Kyto Privacy Policy

Updated: January 30, 2025

At Kyto, Inc. (“Kyto,” “we,” “us,” or “our”), we prioritize your privacy and the security of your personal data. This Privacy Policy describes how we collect, use, and share information about you through our website (“Website”), mobile applications (“Mobile Apps”), and services (collectively, “Services”). By using our Services, you consent to the practices outlined in this Privacy Policy.

Table of Contents

  • How We Collect Personal Data
  • Types of Personal Data We Process
  • WhatsApp-Specific Data Processing
  • How We Use Personal Data
  • How We Share Personal Data
  • Your Data Protection Rights
  • Retention of Personal Data
  • Cookies and Tracking Technologies
  • International Data Transfers
  • Children's Privacy
  • Data Security
  • Data Breach Notifications
  • Legal Basis for Processing (EEA, UK)
  • California Privacy Rights
  • WhatsApp Business Solution Provider Terms
  • Updates to This Privacy Policy
  • How to Contact Us

1. How We Collect Personal Data

We collect personal data in the following ways:

  • Directly From You: When you register, complete forms, communicate with us, or use our Services.
  • Automatically: When you interact with our Website, Mobile Apps, or WhatsApp Business integration.
  • From Third Parties: Such as WhatsApp Business Platform, social media platforms, payment processors, or data analytics providers.
  • Through Business Customers: When businesses use our platform to communicate with their customers via WhatsApp.

2. Types of Personal Data We Process

We process the following types of personal data:

  • Account Information: Name, email address, phone number, password, and preferences.
  • Business Account Information: Business name, registration details, WhatsApp Business account information.
  • Payment Information: Billing details, credit card numbers (encrypted), and transaction history.
  • Usage Data: IP addresses, browser type, operating system, device identifiers, and activity logs.
  • Customer Content: Data you upload or share while using our Services.
  • WhatsApp Communication Data: Message templates, chat histories, customer responses.
  • Marketing Data: Data related to your preferences, subscriptions, and interactions.

3. WhatsApp-Specific Data Processing

As a WhatsApp Business Solution Provider, we:

  • Act as a data processor for WhatsApp user data when providing services to businesses
  • Process data in accordance with the WhatsApp Business Data Processing Terms
  • Maintain strict data segregation between different business customers
  • Handle message templates according to WhatsApp's guidelines
  • Enforce 24-hour messaging window compliance
  • Process opt-in/opt-out requests for WhatsApp communications

3.1 WhatsApp Customer Data

We process the following WhatsApp-related data:

  • WhatsApp user phone numbers (as provided by businesses)
  • Message content and interaction history
  • Order and transaction information
  • Customer service chat histories
  • Message template performance data
  • Opt-in/opt-out records

3.2 WhatsApp Business Features

Our processing includes:

  • Managing message templates
  • Processing automated responses
  • Handling opt-in/opt-out requests
  • Maintaining messaging compliance
  • Managing product catalogs
  • Processing orders through WhatsApp

4. How We Use Personal Data

We use your data for the following purposes:

  • Service Delivery: To provide and improve our Services, manage accounts, and process transactions.
  • WhatsApp Integration: To enable business-customer communication through WhatsApp.
  • Communication: To respond to inquiries, send updates, and notify you of service changes.
  • Marketing: To send promotional materials, offers, and surveys (with opt-out options).
  • Compliance: To meet legal obligations, enforce our policies, and ensure security.
  • Personalization: To tailor user experiences and provide relevant recommendations.

5. How We Share Personal Data

We share personal data with:

  • Service Providers: Third parties who assist with payment processing, analytics, customer support, and cloud storage.
  • WhatsApp: As required by the WhatsApp Business Solution Provider terms.
  • Third-Party Applications: Including Large Language Models (LLMs), subject to strict confidentiality.
  • Legal Authorities: When required to comply with legal obligations.
  • Business Transfers: In case of mergers, acquisitions, or asset sales.
  • Partners: With your consent, for co-marketing initiatives.

5.1 WhatsApp Data Sharing Restrictions

We maintain strict controls on WhatsApp data:

  • No sharing of customer chat data between different businesses
  • No use of WhatsApp data for purposes beyond service provision
  • No sale of WhatsApp user data
  • No cross-platform data sharing without explicit consent

6. Retention of Personal Data

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze site performance, and deliver targeted advertisements. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

8. International Data Transfers

Your data may be transferred to, stored, and processed in countries outside your own. We ensure appropriate safeguards, such as standard contractual clauses, are in place for such transfers.

9. Children's Privacy

Our Services are not directed at children under 18. We do not knowingly collect data from children. If you believe we have collected such data, contact us to request deletion.

10. Data Security

We implement robust technical and organizational measures to protect your data. However, no system is completely secure. Notify us immediately if you suspect unauthorized access.

11. Data Breach Notifications

In the event of a data breach, we will notify affected users and relevant authorities as required by applicable laws.

12. Legal Basis for Processing (EEA, UK)

We process data based on:

  • Contractual Necessity: To perform agreements with you.
  • Legitimate Interest: For business improvements and fraud prevention.
  • Consent: Where explicitly provided (e.g., marketing).
  • Legal Obligation: To comply with laws.

13. California Privacy Rights

If you're a California resident, you have the right to:

  • Request information about data collected and shared.
  • Request deletion of your data.
  • Opt-out of data sales.
To exercise these rights, contact us at info@kyto.io. We will not discriminate against you for exercising these rights.

We'll protect your data using industry-standard security measures.

You're in control of your data.

It's your right to know.

14. Updates to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notices on our Website. The “Effective Date” at the top indicates the last revision.

15. WhatsApp Business Solution Provider Terms

As a WhatsApp Business Solution Provider, we:

  • Comply with WhatsApp's Business Terms of Service
  • Follow WhatsApp's Business Data Processing Terms
  • Maintain required security standards
  • Process data only as necessary for service provision
  • Support businesses in maintaining WhatsApp compliance

16. How to Contact Us

For questions, concerns, or to exercise your rights, contact us:

  • Email: info@kyto.io

Thank you for trusting Kyto with your personal data. We are committed to protecting your privacy and ensuring transparency in how we handle your information, including our responsibilities as a WhatsApp Business Solution Provider.

We'll protect your data using industry-standard security measures.

You're in control of your data.

It's your right to know.

We don't share your personal information with third parties.

We'll only use your information as described in this policy.

We'll protect your data using industry-standard security measures.