Privacy Policy

1. Overview

This Privacy Policy explains how [Your Registered Legal / Business Name] ("Bitsa AI", "we", "us") handles personal data in connection with the Bitsa AI platform. It applies to two groups: (a) our Clients, who register and pay for the Service, and (b) end users, who interact with an AI chat agent that a Client has deployed. For end-user personal data captured through a Client's agent, the Client is the data controller and we act as a data processor on the Client's behalf.

2. Information We Collect

Account & billing data (Clients): name, email address, phone number, business name, login credentials, and subscription and payment records. Card and banking details are handled directly by our payment processor, Razorpay, and are not stored on our servers.

Client Content: documents, PDFs, knowledge sources, branding, prompts and agent configuration that you upload or set up, which are processed to train your AI agent.

Lead & conversation data (end users): information end users provide to your agent, such as name, email, phone, business and message text, along with chat history generated during conversations.

Technical & usage data: IP address, device and browser information, the domain on which a widget is embedded, timestamps, feature usage, and token/credit consumption used to operate, secure and meter the Service.

3. How We Use Information

• To provide, operate and maintain the platform and your AI agent.
• To process documents and generate AI responses (including via third-party AI providers such as Google Gemini and OpenAI).
• To capture and deliver leads and proposals to Clients by email and, where enabled, WhatsApp.
• To process subscriptions, tokens and credits and to handle payments via Razorpay.
• To secure the platform, prevent fraud and abuse, and enforce usage limits and domain authorisation.
• To provide customer support and to send service-related communications.
• To comply with legal obligations.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on: performance of our contract with you; your consent (which you may withdraw); our legitimate interests in operating and securing the Service; and compliance with legal obligations.

5. How We Share Information

We do not sell personal data. We share information only as needed to run the Service:

• AI providers (e.g. Google Gemini, OpenAI) to generate responses from your content and messages.
• Payment processor (Razorpay) to process payments and subscriptions securely.
• Messaging providers to deliver email and WhatsApp notifications.
• Cloud hosting and database providers that store platform data.
• Legal and regulatory authorities where required by law, or to protect our rights and users.
• A successor entity in connection with a merger, acquisition or asset sale, subject to this Policy.

For lead and conversation data captured through a Client's agent, we share that data with the relevant Client, who is responsible for its subsequent use under their own privacy practices.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements. Client Content and lead data are retained according to your account settings and applicable retention periods, after which they are deleted or anonymised.

7. Data Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and tenant isolation between Clients. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. End users whose data was captured through a Client's agent should contact the relevant Client (the controller); we will support Clients in responding to such requests. To exercise your rights with us, contact [email protected].

9. Cookies & Tracking

We and our providers use cookies and similar technologies to keep you signed in, remember preferences, secure the platform and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

10. International Transfers

Our providers may process data in locations outside your country. Where such transfers occur, we take steps to ensure appropriate safeguards consistent with applicable law.

11. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when we update the "Last updated" date above. Your continued use of the Service constitutes acceptance of the revised Policy.

13. Contact Us