Privacy Policy
Last updated:
This policy explains how Naltik collects, uses and protects personal data on the website naltik.com and in the software, apps and integrations we build and operate, including our integrations with Facebook, Instagram, Messenger and WhatsApp.
1. Who we are
We are Naltik (Naltik Software), a software business based at Rruga Reshit Bali, Selitë, Tirana 1044, Albania.
Naltik is the data controller for the data described in sections 2 and 3. For any question about privacy, contact us at [email protected].
2. Data we collect on naltik.com
- Contact form. When you send us a message we store your name, company, email address, phone number, the service you are interested in, your message and the time it was sent. You only need to give an email address or a phone number, not both.
- Technical data. Our server sees your IP address to deliver the page and, for a short time, to block spam and repeated login attempts. We do not store IP addresses with your messages.
- Cookies. The public website does not set cookies by default. One strictly necessary cookie is set only when a Naltik administrator signs in to the admin panel.
- Fonts. Pages load fonts from Google Fonts, so your browser connects to Google's servers, which see your IP address. See Google's privacy policy.
- Analytics. If we add analytics or advertising tools (such as Google Analytics or the Meta Pixel), they collect data about your visit under their own policies, and we will list them in this section.
3. How we use it
We use contact form data only to reply to you, prepare offers and provide the services you ask for. Our legal basis is your request and the steps needed before or for a contract with you, and our legitimate interest in running and protecting the website. We do not use it for automated decisions and we do not send marketing without your consent.
4. Data from Facebook, Instagram and WhatsApp
Some of our products and client projects, such as Connecta and our Odoo integrations, connect to Meta platforms through Meta's official APIs. They only access data after a business or user has logged in with Facebook and granted permission. Depending on the permissions granted, this can include:
- your name, Facebook or Instagram user ID and profile picture;
- the Facebook Pages, Instagram accounts and WhatsApp Business accounts you manage;
- messages, comments and reactions sent to those Pages and accounts, and the phone numbers and names of the people who send them;
- product catalog data you choose to sync.
We use this data only to provide the features you turned on: showing and answering messages and comments, sending notifications, and syncing contacts, orders and catalogs with your own systems such as Odoo. We do not sell this data, use it for advertising, or share it with anyone except the service providers listed in section 5. Our use of data received from Meta follows the Meta Platform Terms.
When we build or run a system for a client business, that business decides what data is processed and is the data controller; Naltik processes the data on its behalf and only according to its instructions.
5. Who we share data with
We share personal data only with providers that help us run our services, and only as much as they need:
- hosting and database providers where the website and apps run;
- email, SMS and messaging providers used to deliver messages you send or ask us to send;
- Meta Platforms, when you use features that connect to Facebook, Instagram or WhatsApp;
- authorities, when the law requires it.
Some of these providers may store data outside Albania. When they do, we use providers that offer appropriate safeguards for personal data.
6. How long we keep data
- Contact form messages: for as long as needed to handle your request and any work that follows, and at most 3 years after our last contact, unless the law requires longer.
- Data received from Meta: while the connection is active. When you disconnect our app or ask us to delete your data, we delete it within 30 days.
- Client project data: for the duration of the contract, then returned or deleted as agreed with the client.
7. How to delete your data
You can ask us to delete your data at any time:
- Send an email to [email protected] with the subject "Data deletion request".
- Include the email address, phone number or Facebook/Instagram account the data is linked to, and the product you used (for example naltik.com or Connecta).
- We confirm your request and delete the data within 30 days, then send you a confirmation.
If you connected one of our apps with Facebook, you can also remove it at any time in Facebook: Settings & privacy → Settings → Apps and websites, select the app and choose Remove. This stops our access straight away; send us the email above if you also want us to delete the data we already received.
8. Your rights
Under the Albanian law on personal data protection and, where it applies, the EU General Data Protection Regulation (GDPR), you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To use these rights, contact [email protected]. You can also complain to the Information and Data Protection Commissioner of Albania (idp.al).
9. Security
We protect data with encrypted connections (HTTPS), access limited to the people who need it, password-protected administration and regular updates. No system is perfectly secure, but we will tell you and the authorities without delay if a breach puts your data at risk.
10. Children
Our services are for businesses and are not directed at children under 16. We do not knowingly collect their data.
11. Changes to this policy
We may update this policy when our services change. The date at the top shows the latest version. If a change is significant, we will say so on this page.