Privacy Policy

Last updated: January 22, 2025

1. Overview

Bhaujai ("we," "our," or "us") is committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy explains our practices regarding the collection, use, storage, and protection of your data when you use our Instagram automation and business management platform.

By using Bhaujai, you acknowledge that you have read, understood, and agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, password, and other sign-up details
  • Connected Social Accounts: Instagram username, profile ID, access tokens, and associated metadata
  • User-Generated Content: Comments, messages, automation workflows, scheduled posts, leads, and other CRM-related data
  • Customer Support: Details you share with our team during inquiries or feedback

2.2 Information Collected Automatically

  • Usage Data: Interactions with our platform (e.g., automation triggers, clicks, feature use)
  • Device & Technical Info: IP address, browser type, device model, OS, and login timestamps
  • Analytics: Engagement rates, automation success, conversion metrics
  • Cookies & Tokens: Session preferences, login status, and authentication tokens

2.3 Data from Meta Platforms (Instagram)

When you connect your Instagram business account, we collect:

  • Profile Information: Business name, username, profile picture, bio, and contact details
  • Content Data: Posts, stories, reels, captions, hashtags, and media files
  • Engagement Data: Likes, comments, shares, saves, and follower interactions
  • Message Data: Direct messages, conversation threads, and automated responses
  • Analytics Data: Reach, impressions, engagement rates, audience demographics, and performance metrics
  • Account Insights: Follower growth, best posting times, and content performance data

This data is collected through Meta's official Instagram Basic Display API and Instagram Graph API in compliance with Meta's Platform Terms.

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 Service Delivery

Instagram Business Features:

  • Automated posting and content scheduling to your Instagram business account
  • Managing and responding to Instagram comments and direct messages
  • Analyzing Instagram engagement metrics and audience insights
  • Creating and managing Instagram marketing campaigns
  • Monitoring Instagram account performance and growth

Business Management Tools:

  • Customer relationship management (CRM) functionality
  • Lead generation and management from Instagram interactions
  • Automated customer support and response systems
  • Business analytics and reporting dashboards

3.2 Account Management

  • Creating and maintaining user accounts
  • Authenticating users and ensuring platform security
  • Managing subscriptions and billing processes
  • Providing customer support and technical assistance

3.3 Platform Improvement

  • Analyzing usage patterns to enhance user experience
  • Developing new features and functionality
  • Conducting research and analytics for product development
  • Monitoring system performance and reliability

3.4 Communications

  • Sending service-related notifications and updates
  • Providing onboarding assistance and educational content
  • Sharing important policy or feature changes
  • Marketing communications (with your explicit consent)

3.5 Legal and Security

  • Complying with applicable laws and regulations
  • Protecting against fraud, abuse, and security threats
  • Enforcing our Terms of Service and platform policies

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data in the following circumstances:

4.1 Service Providers

We work with trusted third-party providers who assist in delivering our services:

Meta Platforms:

  • We share necessary data with Meta to facilitate Instagram API integration
  • This includes authentication tokens, account identifiers, and API requests
  • All data sharing complies with Meta's Platform Terms and Data Policy
  • We do not share your Instagram data with Meta beyond what's required for API functionality

Other Service Providers:

  • Firebase: Authentication, database, and cloud storage services
  • Vercel: Platform hosting and deployment infrastructure
  • Payment Processors: Secure billing and transaction processing (data is not stored by us)
  • Analytics Services: Performance monitoring and user experience analysis (anonymized data only)

4.2 Legal Requirements

We may disclose information when required by law, including:

  • Responding to valid legal processes (subpoenas, court orders)
  • Investigating potential violations of our Terms of Service
  • Protecting the rights, property, or safety of Bhaujai, our users, or the public
  • Complying with regulatory requirements and government requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.4 Consent-Based Sharing

We may share information with your explicit consent for specific purposes you authorize.

5. Data Security and Protection

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

  • End-to-end encryption for data transmission
  • Secure encryption for data storage
  • Multi-factor authentication options
  • Regular security audits and vulnerability assessments
  • Secure API integrations with rate limiting and monitoring

5.2 Administrative Controls

  • Role-based access controls for our team
  • Regular employee security training
  • Incident response procedures
  • Compliance with industry security standards

5.3 Physical Security

  • Secure data centers with restricted access
  • Environmental controls and monitoring
  • Backup and disaster recovery systems

Important Note: While we implement robust security measures, no system is completely immune to security risks. We recommend using strong, unique passwords and enabling available security features.

6. Data Retention and Deletion

6.1 Retention Periods

  • Active Accounts: Data is retained while your account remains active
  • Inactive Accounts: Data may be retained for up to 12 months after account deactivation
  • Legal Requirements: Some data may be retained longer to comply with legal obligations
  • Analytics Data: Aggregated, anonymized data may be retained indefinitely for research purposes

6.2 Account Deletion

When you delete your account:

  • Personal data will be permanently deleted within 30 days
  • Some information may be retained in anonymized form for analytics
  • Legal or regulatory requirements may necessitate longer retention periods
  • Backup systems may retain data for up to 90 days for recovery purposes

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Update or correct inaccurate personal information
  • Deletion: Request deletion of your personal information
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction: Limit how we process your information
  • Objection: Object to processing based on legitimate interests
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@bhaujai.cc.

8. Third-Party Services and Integrations

8.1 Meta Platform Integration

Our service integrates with Meta's platforms (Instagram and WhatsApp Business) to provide automation and business management features.

8.2 Other Connected Platforms

We also integrate with:

  • WhatsApp Business API for messaging automation
  • Email service providers for notifications
  • Payment processors for billing
  • Analytics tools for performance tracking
  • Cloud storage services for data backup

9. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States and India. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.

10. Children's Privacy

BhaujAI is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences
  • Analyze platform usage and performance
  • Provide personalized experiences

You can control cookies through your browser settings, though this may affect platform functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of BhaujAI after changes become effective constitutes acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy:

  • Email: support@bhaujai.cc
  • Subject: Privacy Policy Inquiry
  • Business Hours: Monday-Friday, 9 AM - 6 PM IST