1. Scope and privacy roles
This Notice applies to business.kaltiq.com, the Kaltiq Business applications, Business Profiles, storefronts, business communications and KaltiqPay features. Kaltiq is controller for account administration, platform security, verification, moderation, number allocation, service analytics, billing and legal compliance.
A Business Profile is normally an independent controller for customer information it collects or uses to sell, support, advertise, analyse, fulfil orders or maintain its own records. For workspace information processed only on documented business instructions, Kaltiq may act as processor; that relationship requires an applicable data-processing agreement. A business must not describe Kaltiq as its processor for data or purposes Kaltiq independently controls.
2. Information processed
Business and representative information
- Legal/trading name, category, description, registration and tax details, address, website, email, beneficial owner or authorised representative, licences, verification evidence and badge state.
- Reserved 9-series identifier and its standard, vanity or premium class; prior identifiers, allocation history and moderation status.
Owners, staff and access
- Kaltiq user identity, role, invitation, permission, employment/agency relationship, linked devices, authentication events and administrative audit history.
- Password verifiers are held by the authentication service, not plaintext passwords. Six-digit app-lock PIN material is derived and stored locally. Fingerprint or facial templates stay within the operating system; Kaltiq receives an authentication result or public-key credential.
Customers, communications and content
- Customer identifiers, conversations, calls, voice notes, attachments, reactions, delivery/read state, support/order messages, labels, quick replies, greeting/away messages, broadcasts and opt-out or consent evidence.
- Call participants, invitation/answer/end events, duration, type, quality and network route. Calls may be peer-to-peer or use Kaltiq/contracted TURN relays. Media is not retained as call content unless an authorised recording feature is used.
- Messages are protected in transit. Do not claim they are end-to-end encrypted unless the relevant screen expressly confirms it.
Storefront, catalog and commerce
- Listings, images, descriptions, prices, collections, cart/order messages, inventory/availability representations, customer complaints and moderation decisions.
- KalCoin balance and immutable ledger events, payment requests, sender/recipient 12-digit numbers, notes, refunds/adjustments and risk signals.
- For external USDT loads or redemptions: wallet address, chain, transaction hash, amount, block/confirmation information and WalletConnect challenge/signature. Kaltiq does not request seed phrases or private keys. Public blockchain records cannot be erased by Kaltiq.
Location, device, network and storage
- Business address and any precise/live location a user deliberately shares after device permission. Approximate country/region may be inferred from IP for routing, fraud, security and geographic compliance.
- IP address, VPN/proxy risk, user agent, OS/browser/app version, device model, language, time zone, generated installation ID, session/token events, PWA cache, crash and security logs.
- Workspace drafts, preferences and cached data stored in localStorage, sessionStorage, IndexedDB, service-worker cache or secure app storage as described in the Cookie & Device Storage Notice.
3. Purposes and lawful bases
| Purpose | Typical information | EEA/UK basis where applicable |
|---|---|---|
| Provide profiles, storefronts, staff access, communication and KaltiqPay | Account, business, content and ledger data | Contract; requested pre-contract steps |
| Verify businesses and protect customers | Registration, representative, device and risk data | Contract; legitimate interests; legal obligation |
| Moderate listings, messages and broadcasts | Content, reports, metadata and decisions | Legitimate interests; legal obligation |
| Process optional precise location, contact access or recording | User-enabled data | Consent or requested functionality |
| Accounting, fraud, disputes and compliance | Ledger, blockchain, audit and legal data | Contract; legal obligation; legitimate interests |
| Improve reliability and adoption | Minimised usage and diagnostics | Legitimate interests; consent where required |
4. Disclosures
Information may be disclosed to authorised business staff; customers and public storefront visitors according to profile settings; vendors providing hosting, storage, security, email, maps, TURN, app distribution or blockchain infrastructure; professional advisers; corporate transaction counterparties under confidentiality; and authorities under valid law or a documented emergency. Staff and vendors receive least-privilege access and may not use the data for unrelated personal purposes.
Kaltiq does not sell personal information or share it for cross-context behavioural advertising. Business Profiles must not sell, share or repurpose Kaltiq-derived customer data except with a separate lawful basis and transparent notice.
5. Automated systems
Automated signals may identify spam, account farms, abusive broadcasts, suspicious devices, malware, prohibited listings, transaction fraud or VPN/proxy risk. Results may queue review, require step-up verification, reduce distribution, pause a listing or transaction, or temporarily restrict an account. Legally required human review and appeal routes remain available.
6. International transfers and security
Kaltiq must document hosting regions, data-residency rules, subprocessors and transfer safeguards before launch in each market. Security measures include transport encryption, credential hashing, role controls, audit logs, session revocation and scoped staff access. No system is completely secure; businesses must manage their staff, devices, exports and customer-data obligations.
7. Children and sensitive data
Business Profiles may not knowingly target children, collect children’s information, sell age-restricted products to minors, or request health, biometric, government-ID, financial-account or other sensitive information unless Kaltiq has expressly approved the workflow and every legal requirement is met. Ordinary chat is not an approved regulated-record system.
8. Rights and requests
Representatives and customers may have rights to access, correct, delete, restrict, object, withdraw consent, receive a portable copy, appeal or complain to a regulator. Send platform requests to admin@kaltiq.com. Requests about a business’s independent customer records should first go to that Business Profile; Kaltiq will assist where contract and law require. Identity may be verified proportionately, and another person’s data cannot be disclosed.
9. Contact and changes
Material changes will be notified in the workspace or by another durable method where required. Earlier versions and acceptance evidence must be retained. Privacy/DPO and interim regional questions: admin@kaltiq.com; appeals: appeals@kaltiq.com.