Tamakun ("Tamakun", "we", "us", or "our") operates the website tamakun.sa and a suite of business applications that help companies manage their marketing data and their customer communications across social media and messaging platforms. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. Questions? Email [email protected].
1. Who this policy covers
This policy applies to (a) visitors to tamakun.sa; (b) our business customers ("Clients") who connect their accounts to our applications; and (c) the end users who interact with our Clients through connected social media and messaging channels.
For data belonging to a Client's audience — for example, a person who sends a direct message to a Client's Instagram account — we act as a data processor on behalf of that Client, who is the data controller.
2. The applications this policy relates to
- Campaign data ingestion — tools that import and organize marketing and advertising campaign performance data from our Clients' connected e-commerce stores and advertising accounts.
- AutoChat — a centralized customer-service application that lets our Clients read and respond, from a single inbox, to direct messages (DMs) received on their social media accounts and to WhatsApp messages.
- Social engagement monitoring — features that let our Clients follow the comments, likes, and reactions on their own posts and advertisements.
3. Information we collect
We collect information you provide, and information we receive — only with authorization — from third-party platforms.
a. Information from Clients. Account and contact details, business information, and the configuration you provide when you register and connect your accounts.
b. Data from Meta Platforms (Facebook & Instagram). When a Client authorizes a connection through Meta's official APIs, and only within the permissions granted, we access: Facebook Page and Instagram professional-account information; messages sent and received through Messenger and Instagram Direct; comments, reactions, and likes on the Client's posts and advertisements; and post and advertising performance metrics.
c. Data from TikTok. When a Client authorizes a connection through TikTok's official APIs, and only within the permissions granted, we access: business-account information; direct messages; comments and likes on the Client's videos and advertisements; and content and advertising performance metrics.
d. WhatsApp Business. Messages exchanged between a Client and their customers through the WhatsApp Business Platform, so those conversations can be managed in AutoChat.
e. Store & campaign data. Marketing and advertising campaign performance data from the Client's connected e-commerce stores and ad accounts.
f. Website information. Our website is a static informational site. We do not use advertising or tracking cookies on it. Our servers keep standard security logs (such as IP address and request time) for a limited period.
4. How we use information
We use the information described above only to:
- provide the AutoChat inbox so Clients can read and reply to DMs and WhatsApp messages;
- display and organize comments, likes, and reactions on Clients' posts and advertisements;
- import, organize, and report on campaign performance;
- operate, secure, maintain, and improve our services and provide customer support; and
- comply with legal obligations.
We do not sell personal data, and we do not use data obtained from Meta, TikTok, or WhatsApp for advertising, profiling, or any purpose other than providing the services described above to the Client who authorized the connection.
5. Platform data and compliance
Our access to and use of information from third-party platforms is subject to, and we comply with, the terms and policies of those platforms — including the Meta Platform Terms and Developer Policies, the TikTok Developer Terms of Service and related policies, and the WhatsApp Business Terms. We access and use platform data only as authorized by the connecting user and only as each platform permits.
6. How we share information
- with the Client who owns the connected account, on whose behalf we process the data;
- with service providers (subprocessors) who host or support our systems under confidentiality and data-protection obligations;
- when required by law or to protect our rights, our users, or the public; and
- in connection with a business transfer such as a merger or acquisition, subject to this policy.
7. Data retention
We retain personal data only for as long as necessary to provide the services, for as long as instructed by the relevant Client, or as required by applicable law or platform requirements — after which it is deleted or anonymized.
8. Data deletion and your choices
- Clients can disconnect any integration from within our application, or from the settings of their Meta, TikTok, or WhatsApp account; disconnecting immediately revokes our access.
- To request deletion of data we hold about you, email [email protected] with the subject "Data Deletion Request." We will verify the request and delete the associated data within 30 days, except where retention is required by law or platform rules.
- End users may also contact the relevant Client (the controller of their data) or reach us at [email protected].
9. Security
We protect information using encryption in transit, access controls, network isolation, and regular security review. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.
10. Your rights
Depending on your location and applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact [email protected].
11. International transfers
We are based in the Kingdom of Saudi Arabia. Where information is processed outside your country, we take steps to ensure it is protected consistently with this policy and applicable law.
12. Children
Our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.
14. Contact us
Tamakun · Riyadh, Saudi Arabia · [email protected]