Privacy and your data
Your business's chats and contacts belong to you. KiliChat only uses them to run the service for you. This page is a plain-English summary. The full details are in our Privacy Policy and Terms of Service.
What data does KiliChat keep?
- Logins: your team's names, email addresses and passwords. Passwords are stored only as a one-way hash, so nobody can read them.
- Your WhatsApp connection: the number, its Meta account IDs, and the access token from Meta, which is stored encrypted.
- Your customers' data: their phone numbers or WhatsApp IDs, profile names, messages and files, delivery and read status, tags, custom fields, flow answers, and whether they've opted out.
- Technical data: one essential cookie that keeps you signed in, and server logs (IP address and time) for security. There are no advertising or tracking cookies.
Who is responsible for my customers' data?
You are. Your business decides what to collect from customers and why. KiliChat (run by Digital Tamila) processes it only on your instructions, to provide the service. That's why it's important to only message people who opted in and to honour opt-outs.
Who can see my data?
- Your team, according to their roles. Each business only ever sees its own data.
- The KiliChat team, to set up and support your account.
- Meta, because every WhatsApp message passes through Meta's WhatsApp Business Platform, under Meta's own terms.
- Our hosting provider, which runs the servers.
- Authorities, only when the law requires it.
We don't sell personal data, and we don't use your chats to advertise to anyone.
How long is data kept?
As long as your account is active. When you delete a contact, or close your account, the data is removed from KiliChat straight away and from our backups within 14 days, when they expire.
How do I export my data?
Admins can download:
- contacts, with tags and details: Contacts → Export → Contacts (CSV);
- chat history: Contacts → Export → Chat history (CSV)…;
- monthly usage: Usage → CSV.
See Adding, importing and exporting contacts. Exports are recorded in the activity log.
How do I delete a customer's data?
Admins can delete a contact on the Contacts page with the bin icon. This removes the contact and their whole chat history from KiliChat, and can't be undone. To delete many, select them and click Delete.
If a customer asks you to delete their data, do this, and let them know. WhatsApp keeps its own copy of messages on the customer's phone, which KiliChat can't delete.
A customer asked us what data we have about them. What do I do?
Search for them in Contacts and open their chat to see their details and messages. Admins can export the chat history and filter the file for that customer. If you need help, contact us.
How do I close my account and delete everything?
Email info@kilichat.com from the address on your account, or message us on WhatsApp. We'll confirm we've received it and act within 30 days. Consider exporting your contacts and chats first.
If you connected your number with Facebook, you can also remove KiliChat's access in your Facebook settings under Business Integrations. That stops new access; email us to delete the data we already hold.
What are my rights?
Under India's Digital Personal Data Protection Act, 2023, you can ask to see, correct or erase your personal data, and to withdraw consent. Email our grievance officer at info@kilichat.com. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
WhatsApp customers can stop messages from any business on KiliChat at any time by replying STOP.
How is my data kept secure?
Everything is sent over HTTPS. Passwords are hashed, Meta tokens are encrypted, and each business can only see its own data. Exports, sign-ins and changes are logged. No system is perfectly secure, but if there's ever a breach, we'll tell affected clients as the law requires.
Is KiliChat part of WhatsApp or Meta?
No. KiliChat uses the official WhatsApp Business Platform, but isn't affiliated with or endorsed by Meta. WhatsApp is a trademark of Meta Platforms, Inc.