Privacy Policy

[Placeholder document.] This template covers the data-handling disclosures specific to running a business on the WhatsApp Business Platform (what Meta sees, what we see, what your customers should be told). It is not legal advice — have qualified counsel review it against GDPR, India's DPDP Act, or whichever laws apply to you before publishing it for real.

This Privacy Policy describes how Bigool Digital ("we", "us"), the operator of Bigool Connect, collects, uses, and protects information when you (a business) use our WhatsApp customer communication and automation platform, and when your customers exchange WhatsApp messages with you through it.

1. Information We Collect

• Your account information: name, email, business details, and team member information you provide when you sign up.
• Your customers' contact data: name, phone number, and any custom fields you add or import (e.g. via CSV), plus tags, notes, and opt-in/opt-out status.
• Message content: the text and media of WhatsApp conversations between you and your customers, stored so your team can see conversation history.
• Usage and log data: how you use the product, for security, support, and improving the service.

2. How Your Data Flows Through WhatsApp's Platform

Bigool Connect sends and receives messages exclusively through Meta's official WhatsApp Business Platform (Cloud API) — never through WhatsApp Web automation or any unofficial channel. Practically, this means:

• Every message you send or receive is transmitted through Meta's infrastructure, in addition to being stored in our database so you can see conversation history in your inbox.
• Meta processes this data under its own WhatsApp Business Data Processing Terms and Privacy Policy, which apply independently of this one. We do not control how long Meta retains data on its own systems.
• When you connect a WhatsApp Business Account (including via Embedded Signup), Meta shares certain account identifiers with us — your WhatsApp Business Account ID, phone number ID, and a connection token — so we can send messages on your behalf. We never see your Facebook password, and we encrypt the connection token at rest.

3. How We Use Information

To operate the platform's features on your behalf: the shared inbox, contact management, campaigns, automations, analytics, and account administration. We do not use your customers' message content to train any AI model or for advertising.

Our public website (not the signed-in dashboard) uses Google Analytics to understand which pages are visited. It collects standard browsing information such as pages viewed, approximate location and device type, using cookies, and Google processes it under its own privacy policy.

4. Data Sharing

We share data only with:

• Meta, as required to deliver WhatsApp messages (see Section 2);
• infrastructure providers (database hosting, background job processing) strictly to operate the service; and
• authorities, where required by law.

We do not sell customer data, and we do not share your contacts' data with other businesses on the platform — every organization's data is strictly isolated from every other organization's.

5. Data Security

Connection tokens and other credentials are encrypted at rest. Access to your organization's data is restricted to your invited team members by role. We never log access tokens, API secrets, or passwords in plain text.

6. Opt-In, Opt-Out and Consent

Businesses using Bigool Connect are responsible for obtaining valid consent from their own customers before messaging them — see our Terms of Service and Acceptable Use Policy for the specifics. A contact who replies "STOP" is automatically marked unsubscribed platform-wide and excluded from future marketing messages.

7. Data Retention

We retain your data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we're required to retain records for legal or audit purposes.

8. Your Rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal data. Contacts can opt out of marketing messages at any time; businesses are responsible for honoring opt-outs, which Bigool Connect also enforces at the platform level.

9. Children's Privacy

Bigool Connect is intended for business use and is not directed at children. WhatsApp itself requires users to meet WhatsApp's own minimum age requirement in their country.

10. International Data Transfers

Your data may be processed in countries other than your own, including by Meta as described in Section 2. We take reasonable steps to ensure data is protected consistently with this policy wherever it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "last updated" date above when we do.

12. Contact

Questions about this policy can be directed to Bigool Digital through the contact details on our website.