1. Information We Collect

We collect several types of information to provide and improve our services: Personal Information: Name, email address, phone number, company name, job title, and billing information when you contact us, subscribe to our services, or make a purchase. Technical Information: IP addresses, browser type and version, device identifiers, operating system, time zone settings, and browsing actions and patterns. Communication Data: Messages, inquiries, and conversation history through our AI agents on WhatsApp, website chat, and other communication channels. Usage Data: Information about how you use our websites, products, and services, including interaction with our AI agents and automated systems.

2. AI Agents & Automated Communications

ALTINKEY utilizes AI-powered agents to enhance customer service and automate business processes. Here's what you need to know: WhatsApp AI Agents: Our AI agents operate on WhatsApp Business API to provide 24/7 customer support, lead qualification, and automated responses. All conversations are processed securely and may be stored for service improvement. Website Chatbots: AI-powered chat assistants on our websites collect conversation data to provide personalized assistance and improve response quality. Data Processing: AI interactions are processed using advanced language models. Conversations may be analyzed to improve AI accuracy and service quality. Human Oversight: Complex inquiries may be escalated to human agents. All AI decisions affecting you significantly can be reviewed upon request. Opt-Out Rights: You can request to communicate only with human agents by contacting us directly.

3. How We Use Your Information

We use your information for the following purposes: • Providing and maintaining our AI automation services • Processing transactions and sending related information • Responding to inquiries via WhatsApp, email, phone, or chat • Training and improving our AI agents and automated systems • Sending marketing communications (with your consent) • Analyzing usage patterns to enhance user experience • Detecting, preventing, and addressing technical issues • Complying with legal obligations • Protecting against fraudulent or illegal activity

4. Third-Party Services & Platforms

We integrate with and share data with the following third-party services: Google Services: We use Google Analytics, Google Ads, and Google Cloud Platform. Data shared includes website usage, advertising interactions, and cloud storage. Google's privacy policy applies: https://policies.google.com/privacy Meta Platforms (Facebook, Instagram, WhatsApp): We use Meta Business Suite, WhatsApp Business API, and Meta Ads. Data shared includes communication data, advertising metrics, and user interactions. Meta's privacy policy applies: https://www.facebook.com/privacy/policy Cloud Service Providers: We use secure cloud infrastructure from major providers for data storage and processing. Payment Processors: Financial transactions are processed by PCI-compliant payment gateways. CRM & Marketing Tools: HubSpot, Zoho, and similar platforms for customer relationship management.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your data: • With service providers who assist in our operations (under strict confidentiality agreements) • With business partners when you request services that involve third parties • When required by law, court order, or governmental authority • To protect our rights, property, or safety, or that of our users • In connection with a merger, acquisition, or sale of assets (with notice to you) • With your explicit consent for specific purposes All third-party recipients are required to protect your data according to applicable privacy laws.

6. Data Security

We implement robust security measures to protect your data: • End-to-end encryption for WhatsApp communications • SSL/TLS encryption for all data transmissions • Secure data centers with ISO 27001 certification • Regular security audits and penetration testing • Access controls and multi-factor authentication for staff • Data backup and disaster recovery procedures Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to industry best practices.

7. Cookies & Tracking Technologies

We use the following tracking technologies: Essential Cookies: Required for website functionality and security. Analytics Cookies: Google Analytics and similar tools to understand user behavior and improve our services. Advertising Cookies: Google Ads, Meta Pixel, and similar technologies for targeted advertising and conversion tracking. Preference Cookies: To remember your settings and preferences. You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

8. Your Rights Under GDPR & CCPA

Depending on your location, you have the following rights: Right to Access: Request a copy of the personal data we hold about you. Right to Rectification: Request correction of inaccurate personal data. Right to Erasure: Request deletion of your personal data ("right to be forgotten"). Right to Restriction: Request limitation of processing of your data. Right to Data Portability: Receive your data in a structured, machine-readable format. Right to Object: Object to processing of your data for certain purposes. Right to Withdraw Consent: Withdraw consent for processing at any time. California Residents: You have additional rights under CCPA, including the right to know what data is collected and the right to opt-out of sale of personal information. To exercise these rights, contact us at privacy@altinkey.com.

9. International Data Transfers

ALTINKEY operates globally with offices in Dubai and Istanbul. Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through: • Standard Contractual Clauses approved by the European Commission • Data processing agreements with all third-party providers • Compliance with applicable data protection laws in each jurisdiction For EU residents, transfers outside the EEA are protected by appropriate safeguards as required by GDPR.

10. Data Retention

We retain your personal data only as long as necessary: • Account information: For the duration of our business relationship plus 7 years for legal/tax requirements • Communication records: 3 years for AI training and service improvement • Marketing data: Until you unsubscribe or request deletion • Financial records: 7 years as required by law • Website analytics: 26 months (Google Analytics standard retention) After the retention period, data is securely deleted or anonymized.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at privacy@altinkey.com, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by: • Posting the updated policy on our website • Updating the "Last Updated" date • Sending email notification for significant changes • In-app notifications where applicable We encourage you to review this policy regularly. Your continued use of our services after changes constitutes acceptance of the updated policy.

Privacy Policy