← KidmaTech

Privacy Policy

This Privacy Policy explains how KidmaTech ("KidmaTech", "we", "us") collects, uses and protects information when you use our client portal at clients.kidmatech.com, our customer messaging platform (CRM) at crm.kidmatech.com, and the automation services we provide.

Our CRM lets a business connect its own messaging channels — WhatsApp, Telegram, Facebook Messenger, Instagram Direct and TikTok — and handle all incoming conversations and comments in one inbox. The business owns those conversations and decides what is collected; KidmaTech processes that data on the business's behalf and under its instructions.

1. Information we collect

• Account information. When you sign in with Google, we receive your name, email address and profile picture as permitted by the scopes you approve.
• Service data. Information you or your business provide to operate the automation we deliver — for example contacts, messages and records you choose to connect to the workspace.
• Messaging data. When a business connects a messaging channel, we receive the conversations sent to that business account: the message text, attachments (voice messages, images, documents), the sender's display name and channel identifier, and message timestamps. Voice messages may be transcribed to text so the conversation is searchable and can be answered faster.
• Technical data. Standard log data such as IP address, browser type and timestamps, used to keep the service secure and reliable.

2. How we use information

• To authenticate you and give access to the automation workspace prepared for your business.
• To operate, maintain and improve the services we provide to you.
• To communicate with you about your account and support requests.
• To keep the service secure and to comply with legal obligations.

3. Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account data only to sign you in and to operate the features you request. We do not sell this data and do not use it for advertising.

4. Meta platform data (Facebook, Instagram, WhatsApp)

Where a business connects its Facebook Page, Instagram professional account or WhatsApp Business account, KidmaTech accesses that data only with the explicit authorisation of the business, granted through Meta's own login and consent screen. We use it for one purpose: to show the business its own conversations inside the CRM and to send replies on its behalf.

• We do not sell Meta platform data, share it with data brokers, or use it for advertising, profiling or training AI models for unrelated purposes.
• Access tokens are stored encrypted and are used only to receive and send messages for the connected account.
• A business can disconnect a channel at any time in the CRM, or revoke our access from its own Facebook or Instagram settings. Revoking access stops all further processing and erases the stored tokens immediately.
• Our use of Meta platform data complies with the Meta Platform Terms and Developer Policies. When a business disconnects, the access tokens are erased immediately and the stored conversations are deleted within 30 days, as described in the Data Deletion page.

5. TikTok platform data

Where a business connects its TikTok business account, KidmaTech accesses that data only with the explicit authorisation of the business, granted through TikTok's own login and consent screen, and only for the account the business selects. We use it for one purpose: to show the business its own TikTok comments and direct messages inside the CRM and to send replies on its behalf.

• We receive the connected account's identifier, display name and avatar; access tokens; comments on the business's videos (text, author display name and identifier, timestamp, video identifier); and direct messages received by the business account (text, attachments, sender display name and identifier, timestamps).
• We do not sell TikTok platform data, share it with data brokers, or use it for advertising, profiling or training AI models.
• Where the business enables automatic replies, the text of a comment or message is sent to a language model provider (Anthropic or Google, depending on the installation settings) solely to draft the reply; under their API terms that data is not used to train models. There are no other recipients.
• Access tokens are stored encrypted and are used only to read and send comments and messages for the connected account.
• A business can disconnect the channel at any time in the CRM, or revoke our access in the TikTok app under Settings and privacy → Security and permissions → Manage app permissions. Revoking access stops all further processing and erases the stored tokens.
• Our use of TikTok platform data complies with the TikTok Developer Terms of Service and the TikTok Developer Guidelines. When a business disconnects, the access tokens are erased immediately and the stored comments and conversations are deleted within 30 days, as described in the Data Deletion page.

6. Sharing

We do not sell your personal data. We share information only with service providers that help us run the platform (such as hosting and infrastructure), under appropriate confidentiality obligations, or where required by law.

7. Data retention

We keep personal data only as long as needed to provide the service and to meet legal requirements. You may request deletion at any time — see our Data Deletion page.

8. Security

Access is served over encrypted HTTPS connections and protected by authentication. We apply reasonable technical and organisational measures to protect your data.

9. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us.

10. Contact

KidmaTech, Hazani Michael 2, apt. 3, Kiryat Motzkin, Israel — support@kidmatech.com