Kinsen privacy policy

Effective date: 31 August 2026

1. Who operates Kinsen

Kinsen is owned and operated by E-Scapes IT Solutions, based in Egypt.

In this policy, “Kinsen,” “E-Scapes,” “we,” “us,” and “our” refer to E-Scapes IT Solutions.

Contact details

E-Scapes IT Solutions

29 Tahrir Street, Dokki, Giza, Egypt

Email: info@kinsen.io

2. What this policy covers

This policy explains how we collect, use, store, disclose, and delete personal data when you:

• Visit the Kinsen website.
• Create or use a Kinsen account.
• Connect a WhatsApp Business Account to Kinsen.
• Contact us for sales, support, or another business purpose.
• Communicate through WhatsApp with a business that uses Kinsen.

Kinsen provides businesses with a shared workspace for managing WhatsApp customer conversations.

3. Our role

Our role depends on why personal data is processed.

Data controlled by E-Scapes

E-Scapes generally acts as the data controller for information used to operate the Kinsen website, manage accounts, provide support, secure the service, manage contracts, and communicate about Kinsen.

Data controlled by Kinsen customers

A business using Kinsen determines why and how its customer conversations are processed. That business generally acts as the data controller. E-Scapes processes conversation data on its behalf as a data processor or service provider.

If you communicate with a business that uses Kinsen, that business is normally responsible for its privacy notice, lawful basis, marketing permissions, and responses to your privacy requests. We assist the business where required.

4. Personal data we process

Account and business information

We may process:

• Name, job title, business email address, and telephone number.
• Business name and contact details.
• Account identifier, login information, team, role, and permissions.
• Subscription and transaction records where applicable.
• Communications with our sales and support teams.

WhatsApp conversation data

When a business connects its WhatsApp Business Account, Kinsen may process:

• Customer name and telephone number.
• WhatsApp identifier and profile information made available by WhatsApp.
• Messages and conversation history.
• Images, audio, documents, and other attachments.
• Message timestamps and delivery or read status.
• Contact tags, notes, and customer-supplied custom fields.
• Conversation status and assigned team member.
• Template-message and automation activity.

Conversation content may contain sensitive personal data if a person chooses to provide it. Kinsen customers must only process sensitive personal data when they have the required lawful basis, consent, permits, and safeguards.

WhatsApp Business Platform data

To operate the connection, we may receive:

• WhatsApp Business Account identifiers.
• Connected business telephone-number identifiers.
• Account names and configuration information.
• Permissions and integration credentials.
• Message templates and template status.
• Messages, attachments, delivery events, and webhook events.
• Technical information required to maintain the connection.

Website and technical data

We may process:

• IP address, browser, device, and operating system.
• Login records, security events, and diagnostic information.
• Website pages viewed and related interaction data.
• Cookies required to operate and protect the website.
• Optional analytics information where enabled with the required notice or consent.

5. How we obtain data

We obtain personal data:

• Directly from you.
• From the organization that provides your Kinsen account.
• From people communicating with a Kinsen customer through WhatsApp.
• From Meta and WhatsApp when an authorized business connects its account.
• Automatically through browsers, devices, system logs, and cookies.
• From service providers acting on our behalf.

6. How we use personal data

We process personal data to:

• Create and administer Kinsen accounts.
• Connect authorized WhatsApp Business Accounts.
• Receive, store, display, assign, search, and manage conversations.
• Send messages requested by a Kinsen customer.
• Apply customer-configured routing, assignment, and automation rules.
• Maintain contact and conversation history.
• Authenticate users and control access.
• Provide support and respond to requests.
• Detect misuse and investigate service incidents.
• Monitor performance and diagnose faults.
• Manage contracts, subscriptions, and business records.
• Comply with legal obligations and protect legal rights.
• Send marketing communications where legally permitted.

Kinsen automation may route conversations or send customer-configured responses. Kinsen is not intended to make decisions that produce legal or similarly significant effects about an individual without appropriate human oversight.

7. Legal bases

Where applicable, we process personal data based on:

• Consent.
• The steps needed to enter into or perform a contract.
• Compliance with a legal obligation, court order, or lawful request.
• The establishment, exercise, or defence of legal rights.
• A legitimate business interest that does not override the rights and freedoms of the person concerned.

Kinsen customers are responsible for establishing and documenting the lawful basis for customer data they instruct us to process.

8. How we use WhatsApp data

We use data received through the WhatsApp Business Platform only to provide, maintain, support, and protect the features authorized by the relevant Kinsen customer.

