Privacy Policy

koLink Chat (“koLink Chat”, “we”) is an omnichannel messaging and publishing service at chat.getkolink.com. This policy covers the people who sign up for koLink Chat and the data of the people who talk to them through connected channels.

For account data (your name, email, sign-in and billing details) koLink Chat is the controller. For conversations, contacts and media that live in a workspace, the workspace owner decides why and how they are used, and koLink Chat processes them on the owner's behalf to run the service.

• Account data. Name, email, password (stored only as a salted hash), language, timezone, and the workspaces and roles you belong to.
• Channel data. When you connect Instagram, Messenger, Facebook, WhatsApp or Threads we receive the messages, comments, replies, media, profile names, handles and account identifiers that the permissions you approve allow, so we can show, search, publish, automate and reply.
• Content you create. Contacts, tags, notes, saved replies, posts and drafts, automation settings, and the knowledge you give the AI agent.
• Billing data. Plan, status and invoices. Card details are collected and stored by our payment provider, Stripe; koLink Chat never sees or stores card numbers.
• Technical data. Device and browser type, IP address, session records, and logs needed to keep the service secure and working.

We use data only to provide and protect the service: the inbox, publishing, automations, the AI agent, analytics, notifications, billing and support. We also use it to prevent abuse, to meet legal obligations and to improve reliability.

We do not sell customer message content and we do not use it for advertising.

AI replies. The AI agent answers Instagram and Messenger direct messages. To write a reply it sends the relevant part of the conversation and the knowledge you provided to a model provider (Amazon Bedrock). Under that provider's terms for this service the text is processed to produce the answer and is not used to train its models. Workspace owners can turn the agent off per channel at any time.

We receive Instagram, Facebook, Messenger, WhatsApp and Threads data only after you authorize our Meta apps, and only for the permissions you grant. Each platform's own terms and policies also apply to your use of it through koLink Chat.

Access tokens are stored so koLink Chat can send and receive on your behalf until you disconnect the channel or the platform revokes access.

We share data only with service providers that help us run koLink Chat, under contracts that limit their use of it:

• Cloud hosting and storage (Amazon Web Services).
• Transactional email delivery (Amazon SES).
• AI model processing for the AI agent (Amazon Bedrock).
• Payments (Stripe).
• Error monitoring, when enabled, with personal data redacted from reports.

The platforms you connect receive the messages and posts you send through them. We disclose data when the law requires it, and we will tell you unless we are prevented from doing so.

We keep workspace data while the workspace exists. Raw webhook payloads received from platforms are scrubbed after 30 days; the conversations and contacts built from them stay in the workspace.

Disconnecting a channel deletes its stored access tokens. When a workspace is deleted it is hidden immediately and its data is purged after a short retention window; encrypted backups age out on their normal schedule. Records we must keep by law, such as invoices, are retained for the required period.

Traffic is encrypted in transit. Sign-in uses short-lived access tokens and rotating refresh tokens that scripts on a page cannot read, passwords are hashed, access inside a workspace follows roles, and sensitive actions are recorded in an audit log. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

• Disconnect any channel in Channels. This clears its tokens.
• Workspace owners can delete the workspace in Settings, and any user can delete their account in Settings once they no longer solely own a workspace with other members.
• You can ask us to access, correct, export or delete your personal data, and to restrict or object to its processing, where the law gives you that right.
• If you connected through Facebook or Instagram you can also use user data deletion: removing koLink Chat from your Meta account settings starts a deletion request we honor and let you track.

If you are a customer who wrote to a business that uses koLink Chat, ask that business first; it controls your conversation. We will help it respond.

koLink Chat is for businesses and is not directed at children under 16. We do not knowingly collect their data.

We and our providers may process data in countries other than yours. Where required we use appropriate safeguards for those transfers.

We will update this page when our practices change and note the date above; for material changes we will tell workspace owners in the product or by email. See also our Terms of Service.

Questions or requests: use the support link in Settings, or reply to any email we send you.