This Privacy Policy explains how Blasty (the "Service", "we", "us") collects, uses, and protects information when you use our WhatsApp marketing and AI auto-reply platform. By using the Service, you agree to the practices described here.
1. Information we collect
- Account data — your name, email address, and password (stored hashed) when you register.
- Contact data — names, phone numbers, group labels, and any fields you import or add for the people you message.
- Message & chat data — the content of messages you send and receive through linked numbers, including conversations handled by AI agents.
- Agent configuration — instructions and knowledge sources you provide to train your AI agents.
- Device data — the WhatsApp session information needed to keep your linked number(s) connected.
- Billing data — credit purchases and transaction records. Card details are handled by our payment provider, not stored by us.
- Usage & technical data — log data such as IP address, browser, and actions taken, used to operate and secure the Service.
2. How we use information
- To provide the Service — sending messages, delivering campaigns, and running AI auto-replies on your behalf.
- To generate AI-drafted replies using the instructions, knowledge sources, and conversation context you supply.
- To process credit purchases and maintain billing records.
- To secure accounts, prevent abuse, and troubleshoot problems.
- To communicate with you about your account, including verification and service notices.
3. Contacts you upload
When you import contacts or send messages, you are responsible for ensuring you have a lawful basis and any necessary consent to process those individuals' data and to contact them. With respect to the contact data you upload, you act as the data controller and Blasty acts as a processor on your behalf.
4. Third-party services
The Service relies on third parties to function, and relevant data is shared with them only as needed:
- WhatsApp / Meta — to deliver and receive your messages. Your use is also subject to their terms and policies.
- AI providers — message context and your agent instructions are sent to an AI provider to generate auto-replies.
- Payment provider — to process credit purchases securely.
- Hosting & infrastructure — to store data and run the Service.
We do not sell your personal information.
5. Data retention
We retain your data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may delete contacts, messages, and other content from within the Service. When you close your account, we delete or anonymise your data within a reasonable period, except where retention is required by law.
6. Security
We use reasonable technical and organisational measures to protect your data, including encrypted passwords and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will respond in line with applicable law.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above, and material changes will be communicated through the Service. Continued use after changes take effect constitutes acceptance.