Last updated: September 1, 2026
Quilo ("Quilo," "we," "us") provides a WhatsApp-based customer communication and booking platform for businesses in Egypt. This policy explains what personal data we collect, how we use it, and the choices you have — whether you're a business that uses Quilo or one of your customers who messages a Quilo-connected WhatsApp number.
As the business owner using Quilo, you give us your own account information (email, business details, WhatsApp connection) — for that data we're a data controller. When your customers message your WhatsApp number, we process their messages, phone numbers, and booking details on your behalf so your assistant can reply, book, and remind — for that data we're a data processor, and you remain the controller responsible for having a lawful basis to handle it (for most businesses, simply that the customer messaged you first).
Email and password (hashed, never stored in plain text), and device-recognition information used for sign-in security.
Your business name, WhatsApp phone number, WhatsApp Business Account ID, and WhatsApp access token — encrypted at rest before storage, never stored as plain text — plus the knowledge base you build (services, prices, hours, location, FAQs, booking rules).
Message content, phone numbers, names, and booking details they share when messaging your number.
Billing runs through Paymob; Quilo never receives or stores your card number.
Standard server logs, and session cookies that keep you signed in and remember trusted devices — no third-party ad-tracking cookies.
To operate your assistant (answer, book, remind, hand off), send you transactional email or WhatsApp messages about your account, process payments, run scheduled jobs (reminders, review requests, daily summaries) at the right time, keep the service secure, and improve Quilo from aggregated, non-identifying usage patterns.
Optional AI-assisted answering: if you turn this on, the specific customer message is sent to our AI provider along with the relevant facts from your own knowledge base, so it answers strictly from what you've told it — it doesn't invent prices, and it hands off rather than guesses. Off by default, per-assistant opt-in only.
We don't sell data or share it for advertising. We use these service providers to run Quilo:
We may also disclose information if required by law.
We keep account and business data while your account is active. If you close your account or request deletion, we delete or anonymize it within a reasonable period, except records we must keep for legal or accounting reasons. If a business asks us to delete a specific customer's data, we do so as their processor; end-customers should first contact the business they messaged.
WhatsApp access tokens are encrypted at rest; passwords are hashed, never stored in plain text; an unrecognized device requires a one-time code before it can sign in; all data is transmitted over HTTPS.
You may have rights to access, correct, export, delete, or object to certain uses of your data. Egyptian businesses and individuals are covered by Egypt's Personal Data Protection Law (Law No. 151 of 2020); similar rights may apply elsewhere under local law. Contact us at privacy@quilo.me to exercise these rights.
Some providers listed in section 5 may process data outside Egypt; we rely on their security and contractual safeguards.
Quilo is a business tool, not directed at children. We don't knowingly collect data from anyone under 18; WhatsApp itself requires users to be at least 13 (16 in some regions).
We only use session and device-trust cookies needed to keep you signed in — no third-party advertising or cross-site tracking cookies.
We'll update the "last updated" date above for material changes, and notify you directly where appropriate.
Questions about this policy or your data? Email privacy@quilo.me.