1. Who this applies to
This Policy applies to individuals who message our WhatsApp business number, open links we send (for example, short map-based property views or developer verification pages), upload brochures or media, or otherwise use features we operate in connection with real-estate discovery, listing intake, or broker and developer workflows.
2. Data we collect
We collect information you provide, information generated when you use the Service, and limited technical data from your device or carriers. Categories include:
2.1 Identity and contact
- WhatsApp identifiers such as your phone number and display name as transmitted by Meta when you message us.
- Role and flow context (for example, whether you are exploring as a renter or buyer, listing as an owner or agent, or using an authorized developer flow), stored with your session to route conversations correctly.
2.2 Conversations and content
- Text messages you send and assistant replies we send back.
- Voice notes, which we may transcribe using speech-to-text services so our assistant can treat them like text.
- Images and documents (including property photos and PDF brochures). For brochures we may extract text and structured fields (such as project name, builder, RERA reference, amenities, possession timelines) and compute a file fingerprint to detect duplicates.
- Location pins and addresses you share (for example, office or preferred locality) and derived coordinates when we geocode text addresses for commute or proximity features.
2.3 Search, listings, and handoff
- Search preferences and queries (such as budget, BHK, locality, and similar filters) and short-lived caches of result sets to keep the conversation coherent.
- Listing draft fields when you list a property through the assistant (rent, deposit, furnishing, amenities, restrictions, images, description, map pin, and related attributes).
- Contact-agent or broker handoff details you provide when you ask to speak with a human, including the message you choose to send with the handoff.
2.4 Web verification and maps
- When you use our developer verification or publish flows on the web, we process the fields you submit and confirm (for example, project name, RERA number, pricing band, possession, and map coordinates selected through map providers).
- Map providers may collect their own usage data under their policies when you interact with autocomplete or the map widget.
2.5 Technical and operational data
- Server and application logs (timestamps, error diagnostics, rate limits, security signals).
- Session state held in memory or cache (for example Redis) to debounce rapid WhatsApp bursts, preserve conversation context, and expire stale sessions automatically (typically on the order of hours unless renewed by activity).
- Database records in our primary datastore (for example Supabase-hosted PostgreSQL) for accounts, listings, projects, embeddings used for semantic search, and operational metadata required to run the product.
3. How we use data
We use personal data to:
- Operate, maintain, and secure the Service;
- Interpret your messages, run retrieval and ranking over listing and project data, and generate helpful responses;
- Route you between renter, seller, broker, or developer experiences and interactive menus;
- Prepare draft listings or projects, queue background jobs (for example rasterization or embedding), and send you verification or view links;
- Connect you with brokers, agents, or internal operators when you request human assistance;
- Enforce authorization rules (for example, limiting certain brochure flows to approved numbers);
- Debug, measure quality, prevent abuse, and comply with law or lawful requests.
4. AI and automated processing
Parts of the Service use large language models, speech-to-text, vision models, and classical retrieval (including vector search over text chunks) to understand content and produce outputs. Automated decisions may affect what listings or answers you see, but they do not produce legally binding outcomes on their own without human review where we require it (for example, verified pricing or map pin before publish in configured flows).
We utilize enterprise APIs for our AI models (such as OpenAI or Anthropic). We do not use your private conversations, personal data, or uploaded media to train these underlying public foundation models.
7. Retention
We retain information for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Ephemeral caches (such as conversation debounce buffers or short-lived search queues) expire automatically. Uploaded files may be removed from temporary disk after background processing completes. Database retention follows our backup and product lifecycle policies unless a different period is required by law or contract. When you submit a verified deletion request, we delete or anonymize personal data within 30 days except where retention is legally required.
8. Security
We implement administrative, technical, and organizational measures appropriate to the risk, including access controls, encryption in transit where supported by our stack, and separation between privileged backend operations and read-only public web clients. No method of transmission or storage is completely secure.
9. Your rights and choices
Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict certain processing, and to object to direct marketing (we rarely use WhatsApp for marketing without context). You may also lodge a complaint with a supervisory authority.
To exercise these rights, contact support@killi.chat. For deletion, use the dedicated process in section 10 or our Data Deletion Instructions page.
10. Data deletion instructions
You may request deletion of personal data associated with your use of Killi, including your WhatsApp phone number, conversation history, search preferences, listing drafts, uploaded media, and profile fields we store in our database.
How to request deletion
- Email support@killi.chat from an address you can access, or from the same email you use for dashboard links if applicable.
- Use the subject line Data Deletion Request.
- Include your full WhatsApp phone number in international format (for example, +91XXXXXXXXXX) so we can locate your account and messages.
- Optionally describe what you want removed (all data vs. specific listings). If you do not specify, we will delete all personal data tied to that phone number except where we must retain records for legal, security, or fraud prevention reasons.
What happens next
- We may verify your identity (for example, by confirming control of the WhatsApp number or replying from your registered email).
- Verified requests are processed within 30 days. We will confirm by email when deletion is complete or explain if any data must be retained by law.
- Ephemeral caches (for example short-lived conversation state) may clear sooner based on their TTL.
WhatsApp and Meta
Blocking or deleting your chat with our WhatsApp business number on your device stops new messages from being processed but does not automatically delete data we already stored. You must submit a deletion request using the steps above.
Message transport through Meta WhatsApp Cloud API is subject to Meta's own retention rules for in-flight message delivery. Data we persist in Killi systems (database records, logs, uploaded files) is deleted or anonymized according to this process.
Contact
Service / trading name: Killi
Killi is operated as an individual business in India. Killi is not a registered company at this time.
Email: support@killi.chat
Website: https://killi.chat
Place of operation: Bengaluru, Karnataka, India
11. International transfers
Our operators and subprocessors may be located outside your country. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
12. Children
The Service is not directed to children under 16 (or the minimum age in your region). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data.
13. Changes
We may update this Policy from time to time. We will post the new effective date and, where appropriate, provide additional notice (for example via WhatsApp or email).