Privacy policy

1. Who handles your data

Haqiqi is operated by KG Tech. We handle merchant account, website, and support data to operate the service. For customer orders, messages, and reviews, we process data on behalf of the merchant according to their configuration and instructions. The merchant is responsible for its customer relationship, lawful messaging permissions, and decisions about publishing reviews. Its own privacy policy also applies.

For privacy questions and requests, email [email protected].

2. Information we receive

• Merchant account and store information: names, email addresses, contact details, store identifiers, account membership, subscription details, and service settings.
• Customer and order information from the connected store: customer identifiers, names, phone numbers, email addresses where supplied, order identifiers and statuses, purchased products, and relevant order details.
• Review interactions: review requests and replies, ratings, written comments, photos or videos submitted through the review journey, associated messaging identifiers, delivery or processing status information, and coupon or reward information where enabled.
• Integration information: permissions granted by the merchant, authorization credentials, connected Salla store details, WhatsApp Business Account and phone-number identifiers, display numbers, and message-template information. When you authorize through Meta, Meta handles your Facebook sign-in; Haqiqi does not receive your Facebook password.
• Technical and support information: IP addresses, browser and device information, request timestamps, service logs, errors, and information you provide when contacting us.

3. Why we use this information

We use this information to create and authenticate merchant accounts, connect authorized business assets, send configured WhatsApp review requests, process customer responses and media, manage message templates and optional rewards, synchronize reviews with Salla, display reviews and merchant analytics, provide support, maintain security, and meet applicable legal obligations. We process customer data for these service purposes under the merchant’s instructions; this policy does not authorize unrelated use of customer messages or contacts.

Where applicable law requires a legal basis, we rely on providing the service under our agreement with the merchant, compliance with legal obligations, consent where required, or permitted legitimate interests such as service security and support. The merchant is responsible for establishing the appropriate basis for processing its customers’ data.

4. WhatsApp authorization and customer choice

When a merchant connects WhatsApp through Meta, it chooses which business assets and permissions to share. WhatsApp business management access supports account, phone-number, and template management; WhatsApp business messaging access supports sending and processing messages for the connected business. Merchants must have the right to use the customer data they provide and obtain any permissions required to contact customers. Receiving a message does not require you to submit a review, photo, or video.

To stop review requests or object to use of your customer data, contact the merchant or our privacy contact. You can also use WhatsApp’s blocking and reporting controls. Merchants can disconnect WhatsApp in Haqiqi or revoke app access through Meta business settings. Disconnecting or uninstalling an integration is not, by itself, a request to erase existing orders or reviews.

5. Review publication and media

Depending on the merchant’s publication settings and approval decisions, a submitted rating, comment, customer display name, and associated media may appear publicly in the store or its review widgets. Videos may be converted to animated images for synchronization with Salla. Do not send private documents, payment credentials, or media showing other people without permission. For a published review removal request, contact the merchant or us; copies already held or published by Salla or another recipient may also require action by that party.

6. Who receives information

Information needed for the service is shared with the relevant merchant and its authorized account users, Salla for store integration and review synchronization, and Meta/WhatsApp or the configured WhatsApp connection service for message delivery and processing. Hosting, security, storage, email delivery, and operational support providers may process information needed to perform their services. Our marketing website is hosted by Cloudflare. We may disclose information when required by applicable law or necessary to address fraud or protect rights and service security.

We do not sell personal data. Third-party platforms handle data under their own policies, including WhatsApp and Meta.

7. Storage, security, and international processing

We use measures appropriate to the service, including account authentication, merchant-specific access controls, HTTPS for public service connections, and restricted operational access. Authorization credentials are used by the server to access the connected services. No internet service can guarantee absolute security. Our providers and connected platforms may process data in countries outside your country; the safeguards and rights required by applicable law remain relevant to that processing.

8. Retention and deletion

We retain information while needed to provide the service, maintain configured review history, resolve support matters, protect the service, or meet applicable legal obligations. Retention depends on the type of data and the purpose; this policy does not promise a fixed automatic deletion period. You may request deletion at any time. After verifying the request, we delete the relevant information or explain any lawful reason for retaining a limited portion. Access revocation and deletion of stored data are separate actions.

For the request steps, see our data deletion instructions.

9. Your privacy requests

Depending on applicable law, you may request information about processing, access to your data, correction, deletion, restriction, or objection, and withdrawal of consent where processing relies on consent. Contact us using the address below. We may ask for the minimum information needed to verify your identity and the account or store concerned. Customer requests may need coordination with the merchant. We handle verified requests without undue delay under applicable law and explain any limitation. You may also contact the relevant data protection authority where that right applies.

10. Cookies and website information

The merchant dashboard uses session and security cookies for login and request protection. Our marketing pages do not require a merchant login. Hosting and security services can receive technical request information. Following a link to Salla, Meta, WhatsApp, or another website means visiting a separate service with its own cookie and privacy practices.

11. Changes and contact

We publish updates to this policy on this page and update the date shown above. Where required by law, material changes may require additional notice or consent. For any privacy concern, email [email protected].