1. Data Controller
The controller of your personal data is KambaChat, headquartered in Luanda, Angola. For privacy matters or to exercise your rights: privacy@kambachat.com.
2. Scope and Applicable Law
This Policy describes how we collect, use and protect your personal data, in accordance with Law no. 22/11 of 17 June (Angola's Personal Data Protection Law) and other applicable legislation.
3. Data We Collect
3.1 Data provided directly
- Registration data: name, email, password (stored in encrypted form), phone and company name
- Profile data: user type, goal, avatar
- Store data: name, products, prices, images, address
- Contact and support data: messages you send us
- Payment data: processed by secure providers; we do not store full card data
3.2 Data collected automatically
- Usage and diagnostic data: pages visited, features used, errors
- Technical data: IP address, device and browser type, operating system
3.3 Third-party data
- Information about contacts and conversations on WhatsApp/Instagram necessary for the operation of the automations, processed on behalf of and under the instruction of the Seller
4. Purposes and Legal Bases
We process your data for the following purposes and on the following bases:
- Performance of the contract: to provide, maintain and improve the services, manage the account and process payments
- Legitimate interest: security, fraud prevention and service improvement, in a proportionate manner
- Consent: marketing communications, revocable at any time
- Legal obligation: compliance with tax, accounting and regulatory duties
5. Message Processing and Artificial Intelligence
5.1. When the Seller activates automations, the messages exchanged with their customers are processed to generate responses. In this context, the Seller is the data controller of their customers' data and KambaChat acts as a processor, processing the data only according to the Seller's instructions and to provide the service.
5.2. Certain content may be processed by subcontracted Artificial Intelligence providers, solely to generate the requested response.
6. Data Sharing and Processors
6.1. We do not sell your personal data.
6.2. We may share it with: service providers (cloud hosting, payment processing, email delivery, AI providers), strictly as necessary; competent authorities, when required by law or court order; and acquirers, in the event of a corporate restructuring, with prior notice.
6.3. Processors are bound by appropriate confidentiality and security obligations.
7. International Transfers
Some providers may be located outside Angola. In such cases, we adopt appropriate safeguards to ensure a level of protection equivalent to that required by applicable law.
8. Data Retention
- Account data: while the account is active and for up to 2 years after closure
- Message and automation data: for the duration of the active plan
- System logs: 90 days
- Billing data: 5 years, in compliance with Angolan tax obligations
Once the period has elapsed, data is securely deleted or anonymized.
9. Your Rights
You have the right to access, rectify, erase, object to, restrict and port your data, as well as to withdraw consent at any time. To exercise these rights, contact privacy@kambachat.com. You also have the right to lodge a complaint with the Data Protection Agency (APD) of Angola.
10. Security
We adopt appropriate technical and organizational measures, including password encryption (bcrypt), encrypted communications (HTTPS/TLS), role-based access control (RBAC) and monitored backups. No system, however, is completely immune to risk.
11. Cookies
We use essential cookies for authentication, security and to remember preferences (such as the language). We do not use third-party tracking cookies for advertising.
12. Minors
The Platform is not intended for persons under 18 years of age, and we do not knowingly collect their data.
13. Changes to this Policy
We may update this Policy at any time. Material changes will be communicated by email or through the Platform. The date of the last update is shown at the top of this page.
14. Contact and Complaints
- Email: privacy@kambachat.com
- Contact page: kambachat.com/contact