Privacy Policy

A. Business & Contact Information

Company name, business email, phone, address, and billing contacts.

B. User Account & Credentials

User names, work emails, and role assignments. Passwords are always hashed.

C. Operational Data (Customer Data)

Datasets, workflow definitions, reports, and configuration details.

D. Meta-sourced Data (via Meta API)

When you connect Facebook or Instagram business accounts, we may collect:

• Insights and analytics
• Post engagement metrics
• Ad campaign performance
• Messages and comments
• Basic business profile info

Bluewand is not designed to access personal data of your end consumers except where explicitly required for workflows.

E. Tokens & Credentials

Securely stored access tokens required for third-party integrations.

F. Usage & Technical Data

Service logs, device information (IP address, browser type), and security telemetry.

A. Service providers (processors)

We use vetted vendors to support operations (e.g., hosting, monitoring, email delivery, analytics, customer support, payment processing). These providers:

• Are restricted to using data only to provide services to Bluewand
• Are subject to confidentiality obligations and, where appropriate, data processing agreements (DPAs)

B. Payment processors

Payment transactions are handled by third-party processors. We share only the information needed to process payments and manage subscriptions.

C. Legal, compliance, and protection

We may disclose information if we believe disclosure is reasonably necessary to:

• Comply with law, regulation, legal process, or governmental request
• Enforce agreements and investigate potential violations
• Protect the rights, property, and safety of Bluewand, our Customers/Users, or the public

D. Business transfers

If Bluewand is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and security measures.

A. Active accounts

Customer Data (including Meta-sourced data, where connected) is generally retained for as long as the Customer account is active and the data is needed to provide the Services.

B. Termination of account

Upon termination or expiration of a Customer account, we will delete or de-identify Customer Data within 90 days, unless:

• The Customer requests deletion sooner (where feasible), or
• We are legally required to retain certain information longer (e.g., for tax, accounting, or legal compliance)

C. Deletion requests

We will process verified deletion requests within 30 days, subject to legal and operational limitations (e.g., backups, security logs, or legal holds). Where deletion from backups is not immediate, we will isolate and protect the data and delete it on the next backup lifecycle.

D. Logs and security records

Security logs and audit trails may be retained for a limited period to maintain platform security, prevent fraud, and investigate incidents, consistent with our legitimate interests and applicable law.

A. Rights you may request

Depending on your jurisdiction and relationship to the data, you may have the right to:

• Access: request confirmation and access to information we hold
• Correction: request correction of inaccurate or incomplete information
• Export/Portability: request an export of your data in a standard format
• Deletion: request deletion of information (see retention timelines above)
• Restriction/Objection: object to or request restriction of certain processing
• Opt-out of non-essential communications (e.g., product updates/marketing)

B. Rights relating to Meta-sourced data

• View and export Meta-sourced data presented in the Services (where available)
• Request deletion of Meta-sourced data stored in the Services
• Disconnect Meta integrations (see Section 5E) to stop further collection

C. How to submit a request

Email us at privacy@bluewandltd.com (or legal@bluewandltd.com) with:

• Your organization name and workspace identifier (if applicable)
• The type of request (access/export/correction/deletion/objection)
• The relevant User account email(s)

We may need to verify identity/authority before fulfilling requests. If Bluewand acts as processor for the relevant data, we may direct the request to the Customer (controller) or fulfill it as authorized by the Customer.