Last updated 27 October 2026. CJ (formerly Khalas) is an AI agent that runs errands for people in the UAE over iMessage and Telegram. It is operated by Abhinav Mehta, Dubai, and is in live beta.
Your phone number, the messages you send the agent, facts you ask it to remember (such as your car plate), a log of every step it takes for you, pictures of the pages it works on for you, records of payments (purchases you approved), and, if you connect Perflo, the link Perflo gives us to pay from your account (an access token we keep encrypted). If you joined our waitlist, we keep the number you entered. If you use Telegram, we keep your Telegram chat ID to deliver replies, and your Telegram first name, to greet you. If Telegram is your account with CJ, we also keep your @username. In that case, the page where you confirm your Perflo link shows it, or your first name if you have no username. Messages you start with FEEDBACK go to our team. We store them with an encrypted handle, and the team reads them in its Telegram group with your handle masked. Please don't put card numbers or passwords in feedback. Feedback you send to the team stays in the team's chat.
Only to run the errands you ask for, show you what the agent did, keep a record of payments, and fix problems with CJ. We do not sell your data or use it for advertising.
When you first text CJ, or tap Text CJ on our website, we tell you about this policy. By continuing to use CJ, you agree to it. You can stop any time: text DELETE MY DATA and we erase your profile and messages.
AI model providers based in the United States process each message, and may process it in other countries. When CJ works on a website for you, an AI model provider sees the page text and screenshots of the pages it opens. These can show your account details, such as your name, delivery address and basket.
A remote browser service in the United States opens websites for CJ. It sees the pages it opens, which can show your account, your basket and your delivery address. Your saved sign-in for those sites is kept until you delete your data. The browser service holds it for some sites, and we hold it encrypted for others. Websites in the UAE are reached through a proxy network, so they see a UAE address. When you sign in to a website in CJ's sign-in card, what you type passes through CJ to the browser service, and CJ doesn't save it. If you type your email before the sign-in box appears, CJ holds it in memory until the site asks for it, then sends it on. If the site asks for something else, or the sign-in ends first, CJ deletes it.
An app-connection service in the United States holds your login when you connect Gmail, Calendar, Notion or Outlook. It also carries the requests CJ makes for you, so your emails, events and pages pass through it.
We use Perflo for payments: your Perflo balance, your Perflo card, and paid lookups such as web search, flight search and price checks. Perflo and the company behind each service get the details that service needs, such as your search words. For every paid call, Perflo also gets a coded ID for you, not your number, and your spending limits. The results of a lookup show up in our chat and are kept like the rest of the chat.
When you ask CJ to check a price, CJ opens that website for you and sends it what the errand needs. Each website has its own privacy policy. When you check a parking price or pay for parking, the agent uses the official Parkin website on your behalf.
A hosting provider in Singapore runs our servers and stores our data.
A message-delivery service carries your iMessages. Telegram delivers your messages if you use Telegram, and carries our team's alerts and the feedback you send.
Encrypted backups are stored with a storage provider in the United States.
An error-reporting service gets error reports. They hold no message text, and phone numbers, emails and keys are removed first.
Before CJ pays on a website, we check that website's address with two public DNS services and with the registry for the website's domain. They see the website's address and our server's address, never your details.
Your data leaves the UAE for these services. Our first message to you and our website both link to this policy. A current list of our providers is available on request. Email privacy@xfourotwo.io.
Pictures of the pages CJ works on are deleted from our service after 30 days. They can show your name and address. Activity history: 30 days. Your profile and conversation: until you delete them, or 180 days after your last message. DELETE MY DATA deletes your profile and conversation from CJ at once. If you delete your data, encrypted backups made before that may still hold a copy.
We keep payment and consent records for 5 years. The car plate and parking zone on a payment record are removed after 1 year, or at once when you text DELETE MY DATA. We keep any spending limit you lowered, and any card pause, after you delete your data. The payment and consent records we keep after DELETE MY DATA still show the number or account you texted us from.
Your Perflo link: until you text DELETE MY DATA, which deletes it at once. If you disconnect CJ in Perflo, we delete our copy of your Perflo login as soon as Perflo tells us. If that notice never reaches us, we delete it when you text DELETE MY DATA. We keep your Perflo account ID until you delete your data. After a deletion we keep a short erase marker for 30 days: a coded form of your number and the time, used only to stop old payment links from reopening. It is then deleted. Waitlist numbers: 12 months. Feedback copies in our database: 365 days, or until you delete your data. Telegram identifiers are deleted when you text DELETE MY DATA.
The agent never holds your money or your card. When payments are open to you, purchases use accounts you own, such as your Parkin wallet or Perflo balance. Each one needs your YES to the amount shown: the exact price, or the most it can cost. CJ pays for every search and lookup (web search, a flight search, a price check); none of them uses your Perflo balance. Deleting your data deletes CJ's copy of your Perflo link, so CJ won't use it again. To remove CJ's access in Perflo as well, disconnect CJ in your Perflo account. Any Perflo card CJ set up for you stays there until you close it. When you pay from your Perflo account, your Perflo limits apply, and so does any lower limit you set with CJ. The AI cannot change either. If you tap Install on iPhone, the eSIM code goes to your phone maker's eSIM setup so your phone can install it. When you buy a gift card or an eSIM, CJ sends you a one-time secure link to see its code. CJ doesn't keep the code: the link fetches it from Perflo when you open it. If you lose it, ask CJ for a new link. If you delete your data while a code is still on its way, our team sends it to you through the same kind of one-time link. In that case we hold the code encrypted for at most 24 hours.
You can ask what we hold, correct it, stop processing, or delete it. Text DELETE MY DATA to the agent to erase your profile and conversation at once. For anything else, email privacy@xfourotwo.io and we will reply within 30 days.
Data is encrypted in transit, backups are encrypted, access is password-protected and limited to the operator, and every payment step is logged. If a breach ever affects your data, we will tell you and the UAE Data Office.
CJ is an AI agent, not a person. It can make mistakes. It checks official sources before it tells you a price, and it asks for your YES before every purchase.