We do not:

• Sell WhatsApp Business Platform data.
• Use message data for third-party advertising.
• Use WhatsApp data to build unrelated profiles of individual users.
• Use WhatsApp Business Platform data to train or improve general-purpose artificial intelligence models.
• Disclose WhatsApp data except to the relevant customer, its authorized users, contracted service providers, Meta or WhatsApp where required to operate the connection, or another party where legally required.

Kinsen’s use of the WhatsApp Business Platform remains subject to the applicable Meta and WhatsApp terms.

9. Marketing communications

We send electronic marketing only where permitted by applicable law.

Where consent is required, we obtain prior, specific consent. Marketing messages identify the sender and provide a clear, accessible, and free method to unsubscribe or object.

Withdrawing marketing consent does not prevent service, security, transaction, or account-related communications that remain necessary.

10. When we disclose data

We may disclose personal data to:

• The Kinsen customer controlling the relevant workspace.
• Authorized users within that customer’s organization.
• Meta and WhatsApp where necessary to operate the connection.
• Hosting, storage, monitoring, email, support, payment, and infrastructure providers acting under contract.
• Professional advisers, auditors, insurers, or legal representatives.
• Government, regulatory, law-enforcement, or judicial authorities where legally required.
• A successor organization following a merger, acquisition, restructuring, or transfer of business, subject to appropriate safeguards.

Service providers may only process personal data for authorized purposes.

11. International data transfers

Kinsen and its service providers may process personal data outside Egypt.

Where personal data is transferred internationally, E-Scapes applies the approvals, contractual measures, permits, and safeguards required by applicable law.

Kinsen customers should review their own legal and contractual requirements before transferring customer data across borders.

12. How long we keep data

We apply the following retention rules:

• Account data: retained while the Kinsen account or business relationship remains active and afterwards where needed for legal, contractual, tax, fraud-prevention, or dispute-resolution purposes.
• Conversation data: retained according to the Kinsen customer’s documented instructions and deleted when the customer deletes it, submits a valid deletion instruction, or ends the service.
• Integration credentials: revoked when the WhatsApp connection is removed and deleted from active systems within 30 calendar days.
• Verified deletion requests: relevant personal data is deleted or anonymized from active systems within 30 calendar days, unless retention is legally required.
• Backups: residual copies expire through the protected backup cycle within 90 calendar days. Backup data is not used for ordinary business purposes. If a backup is restored, applicable deletion requests are reapplied.
• Anonymized data: information that can no longer reasonably identify a person may be retained for service analysis and reporting.

13. Security

We maintain administrative, organizational, and technical measures designed to reduce the risk of unauthorized access, disclosure, alteration, loss, or destruction.

Access to personal data is limited according to assigned roles and business need. No internet-based service can guarantee complete security.

14. Your rights

Subject to applicable law, you may have the right to:

• Ask whether we process your personal data.
• Request access to your data.
• Correct, update, or complete inaccurate data.
• Request deletion of data.
• Withdraw previously given consent.
• Object to processing or its results.
• Request that processing be limited in appropriate circumstances.
• Receive information about an applicable personal-data breach.
• Submit a complaint to the Egyptian Personal Data Protection Center or another competent authority.

A request may be limited where processing or retention is legally required or necessary to protect another person’s rights.

Where the Egyptian Personal Data Protection Law applies, we respond to a complete and verified request within the period required by that law.

15. Data deletion

Anyone may request deletion of personal data associated with Kinsen or a connected WhatsApp Business Account without logging into Kinsen.

Instructions are published on the Kinsen data deletion page. Verified requests are completed in accordance with the periods stated in section 12.

Disconnecting Kinsen from a WhatsApp Business Account stops future access through that connection. It does not automatically erase conversation data already stored in Kinsen. A deletion request must be submitted to remove historical data.

16. Children

Kinsen is a business service and is not directed to children.

Customers must not use Kinsen to process children’s personal data unless they have the required guardian consent, permits, and legal authorization. If we learn that children’s data has been processed without proper authority, we will take appropriate steps with the responsible customer.

17. Third-party services

Kinsen integrates with services operated by Meta and WhatsApp. Those services process information under their own terms and privacy policies.

Relevant policies include the WhatsApp Privacy Policy and Meta Privacy Policy.

18. Changes to this policy

We may update this policy to reflect changes in Kinsen, applicable law, or the WhatsApp Business Platform.

We will publish the updated version with a revised effective date and provide additional notice where required.

19. Contact us

Privacy questions, complaints, consent withdrawals, and rights requests may be sent to:

E-Scapes IT Solutions

29 Tahrir Street, Dokki, Giza, Egypt

Email: info@kinsen.io