Privacy Policy
Last updated: 30 August 2026
This policy explains what Bluck ("we", "us") collects when you use bluck.in and our WhatsApp Business API platform, why we collect it, and the choices you have. It applies to the account holders who use Bluck and, separately, to the end-customer data our users process through the platform.
1. Who we are
Bluck is a software platform that lets businesses send and receive messages on the WhatsApp Business Platform. We are an independent provider and are not endorsed by or affiliated with Meta Platforms, Inc.
For data you upload about your own customers, you are the data controller and we act as your data processor. For your own account information, we are the controller.
2. Information we collect
Account data. Your name, email address, hashed password, business name, role, and (if you enable two-factor authentication) your authenticator secret or phone number.
WhatsApp connection data. When you connect a number we store the WhatsApp Business Account ID, phone number ID, display number, and the access token Meta issues, so we can send and receive messages on your behalf.
Contact and message data. Contacts you import or that message you (phone number, name, tags, custom attributes) and the content, timestamps and delivery status of messages sent or received through your account.
Billing data. Wallet balance and a per-transaction ledger. Card and bank details are handled by our payment processor and are never stored on our servers.
Technical data. Log data such as IP address, browser type and timestamps, used for security and debugging.
3. How we use information
- To operate the platform - delivering your messages and showing you replies.
- To authenticate you and protect accounts against unauthorised access.
- To calculate message costs and maintain your wallet ledger.
- To provide support and respond to your requests.
- To detect, investigate and prevent abuse, fraud or violations of our terms.
- To comply with legal obligations.
We do not sell your personal data, and we do not use your customers' message content for advertising.
4. Sharing your information
We share data only with parties needed to run the service:
- Meta Platforms - message content and recipient numbers are transmitted to WhatsApp in order to deliver them. Meta's own terms and privacy policy apply to that processing.
- Infrastructure and database providers - who host the application and store your data under contract.
- Payment processors - who handle wallet top-ups and receive only what is needed to take payment.
- Authorities - where we are legally required to disclose information.
5. Your customers' data
You are responsible for having a lawful basis to message the people you contact through Bluck, including obtaining opt-in consent where required, honouring opt-out requests promptly, and complying with WhatsApp's Business Messaging Policy. We process that data on your instructions and delete it when you delete it or close your account.
6. Data retention
We keep account and message data for as long as your account is active. After you close your account we delete or anonymise personal data within a reasonable period, except where we must retain records to meet legal, tax or accounting obligations.
7. Security
Data is transmitted over encrypted connections, passwords are stored using one-way hashing, and access to production systems is restricted. Two-factor authentication is available on every account and we recommend enabling it. No system can be guaranteed completely secure, so please use a strong, unique password.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Most of this can be done from within the app; for anything else, contact us using the details below and we will respond within the period the applicable law requires.
9. International transfers
Your data may be processed in countries other than your own, including where our infrastructure providers and Meta operate. Where required, we rely on appropriate safeguards for those transfers.
10. Cookies
We use strictly necessary cookies to keep you signed in and to remember which project you are working in. We do not use advertising cookies.
11. Children
Bluck is a business tool and is not intended for anyone under 18.
12. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced in the app or by email, and the "last updated" date above will change.
13. Contact us
Questions about this policy or your data: privacy@bluck.in