Privacy Policy
Last updated: 8 October 2026 · App: BharosaChat (com.bharosachat.app) · Website: bharosachat.com
1. Information We Collect
- Account Information: Your email address and password when you register, or your mobile number if you sign in with a WhatsApp one-time code.
- WhatsApp Alert Number: The mobile number you choose for owner alerts (new customer waiting, plan ending, payment received), and whether you turned alerts on. It is used only to send you these alerts and for WhatsApp sign-in; it is never shared with your customers and never used for marketing messages.
- Business Information: Business name, type, city, address, phone number, services, prices, working hours, and FAQs. This is stored in Google Firebase.
- Customer Chat Data: Messages sent by customers through your chatbot link, and the AI replies. These are stored in Google Firebase so you can see them in your dashboard.
- Product Photos: A photo you choose from your phone's gallery when you use the AI Photo poster tool. The photo is sent to our AI provider (Anthropic) to write the poster caption. We do not keep a copy of the photo on our servers.
- Menu and Price List Files: A photo, PDF or pasted text of your menu or price list when you use "Import menu / price list". It is sent to our AI provider (Anthropic) once to read the items and prices. We do not keep a copy of the file on our servers; only the items you choose to save are stored.
- Usage Data: Number of queries, dashboard interactions, and app usage patterns.
- Usage Count for Abuse Prevention: A count of the AI messages and menu imports your account has used, kept so that the free allowance cannot be claimed twice. It holds an account ID and numbers only — no name, phone number, email or message text.
- IP Address: When a customer uses a chatbot link, or the app talks to our server, the IP address of the request is used to stop abuse (too many messages from one place). It is kept in a rate-limit record that is deleted automatically within about 3 days.
We do not collect your contacts list, precise GPS location, financial details, or any data from your device without permission.
2. How We Use Your Information
- Power your AI chatbot with your business details
- Show you analytics about customer queries
- Send you festival reminders and marketing tips
- Improve our AI responses over time
- Provide customer support when you contact us
3. AI and Third-Party Services
- Anthropic Claude AI: Processes customer queries and generates marketing content. Your business information, customer messages, any product photo you upload for the AI Photo poster, and any menu or price list you import are sent to Anthropic's servers to generate the response. See anthropic.com/privacy.
- Meta (WhatsApp Business Platform): Delivers the one-time sign-in code and the owner alerts to your WhatsApp number. Only your number and the short alert text are sent to Meta. See facebook.com/privacy/policy.
- Google Firebase: Handles sign-in (email/password and WhatsApp code) and stores your account data, business details, and customer chat history securely. See firebase.google.com/support/privacy.
- Razorpay: Processes subscription payments. We do not store your payment card details. See razorpay.com/privacy.
- Vercel: Hosts the server that passes requests from the app and the chatbot page to the AI provider. Short-lived technical logs are kept there. See vercel.com/legal/privacy-policy.
4. Data Storage and Security
- All data is stored on Google Firebase servers with industry-standard encryption, in transit (HTTPS) and at rest
- Your business data is stored in India (Firebase Mumbai region)
- We retain your data as long as your account is active
- When you delete your account, your login, business details and customer chat history are permanently deleted; backups that may contain them are overwritten within 30 days
- Payment records (Razorpay payment ID, amount, date, plan bought and the email address used to pay) are kept for accounting and tax compliance, as required by Indian law
- The usage count described in section 1 stays while the account exists and is removed in a periodic clean-up after the account is deleted
- Rate-limit records containing IP addresses are deleted automatically within about 3 days
5. Your Rights
- Access: View all data we hold about you
- Edit: Update your business information anytime in the app
- Delete: Delete your entire account and all data from Profile → Delete Account, or request it by email. Full steps at bharosachat.com/delete-account
- Export: Email bharosachat@gmail.com to request a copy of your data
6. Customer Chat Data
- We store customer messages to show you in your dashboard
- We do not sell or share customer data with third parties, other than the AI provider that generates the reply
- Customers can ask us to delete their chat history by emailing bharosachat@gmail.com
- AI responses are labeled "Powered by BharosaChat" so customers know they are talking to AI
7. Children's Privacy
BharosaChat is a business tool for adults (18 years and above). We do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us immediately.