Privacy policy

Last updated: 16 November 2026

This policy explains what data kodjaz handles, why, and what choices you have. "kodjaz", "we" and "us" mean Elza Mirbekovna Mambetakunova (ИП Мамбетакунова Эльза Мирбековна), an individual entrepreneur registered in the Kyrgyz Republic. "Business" means a company that uses kodjaz to message its customers. "Customer" means a person who exchanges WhatsApp messages with a Business.

1. Our role

We provide software to Businesses. When a Business uses kodjaz to message its Customers, the Business decides what to send and to whom, and we process the data on the Business's behalf and on its instructions. If you are a Customer and have questions about how a Business uses your data, you can contact that Business directly, or contact us and we will pass your request on.

2. Data we handle

About Businesses and their staff

• Name, email address and phone number of the people who sign up and use kodjaz.
• The Business's WhatsApp Business account and phone number identifiers, message templates, and access tokens that Meta issues to us when the Business connects its account.

About Customers

• WhatsApp phone number and profile name.
• The content of messages sent and received through the Business's WhatsApp number, including media, and their time.
• Delivery and read statuses that WhatsApp reports for those messages.

We do not ask for, and ask Businesses not to send through kodjaz, payment card numbers, passwords or government identity numbers.

3. Why we use it

• To send and receive WhatsApp messages for the Business, and to show its staff the conversations.
• To keep the service working, secure and free of abuse, and to fix problems.
• To meet legal duties.

We do not sell personal data. We do not use Customer data for our own advertising, and we do not use it to train general AI models.

4. Who we share it with

• Meta Platforms, which operates WhatsApp and the WhatsApp Business Platform. Messages travel through Meta's systems. Meta's own handling is described in its policies.
• Infrastructure providers that host our servers and databases for us, under contracts that limit them to providing that service.
• Authorities, when the law requires it.

We use data received through Meta's platform only as Meta's Platform Terms allow.

5. How long we keep it

We keep a Business's data while it uses kodjaz. After a Business stops using kodjaz, or asks us to delete its data, we delete it within 30 days, except what the law requires us to keep.

6. Security

Data is encrypted in transit. Access to it is limited to the people who need it to run the service. Access tokens are stored as secrets, not in code.

7. Your choices

• Stop messages: reply STOP to the Business, block its number in WhatsApp, or tell the Business you do not want messages.
• See, correct or delete your data: follow the steps on our data deletion page, or write to us.

8. Changes

If we change this policy, we will update the date above. Important changes will be announced to Businesses before they take effect.

9. Contact

hello@kodjaz.com · Kashka-Suu, Alamudun district, Chui region, Kyrgyz Republic