Skip to content
Kolay DM

Security and Data Protection

How your data is protected in Kolay DM, who can access it and how you can have it deleted.

PlanAll plans

Core Principles

  • Only the data that's needed: Kolay DM processes the data needed to answer your messages and follow up with your customers.
  • Encrypted connections: the panel and website run only over encrypted connections (HTTPS).
  • Business-level access: each business's data is kept separate from other businesses; it is accessible to that business's authorised users and, only as far as needed to provide the service, to the Kolay DM team.
  • No model training: your conversations are not used to train general-purpose AI models.
  • KVKK: personal data is processed under Turkey's Personal Data Protection Law No. 6698 (KVKK).
  • Official connections: Instagram and WhatsApp are connected through Meta's official permission screens; your password is never shared with Kolay DM.

Access and Session Security

  • The account owner signs in with Facebook; team members sign in with e-mail, password and a verification code sent to their e-mail on every sign-in.
  • Roles decide who can see and change what. See Team and roles.
  • You can close sessions left open on other devices from Settings › Profile › Security.

Data Retention and Deletion

  • The original text of web forms is kept for 30 days, weekly analysis reports for 90 days.
  • When you disconnect a WhatsApp number, that number's conversations are deleted.
  • Account and data deletion requests are completed within 30 days.

For more detail, see our legal documents:

If you notice a security issue, please write to [email protected].

Frequently Asked Questions

Are our customer messages used to train AI models?
No. Kolay DM does not use businesses' or their customers' conversations to train general-purpose AI models — neither its own nor third parties'. Details are in the Data Processing Addendum.
How do I limit what team members can access?
Give each person the right role on Settings › Team. Team members can't access account connections, payments or billing; if distribution is on, they only see conversations assigned to them.
How can I have my data deleted?
Create a request with the delete-my-account-and-data option on Settings › Profile. The request is completed within 30 days.

Last updated: