Elbit Technologies
Effective 27 August 2026 · Last updated 27 August 2026
This policy explains how Elbit Technologies collects, uses, stores and protects information when providing messaging and customer relationship management (CRM) software to business clients.
Elbit Technologies ("Elbit", "we", "us") is a software provider registered and operating in Kenya. We build and operate messaging and CRM platforms used by business clients to communicate with their own customers.
| Business name | Elbit Technologies |
|---|---|
| Address | Gakin Plaza Kinyanjui Road,Nairobi |
| Contact | info@elbittechnologies.co.ke |
| Website | elbittechnologies.co.ke |
In almost all cases Elbit acts as a data processor. Our client — the business that licenses our software — is the data controller. The client decides who is contacted, what is said, and why. We process that data only to deliver the service they have asked for, and only on their instructions.
We do not sell data. We do not use client data or their customers' data for advertising, profiling, or training machine learning models.
Where a client enables WhatsApp coexistence, our software imports the contact list from the connected handset and up to six months of that number's existing one-to-one chat history into the client's CRM. This is a one-time import authorised by the client at the point of connection.
After connection, messages sent from the handset are also copied to the client's CRM so that the client has a complete record of the conversation. The client remains the controller of all of this data. An imported conversation may include people who have not otherwise contacted the client through our software.
Clients are responsible for informing the individuals whose numbers are connected, and for having a lawful basis for importing the history held on those handsets. Coexistence can be disconnected at any time from the handset or by asking us.
We process personal data under the Data Protection Act, 2019 (Kenya). Where we act as a processor, the lawful basis is established by our client as controller — usually performance of a contract, legitimate interest, or consent obtained by the client. Where we act as a controller in respect of our own client relationships, our basis is performance of a contract and our legitimate interest in operating our business.
Data is stored in databases and file storage controlled by Elbit or by the client, depending on the deployment. We apply access controls, encrypted transport (HTTPS/TLS), role-based permissions and password hashing. Access by Elbit personnel is limited to what is required for support and maintenance.
We retain client and customer data for as long as the client's agreement with us is in force, and for up to 90 days after it ends, after which it is deleted or returned to the client. Diagnostic logs are kept for a shorter period. A client may ask us to delete data sooner.
No system is completely secure. We cannot guarantee absolute security, but we will notify the affected client without undue delay if we become aware of a breach affecting their data.
We do not share data with any other third party for their own purposes.
Message delivery necessarily involves Meta infrastructure that may be located outside Kenya. Where data is transferred outside Kenya, we rely on the safeguards required by the Data Protection Act, 2019.
Individuals have the right to be informed, to access their personal data, to have inaccurate data corrected, to request deletion, to object to processing, and to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
If you are a customer of one of our clients, please contact that business first, since they control your data. If you contact us directly, we will forward your request to the relevant client and support them in responding. Requests may be sent to info@elbittechnologies.co.ke and we will respond within the period required by law.
Our software is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18 other than incidentally, where such a person messages one of our clients.
We may update this policy. The version in force is the one published at this address, and the "last updated" date above will change when it does. Material changes will be communicated to clients directly.
Questions, requests and complaints: info@elbittechnologies.co.ke