Privacy Policy
1. Who we are
Connectos99 ("Connectos99", "we", "us") is a customer relationship management platform for education and language-travel agencies. It is available at connectos99.com and app.connectos99.com and is operated by Academia United Edtech Group L.L.C-FZ.
This policy explains what personal data we process when you visit our websites, use the Connectos99 application, or connect third-party accounts (such as Google or Meta) to it.
2. Our role
- Customer data. Our customers (agencies and their staff) use Connectos99 to manage their own leads, students, contacts, bookings, messages and documents. For this data the customer is the data controller and we act as a data processor on the customer's instructions. If you are a student or lead of one of our customers, please contact that organisation first about your data; we will help them respond.
- Account and website data. For the accounts of our customers' users, billing, support and visits to our websites, we are the data controller.
3. Data we collect
- Account data: name, work email address, phone number, role, organisation and login information.
- Customer content: data our customers enter, import or receive through the platform, for example contact details, enquiries, booking and payment records, emails, SMS and WhatsApp messages, call records and recordings, and uploaded documents.
- Integration data: data received from accounts a customer chooses to connect, as described in sections 5 and 6.
- Billing data: subscription and invoice details. Card payments are handled by our payment provider; we do not store full card numbers.
- Technical data: IP address, browser and device information, log and error data, needed to run, secure and troubleshoot the service.
4. How we use data
- To provide, maintain and support the Connectos99 service and the features a customer turns on.
- To secure the service, prevent abuse and investigate errors.
- To manage subscriptions, billing and customer communication about the service.
- To comply with legal obligations.
Our legal bases are performance of our contract with the customer, our legitimate interest in operating a secure service, compliance with law, and consent where it is required. We do not sell personal data, and we do not use customer content for our own advertising.
5. Google user data
Customers can connect Google services to Connectos99. We request only the access needed for the feature the customer enables:
- Google Sign-In: your email address and basic profile (name), only to sign you in to your existing Connectos99 account.
- Google Calendar: read-only access to your primary calendar, so your existing events appear in your Connectos99 calendar next to your reminders. We do not create, change or delete events in your Google Calendar.
- Google Ads: to read campaign, cost and performance reports for the Google Ads accounts the customer connects, and to upload offline conversions (for example, a qualified lead or a confirmed sale) that the customer configures, so the customer can measure the return on its own advertising.
Connectos99's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- We use Google user data only to provide and improve the user-facing features described above, inside the customer's own Connectos99 workspace.
- We do not sell Google user data and do not transfer it to third parties, except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with notice to users.
- We do not use Google user data for serving advertisements, and we do not use it to develop, improve or train generalised AI or machine-learning models.
- Our staff do not read Google user data unless the user gives explicit consent, it is necessary for security purposes or to comply with law, or the data has been aggregated and anonymised.
- Access and refresh tokens are encrypted at rest. A customer can disconnect an integration at any time in Connectos99 settings, or revoke access in their Google Account permissions.
6. Advertising platforms (Meta and TikTok)
If a customer connects its Meta or TikTok advertising account, Connectos99 reads that account's campaign and spend reports and can send conversion events (such as a qualified lead or a confirmed sale) through the platform's conversions API. Contact identifiers sent with these events, such as email address and phone number, are hashed before they leave Connectos99, as these platforms require. The customer decides whether to connect these accounts and which events are sent, and remains responsible for having the appropriate consent from its own leads and students.
7. AI features
Some optional features, such as reply drafting, conversation summaries, insights and price-list extraction, use a large language model provider (Anthropic). Only the content needed to produce the requested result is sent, and under the provider's commercial terms it is not used to train their models. Call transcription runs on our own servers.
8. Service providers
We use carefully selected service providers that process data on our behalf, under contracts that require them to protect it:
- Hosting and infrastructure: Hetzner Online (data centres in the European Union) and Cloudflare (DNS and network security).
- AI processing: Anthropic.
- Payments: Stripe.
- Error monitoring: Sentry.
- Messaging and telephony: email delivery, SMS, WhatsApp Business Platform (Meta) and telephony providers, as configured by each customer.
We may also disclose data where required by law or to protect rights and safety, and in connection with a merger, acquisition or sale of assets, subject to this policy.
9. International transfers
Our primary hosting is in the European Union. Some service providers may process data in other countries. Where this happens we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
10. Retention
We keep customer content for as long as the customer's account is active or as instructed by the customer. After an account ends, we delete or return customer content within a reasonable period, unless we must keep it longer to meet legal, tax or accounting obligations. Technical logs are kept for a limited period for security and troubleshooting.
11. Security
We protect data with encryption in transit (TLS), encryption at rest for credentials and integration tokens, role-based access control with separation between customer workspaces, optional two-factor authentication and activity logging. No system is completely secure, but we work to protect your data and will notify affected customers of a personal data breach as required by law.
12. Your rights
Depending on where you live (for example under the EU and UK GDPR or Türkiye's KVKK), you may have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent. You may also complain to your local data protection authority.
To exercise these rights, contact us using the details below. If your data is held by one of our customers, we will pass your request to that customer and support them in responding.
13. Cookies
The Connectos99 application uses only cookies that are necessary for sign-in, security and remembering your settings. Our websites do not use advertising or analytics cookies. Pages load fonts from Google Fonts, which receives your IP address to deliver them.
14. Children
Connectos99 is a business service and is not directed at children. Our customers may process data about students who are minors; in that case the customer is responsible for obtaining any required parental consent.
15. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date and, for material changes, inform customers in the application or by email.
16. Contact
Academia United Edtech Group L.L.C-FZ
Email: iletisim@academiaunited.com
Website: academiaunited.com