Privacy Policy

This is a courtesy translation for information only. The Turkish version is legally binding: Gizlilik Politikası (Türkçe).

Last updated: October 3, 2026 · KVKK privacy notice

FoxTekno ("we", "us") operates an automated customer messaging service for businesses (the "Service"). This policy explains what data we process, why, and for how long.

1. Data we process

Account data: business name, user names, email addresses and password hashes of the people who use the dashboard.
Connected channel data: identifiers needed to operate the channels a business connects (WhatsApp session, Telegram bot, Facebook Page and linked Instagram professional account). Facebook and Instagram access tokens are stored only inside our self-hosted Chatwoot instance.
Message content: messages sent to the business by its customers and the replies sent back, including voice notes and images when a customer sends them.
Usage and security data: reply counts, token usage, login times and IP addresses in audit logs.

2. How we use it

To generate and deliver replies to the business's customers on the business's behalf.
To show conversations, usage and settings to the business in the dashboard.
To keep accounts secure, prevent abuse and send service emails (verification, password reset, usage limits).

We do not sell personal data and we do not use message content to train AI models.

3. Processors

Google Gemini API receives the message text (and media, when sent) to produce a reply, under Google's API terms.
Evolution API (WhatsApp) and Chatwoot (Telegram, Facebook, Instagram) run on our own servers.
Meta, WhatsApp and Telegram process messages under their own policies: Meta, WhatsApp, Telegram.

4. Retention

Conversations are deleted automatically after the retention period chosen by the business (90 days by default, configurable between 7 days and 2 years).
Copies kept by the WhatsApp bridge are deleted after 30 days.
Audit logs are kept for 12 months. Usage counts are kept while the account exists.
When a business deletes its account, its users, channels, conversations and documents are deleted immediately.

5. Security

Traffic is encrypted with TLS. Passwords are stored as bcrypt hashes. Sessions use HttpOnly cookies. Access to production systems is limited to authorized staff.

6. Your rights

You can request access, correction or deletion of your data by writing to [email protected]. If you messaged a business that uses our Service, that business is the data controller; you may contact them or us. Facebook users can also remove our app from their Facebook settings, which triggers our data deletion process.

7. Cookies

We only use cookies that are strictly necessary: a session cookie that keeps you signed in, a device cookie used to warn you about sign-ins from new devices, a short-lived cookie that protects Google sign-in, and Cloudflare's security cookies. We do not use advertising or tracking cookies. Details: KVKK notice · Cookies.

8. Children

The dashboard is intended for businesses and is not directed to anyone under 18.

9. Changes and contact

We post changes on this page and notify account owners by email about material changes. Contact: [email protected].

KVKK Privacy Notice

Under Personal Data Protection Law No. 6698 (KVKK), the identity and contact data and transaction security data of employees of businesses that use the Service are processed by FoxTekno as data controller for the performance of the contract and the fulfilment of our legal obligations.

Messages from businesses' customers are processed on behalf of and on the instructions of the business; for this data the business concerned is the data controller and FoxTekno is the data processor. Message content is transferred to the Google Gemini API, located abroad, in order to generate replies.

To exercise your rights under Article 11 of the Law, you can write to [email protected].