Privacy
Last updated 2 October 2026.
Who is responsible
Kaltix is operated by Helmut Tourinho, a sole trader based in Spain. For anything on this page, including a request about your own data, write to legal@kaltix.dev and a person reads it.
Two different roles, and which one applies to you
This distinction decides who you should write to, so it comes before everything else.
Our own customers If you hold an account with us, we decide how your account data is handled: your email address, your business name, what you send and what it cost. We are the controller for that, and this page describes it.
The people who message a business If you messaged a business on WhatsApp and that business uses Kaltix, the business decides what happens to your conversation — not us. We hold it on their behalf and act on their instructions. Write to the business you messaged. If you do not know who runs their WhatsApp, write to us and we will pass it on.
What we hold, and why
For an account: the email address you sign in with, your business name and billing country, the WhatsApp number and account identifiers Meta returns when you connect, and a record of what was sent, to which country, in which category, and what it cost. We hold it to run the service you are paying for and to invoice you correctly.
Legal basis
Performing our contract with you, for everything needed to run and bill the service. Separate, explicit consent for marketing messages, recorded with a timestamp and its source. Legal obligation for invoicing records, which Spanish tax law requires us to keep.
Who else processes it
We use these providers, and we sign Standard Contractual Clauses with each where a transfer outside the EU could occur:
- Google Cloud — hosting, in Belgium
- Neon — the database, in Frankfurt
- Twilio — delivering WhatsApp messages
- Meta — WhatsApp itself; your account and number live in your own Meta portfolio
- Brevo — the sign-in email, stored in the EU
- Stripe — payments
- Cloudflare — domain and DNS
Where it is held
Your account data and message records are stored in the EU. WhatsApp message delivery itself runs through Twilio and Meta and is not confined to the EU, so we do not claim EU-only processing for message content in transit. Where data does leave the EU, Standard Contractual Clauses apply.
How long
Conversations, contacts and consent records are purged on a schedule you set. Invoicing records are kept for as long as Spanish tax law requires, which is the one thing we cannot delete on request.
Your rights
You can ask for a copy of your data, correct it, have it deleted, or object to how it is used. Export works from inside your account, including while an account is suspended or in a payment dispute — withholding it would be both unlawful and the opposite of what this product is for. For anything else, write to legal@kaltix.dev; we answer within 30 days and tell you what changed.
Complaints
If we get it wrong you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live.
Cookies
One cookie, set when you sign in, holding a signed identifier and nothing else. It is what keeps you signed in. There is no analytics, advertising or tracking cookie on this site, which is why there is no consent banner.