may be limited by legal obligations, security needs, another person’s rights, or the business’s role in relation to customer data. We may ask you to verify your identity before we act on a request.
Requests about a Kaçırma account or information processed directly by Kaçırma may be submitted through the Contact page.
Children, policy updates, and how to contact us
Kaçırma is a commercial service for businesses and is not intended for people under 18. It must not be used to collect children’s information without an appropriate legal basis and any required permission.
We may update this policy when our services, providers, legal requirements, or operations change. The latest version will appear on this page with a new “Last updated” date. Where appropriate, we may also notify users of material changes through the account, email, or another reasonable channel.
For privacy questions or requests, use the Contact page. Your use of Kaçırma is also governed by the Terms of Service.