1. Introduction
Katlog ("Katlog", "we", "our", or "us") is a WhatsApp broadcasting platform operated by Akram Qureshi Traders, a sole proprietorship registered in Pakistan with the Federal Board of Revenue (FBR). This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our website (katlog.app), sign up for our waitlist, or use the Katlog service.
We take your privacy seriously. Our service exists specifically to help Pakistani small and medium businesses (SMBs) communicate with their customers through the official WhatsApp Business Platform, and that mission is only possible if the people who use Katlog — and the customers they reach — can trust how their information is handled.
By accessing or using Katlog, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the service. This policy applies to all users of katlog.app and the Katlog platform globally, with specific compliance with the laws of Pakistan, the policies of Meta Platforms, Inc., and the WhatsApp Business Platform Terms of Service.
2. Information We Collect
Information you provide directly
When you sign up for the Katlog waitlist or create an account, we collect information you give us, including your full name, phone number (typically a Pakistani mobile number in +92 format), email address (if provided), and the type of business you operate (wholesaler, retailer, restaurant, distributor, service business, etc.).
Business and customer information
To operate the Katlog service, you may upload customer contact lists (CSV files containing phone numbers and optional tags or labels), product images, price lists, and message templates. This information is stored securely on our infrastructure and is used solely to deliver the messages you instruct us to send. We treat your customer lists as your confidential data. We do not use your customer phone numbers for any purpose other than delivering the broadcasts you initiate.
Usage and technical information
When you use the Katlog platform or visit our website, we automatically collect certain technical data: IP address, browser type and version, device type, operating system, referring URLs, pages visited, time spent on pages, and actions taken within the dashboard (messages sent, templates created, uploads performed). We use this data to improve reliability, diagnose issues, detect abuse, and make product decisions.
Payment information
When you top up your Katlog wallet via JazzCash, Easypaisa, or bank transfer, the payment is processed by the relevant payment provider or financial institution. We receive a confirmation of the transaction (amount, reference ID, timestamp) but we do not store full payment credentials such as card numbers, CVV codes, or mobile wallet PINs.
3. How We Use Information
We use the information described above for the following purposes, and only for these purposes:
- Providing the service: authenticating your account, sending WhatsApp broadcasts on your behalf through the official WhatsApp Business API, tracking delivery status, and maintaining your wallet balance.
- Customer support: responding to your questions, helping you troubleshoot Meta verification, guiding you through onboarding, and investigating reported issues.
- Service improvement: analyzing aggregated usage patterns to improve features, performance, and reliability.
- Security and abuse prevention: detecting spam, fraud, account compromise, and violations of our Terms of Service or WhatsApp Business Platform policies.
- Legal compliance: meeting obligations under Pakistani law, responding to lawful requests from authorities, and maintaining records required for taxation and regulatory compliance.
- Communications: sending you transactional emails or messages about your account, wallet balance, delivery reports, and platform updates. We will not send you marketing messages without your prior consent.
4. Data Sharing
We do not sell your data. We do not rent, trade, or otherwise commercialize any user data — not the information you give us, not your customer contact lists, and not usage data. Your business contact lists are your property and remain your property.
We share information only in the following limited circumstances:
- With Meta / WhatsApp: to deliver your broadcasts, we forward the necessary message content, recipient phone numbers, and template information to Meta Platforms, Inc. through the official WhatsApp Business API. This is the core function of the service and required for it to work. Meta handles this data in accordance with its own privacy policies.
- With service providers: we work with a small number of infrastructure vendors (hosting, database, email delivery, error monitoring) who process data on our behalf under strict confidentiality and data-protection obligations. They may access only what they need to perform their function.
- For legal reasons: we may disclose information if we believe in good faith that disclosure is required by law, court order, or regulatory authority in Pakistan, or to protect the rights, property, or safety of Katlog, our users, or the public.
- In a business transaction: if Akram Qureshi Traders or the Katlog service is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify users in advance via email or prominent notice on the website.
5. Data Security
We take reasonable and industry-standard steps to protect your data from unauthorized access, disclosure, alteration, or destruction. All data transmitted between your device and our servers is encrypted in transit using TLS 1.2 or higher. Customer contact lists, account credentials, and wallet balances are encrypted at rest in our database using AES-256 encryption.
Access to production systems is restricted to authorized personnel, protected by multi-factor authentication, and logged for audit purposes. We maintain network-level protections (firewalls, rate limiting, DDoS mitigation) and perform regular security reviews of our codebase and infrastructure. Despite these measures, no system is perfectly secure — we cannot guarantee absolute security, and you use Katlog at your own informed risk.
If we become aware of a data breach that affects your personal information, we will notify you without undue delay and provide details of the incident and the steps we are taking in response, in accordance with applicable law.
6. Your Rights
You have meaningful control over your information on Katlog. You may at any time:
- Access the personal information we hold about you by emailing info@katlog.app from the email associated with your account.
- Correct inaccurate or outdated information in your account profile at any time through the dashboard.
- Export your customer contact lists and message history in CSV format through the dashboard or by request.
- Delete your account and associated data. On account deletion, we permanently remove your personal profile, uploaded contact lists, and message drafts within 30 days, except where retention is required for legal or tax compliance (in which case data is retained only as long as legally required).
- Object to specific processing activities, such as marketing communications, by replying to any message from us or contacting support.
We will respond to verified requests within a reasonable time, and in any event within 30 days.
7. Cookies
Our website uses a small number of cookies and similar technologies to function correctly. Specifically, we use a language preference cookie (katlog_lang) to remember whether you prefer English or Roman Urdu, and session cookies to keep you logged in. We do not use third-party advertising cookies and we do not track you across other websites.
You may disable cookies in your browser settings, but some parts of the service may not function as intended if cookies are disabled.
8. Children's Privacy
Katlog is a business-to-business service intended for use by adult owners and operators of registered businesses. The service is not directed at children, and we do not knowingly collect information from anyone under the age of 18. If you are under 18, please do not use Katlog or submit any information to us.
If we become aware that we have collected personal information from a person under 18, we will delete that information promptly. If you believe that a minor has provided information to Katlog, please contact us at info@katlog.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the features of the service. When we make material changes, we will post the updated policy on this page, update the "Last updated" date at the top, and — where the change is significant — notify registered users by email.
Continued use of Katlog after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the updated terms, you may close your account before the changes take effect.
10. Contact Us
Questions, concerns, or requests related to this Privacy Policy or your personal information should be directed to:
Akram Qureshi Traders
North Nazimabad, Karachi, Pakistan
Email: info@katlog.app
We read and respond to every message. For faster handling, please include the email or phone number associated with your Katlog account.