Privacy Policy
Last updated: 1 November 2026 (draft)
Draft for owner and legal review. This page is not yet approved for publication. Highlighted items must be confirmed before launch.
This Privacy Policy explains how eezee chat collects, uses and protects information when businesses use the eezee chat shared WhatsApp inbox, and when people visit this website.
eezee chat is operated by Kuwait Star General Trading & Co. ("we", "us"). Registered address, commercial registration number and Arabic legal name to be confirmed by the owner.
Who we are and our role
eezee chat is a customer-service inbox that lets a business answer its customers on WhatsApp as a team. Businesses ("customers" of eezee chat) choose which WhatsApp numbers to connect and which employees can use them.
For the messages and contact details of a business’s own customers, the business decides why and how that information is used, and we process it on the business’s behalf to provide the service. For the accounts of business users, billing and the security of the service, we decide how the information is used. Legal to confirm the controller/processor roles and the governing data-protection law.
Information we collect
Business account and user information
- Company details provided when applying: company name, country, business phone number and work email.
- For each employee account: name, email address, role (Owner, Admin or Agent), language and notification preferences, and the WhatsApp numbers they are allowed to use.
- Passwords, stored only as a one-way hash (Argon2id). We cannot read your password.
- Sign-in session records and the time of the last sign-in, used to keep accounts secure.
WhatsApp Business account and phone-number information
- Identifiers of your WhatsApp Business account and phone numbers, the displayed phone number, the verified business name and the quality status reported by Meta.
- Your message templates and their status (for example pending, approved or rejected) as reported by Meta.
- The production design stores WhatsApp credentials in a dedicated secrets service and only their references in the application database. Owner to confirm the deployed credential-storage configuration.
Customer messages, contacts and conversation metadata
When your customers write to your connected WhatsApp number, or your team replies, we receive and store:
- Message content (text, and information about media such as captions or file type) and template messages sent by your team.
- The customer’s WhatsApp identifier and phone number, and their WhatsApp profile name.
- Timestamps, delivery and read statuses, and error information returned by WhatsApp.
- Conversation status, who the conversation is assigned to and its assignment history, internal team notes and labels.
- Contact details your team adds, such as a display name, email address or note.
Billing information
Your plan and subscription, wallet balance and wallet ledger entries, invoices and top-up requests. Owner to confirm enabled payment methods and provider; the presence of integration code does not establish live payment availability. Payment methods and any payment provider to be confirmed by the owner.
Visitors to this website
This website does not use analytics, advertising pixels or tracking cookies. It remembers your language choice in your own browser (local storage). Fonts are loaded from Google Fonts, so your browser sends a request, including your IP address, to Google when you open a page. Owner to confirm web-server log contents and how long logs are kept.
The customer application uses host-only HttpOnly, Secure, SameSite=Strict refresh-session cookies over HTTPS; access tokens stay in memory. This marketing website does not share those authentication cookies.
How we use information
- To provide the service: receive and send WhatsApp messages for your business and show them only to your authorised team members.
- To manage accounts, roles, number access and sign-in.
- To run billing: subscriptions, the prepaid wallet and passing WhatsApp (Meta) fees through at cost.
- To keep the service secure, including preventing unauthorised access and recording administrative actions in audit logs.
- To help you when you ask us for support.
- To meet legal, tax and accounting obligations. Legal to confirm the applicable obligations.
We do not sell personal information, and we do not use your customers’ conversations for advertising. eezee chat is not a bulk-messaging or campaign tool.
Processing through the WhatsApp Business Platform
Messages are sent and received through Meta’s WhatsApp Business Platform. To deliver messages, message content and related information pass through Meta, and Meta processes them under its own terms and privacy policy. Legal to confirm applicable Meta terms and the acceptance mechanism.
Meta may charge fees for some messages. The approved model is wallet-based actual-cost passthrough, but automated reservation, settlement and reconciliation are incomplete; outgoing messaging remains blocked. Removing data from eezee chat does not remove data that Meta or WhatsApp hold, or messages stored on your customers’ phones. Legal to confirm the exact Meta documents to reference and add their links.
Service providers and hosting
We use service providers to run eezee chat:
- Amazon Web Services (AWS) for servers, the database and secrets storage. Owner to confirm the hosting region; infrastructure records list the EU (Frankfurt) region.
- Meta Platforms, for the WhatsApp Business Platform.
- Google Fonts, for the fonts on this website.
- Owner to confirm whether email delivery is enabled in the deployed service. Name the email provider here if email is enabled.
Legal to confirm the data-processing terms in place with each provider.
Security and access controls
- Connections to eezee chat use encryption in transit (HTTPS).
- Passwords are stored only as one-way hashes.
- Each company’s data is separated in the database with row-level security as well as checks in the application.
- Access inside a company follows fixed roles (Owner, Admin, Agent); agents only see the WhatsApp numbers they have been given.
- Administrative actions are recorded in audit logs.
- HQ provides permission-controlled company, subscription, billing and reporting tools. Authorised support staff can see information submitted in support tickets. Owner/legal to confirm operational staff access and support confidentiality procedures.
No system is perfectly secure. If you believe your account has been accessed without permission, contact us straight away. Owner to confirm incident-notification commitments, if any.
Retention and deletion
We keep account, conversation and billing information while your company’s account is active. Retention periods after an account closes to be defined by the owner and legal counsel.
Owners and Admins can delete local contacts only when they have no conversation history, WhatsApp identifier or linked WhatsApp identity directly in the app. Conversation history is kept as part of your company’s records; Owner to approve and validate company-data deletion before offering it; see Data Deletion.
Some records may need to be kept after deletion for legal, tax or financial reasons, such as invoices, wallet ledger entries and audit logs. Legal to confirm which records and for how long. Owner to confirm backup retention.
Your rights and choices
Business users can view and update their profile in the app. You can ask us for access to, correction of, or deletion of your personal information by contacting us at nasserbani@hotmail.com.
If you are a customer of a business that uses eezee chat, please contact that business first, because it manages its conversations with you. We will help the business respond.
Legal to confirm the rights available under the governing law and how they are exercised.
International data processing
Owner to confirm actual hosting country and region before publication. Meta may process WhatsApp messages in other countries. Legal to confirm the safeguards for international transfers.
Children
eezee chat is a service for businesses and is not directed at children.
Changes to this policy
We will update the date at the top of this page when the policy changes. Owner to confirm how customers are told about significant changes.
Contact
Questions about privacy: nasserbani@hotmail.com. You can also reach us through our Contact us page.