This Privacy Policy explains how Keynta (“we”, “us”) collects, uses, shares and protects personal data when you use the Keynta website and service. We process personal data in line with applicable law, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). We do not sell personal data and we do not show advertising.
1.Who is responsible
For your account: Keynta is the controller of the personal data of the businesses and team members who use Keynta, as described in this policy.
For your customers: the names, phone numbers and messages of the customers a business adds to Keynta belong to that business. The business is the controller of that data and decides why and how its customers are contacted. Keynta processes it only on the business’s behalf and on its instructions, to send and receive its messages.
For any privacy question or request, contact us at kayntainc@gmail.com.
2.Personal data we collect
- Account data: email address and password. The password is stored in hashed form and cannot be read by us.
- Business profile: business name, type of business, country, team members and their roles, as you enter them.
- Your customers’ data: names, phone numbers, tags, visit dates, whether each customer agreed to receive messages and when they opted out, as the business enters or imports them.
- Messages: the messages a business sends and receives through Keynta, templates, follow-up reminders, and delivery information from the message networks.
- Billing data: your plan, its dates, the payments you make and the invoices we issue. We do not store card, bank account or mobile money account numbers.
- Communications: emails and messages you send us and our replies.
- Technical data: sign-in records, when you last used the service, and basic server logs, such as IP address and browser type, kept for security and troubleshooting.
3.Why we use it, and on what basis
- To provide the service you signed up for: running your account, storing your customer list, sending and receiving your messages, showing your dashboard and managing your plan. Basis: performing our contract with you.
- To process your customers’ data on your instructions. Basis: our contract with you, and the consent you obtained from your customers.
- To communicate with you about your account, invoices, security and changes to our terms. Basis: performing our contract with you.
- To keep the service secure, prevent spam and misuse, and fix problems. Basis: performing our contract, and your consent.
- To meet legal obligations, such as tax and accounting records and the rules of telecommunications regulators. Basis: legal obligation.
4.Your consent, and your customers’ consent
When you create an account you consent to the processing described in this policy, including the transfer of your data outside the United Arab Emirates explained below. You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing that took place before, but we may no longer be able to provide the service, and your account may then need to be closed.
A business that adds customers to Keynta must have their agreement to be contacted, and must tell them how their data is used. Keynta records who agreed and leaves customers who did not agree, or who opted out, out of every send.
5.Who we share it with
We share personal data only with service providers that help us run Keynta, and only as needed for that purpose:
- Supabase: database and sign-in
- Vercel: website hosting
- Infobip: delivery of SMS messages to and from your customers
- Resend: delivery of account and invoice emails
When we add WhatsApp, messages sent that way will also pass through Meta (WhatsApp). We will update this list before we add a new provider.
Messages also pass through mobile network operators so that they can be delivered. We may also disclose personal data where required by law or by a competent authority, or to protect our rights. If the business is sold or merged, data may pass to the new owner under this policy.
6.Transfers outside the UAE
Our service providers store and process data outside the United Arab Emirates, including in the United States and the European Union. We transfer personal data abroad based on your consent and because it is necessary to provide the service you requested. We choose providers that apply recognised security measures and contractual commitments to protect the data.
7.How long we keep it
- Account, business, customer and message data: for as long as your account exists, including after a plan ends without renewal.
- Customers you delete from your list: removed from your account straight away, and from our backups within a limited period.
- After you ask us to close your account: deleted within 30 days, after the period in which you can request a copy.
- Billing records and invoices: kept for as long as tax and accounting law requires.
- Server logs: kept for a limited period for security.
8.Your rights
Subject to applicable law, you have the right to:
- be informed about how your personal data is processed;
- access your personal data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict or stop certain processing;
- object to decisions based solely on automated processing that have legal or similarly significant effects on you;
- withdraw your consent at any time.
Most of your data can be viewed and changed in your account. For anything else, email kayntainc@gmail.com. We may ask you to confirm your identity, and we aim to reply within 30 days. If you are not satisfied with our answer, you may complain to the UAE Data Office or another competent authority.
If you received a message from a business that uses Keynta, that business controls your data. To stop its messages, ask the business directly, or reply STOP where the message offers it. If you contact us, we will pass your request to the business and help it respond.
9.Security
We protect personal data with technical and organisational measures, including encrypted connections, hashed passwords, separation so that each business can access only its own data and its own customers, and limited access to our systems. If a breach affects your personal data, we will notify you and the competent authorities as required by law.
10.Cookies
We use only essential cookies that keep you signed in and protect your session. We do not use advertising or third-party tracking cookies.
11.Children
The service is for businesses and is not intended for children. We do not knowingly collect personal data from children.
12.Changes to this policy
We may update this policy. We will notify you of material changes by email or in your account before they take effect. The date at the top shows when it was last updated.
13.Contact
Privacy questions and requests: kayntainc@gmail.com.
See also the Terms and Conditions and the Privacy Policy.