Kewline Privacy Policy

1. Introduction

Kewline is a unified business messaging inbox that allows businesses to connect and manage conversations from WhatsApp Business, Facebook Messenger, and Instagram Direct from a single application. Kewline is developed and operated by Kewsign LLC, a limited liability company registered in Montana, USA ("Kewsign LLC", "we", "us", or "our").

Kewline operates as an independent technology provider. Access to our customers' WhatsApp Business Accounts, Facebook Pages, and Instagram Professional Accounts is granted through Meta's platforms — including the WhatsApp Business Platform (Cloud API), Embedded Signup, the Messenger Platform, and the Instagram Graph API — under Meta's Platform Terms and WhatsApp Business Solution Terms.

This policy explains how we collect, use, store, and protect information when businesses use the Kewline application and when visiting our website. It applies to Kewline only; the separate services marketed under Kewsign Studio are covered by the Kewsign Studio Privacy Policy.

2. Our Role and Responsibility for Data

When a business connects its messaging channels to Kewline:

• The business is the data controller of the message content and customer contacts exchanged between the business and its own customers. Kewline processes this data only on the business's instructions, in order to provide the service.
• Kewsign LLC acts as a data processor and service provider for that data.
• Meta Platforms, Inc. independently controls and processes data on its own platforms (WhatsApp, Facebook, Instagram). Our receipt and use of that platform data is also governed by Meta's policies, which require us to use it strictly to deliver the services the business has requested.

3. Information We Collect

3.1 Business Account Information

When a business signs up and connects its channels through Meta's Embedded Signup flow, we receive:

3.2 Technical Information

We automatically collect certain technical data when our services are used:

• IP address, device and browser type, and general location
• Service logs, error reports, and performance diagnostics
• Cookies and similar technologies (see our Cookie Policy)

4. How We Use Information

4.1 To Provide the Service

We use the information above strictly to operate Kewline:

• Receive, display, and route incoming conversations into the business's unified inbox
• Allow the business's team members to read and reply to conversations from Kewline
• Send notifications configured by the business
• Validate connection status of linked WhatsApp Business Accounts, Pages, and Instagram accounts
• Provide customer support and troubleshoot technical issues
• Process subscription payments and prevent fraud

4.2 What We Never Do

We commit to the following limits on how platform data is used:

• We do not sell any conversation data, contact data, or platform data
• We do not use conversation data for advertising, or to create advertising profiles
• We do not transfer conversation data to any third party other than the processors listed in Section 6 — except where the business has directed us to enable an optional integration the business chose
• We do not use conversations to train generalized AI or machine learning models. If we offer optional AI-assisted features (such as reply suggestions or summaries), they are provided only to businesses that explicitly enable them, and those requests are processed as described at the time of enablement
• We do not retain platform data for longer than the business's subscription or the retention period in Section 8

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract Performance: To deliver the Kewline service the subscribing business has purchased
• Legitimate Interest: For security, fraud prevention, service improvement, and protecting our rights
• Consent: For optional features and marketing communications (which the business may decline or withdraw)
• Legal Obligation: For tax, accounting, and regulatory compliance

For the end customers of a business using Kewline, the business remains responsible for establishing the appropriate legal basis and providing legally required notices before connecting its channels.

6. Data Sharing and Disclosure

6.1 Processors We Rely On

To operate the service, we share data only with these categories of providers, each bound by agreements that restrict use to our instructions:

• Meta Platforms, Inc.: Cloud API and platform delivery of messages to and from WhatsApp, Messenger, and Instagram
• Cloud hosting and infrastructure providers: Secure application hosting, database, and storage
• Payment processors: Secure handling of subscription payments
• Notifications infrastructure: Delivery of alert emails and push notifications to the business's team
• Analytics providers: Aggregate, privacy-preserving product analytics

6.2 Legal Requirements

We may disclose information when required by law or to protect our rights, property, or safety, or in connection with a corporate transaction (such as a merger or sale), subject to this policy's protections surviving such a transfer.

7. Data Security

We apply strong safeguards to protect data handled through Kewline:

• Encryption in transit: All traffic is secured with TLS
• Encryption of credentials: Channel access tokens are stored encrypted and are never exposed to team members
• Access controls: Employee access to production data is limited to trained staff on a need-to-know basis and is logged
• Isolation: Each business workspace's data is logically separated from every other business
• Revocation on disconnect: When a business disconnects a channel, we delete the associated tokens immediately and stop all further retrieval of that channel's data

No method of transmission or storage is perfectly secure, but we continuously review and improve our security measures.

8. Data Retention and Deletion

• While active: We retain conversation and account data for as long as the business's subscription remains active, in order to provide the service.
• After disconnection: When a business disconnects a channel, the associated tokens are deleted immediately, and stored conversation data from that channel is deleted within 30 days, except for account-level records (invoices, account profile, communication logs) retained for legal and accounting purposes.
• After account closure: When a business closes its Kewline workspace, all workspace data is permanently deleted within 30 days.
• Backups: Residual copies in encrypted backups are automatically purged on a rolling cycle of no more than 90 days.

Full details of deletion options and timelines are published on our Data Deletion page.

9. Your Rights

9.1 For Business Users

• Request access to, correction of, or deletion of your personal data
• Export your workspace's conversation history (available to workspace administrators)
• Obtain deletion of your workspace and all associated data (see our Data Deletion page)
• Withdraw consent for optional features at any time

9.2 For Customers of Businesses Using Kewline

If you are a customer who messaged a business that uses Kewline, please direct your privacy requests to that business — it controls the data of your conversation with it. If the business directs a request to us, or if you believe your data is being misused, contact us at [email protected] and we will escalate within our contracted obligations.

10. Facebook, WhatsApp, and Instagram Data

Kewline's receipt of WhatsApp, Messenger, and Instagram data depends on permissions the business grants us. The business may revoke these permissions at any time:

• Through the Kewline settings (disconnect the channel), or
• Through Meta's Business Integrations page (Settings → Business Integrations within the business's Facebook/Meta account), or
• By requesting removal directly via the contact details below

Revoking access immediately stops our ability to receive any new data. We do not access platform data on behalf of any business without an active connection authorized by that business.

11. International Data Transfers

Kewsign LLC is registered in the United States (Montana) with operations serving businesses across the Middle East, North Africa, Europe, and North America. Personal data may therefore be transferred to and processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards — including the EU Standard Contractual Clauses — for international transfers.

12. Children's Privacy

Kewline is business software and is not intended for children under 16. We do not knowingly collect personal information from children. End customers' privacy with respect to messaging platforms is governed by the platform's own terms (Meta's minimum age requirements for WhatsApp, Facebook, and Instagram). If we learn we have unlawfully collected a child's data, we will delete it immediately.

13. Changes to This Policy

• We will update the "Last Updated" date above
• Material changes affecting how conversation data is handled will be communicated in advance to workspace administrators
• Continued use of the service after changes take effect constitutes acceptance of the updated policy

14. Contact Information