Notice under the Digital Personal Data Protection Act, 2023
Effective 16 September 2026
This is the notice required by Section 5 of the Digital Personal Data Protection Act, 2023. It is deliberately short. The full detail is in our Privacy Policy.
Who is asking
Bukka Labs, a sole proprietorship of Shivaram Reddy Bukka, 9-10, Bukka Labs, Ground Floor, Balaji Nagar, Kodangal, Vikarabad, Telangana 509338 — operator of Bukka.
Which role we are in
If you are a business using Bukka: we are the Data Fiduciary for your account information.
If you are a customer who messaged a business that uses Bukka: that business is the Data Fiduciary. We are its Data Processor — we handle your messages on its instructions, not our own. Requests about your data are fastest with that business; we will help them action it, and you can also reach us below.
What we process, and why
| Personal data | Purpose |
|---|---|
| Name, phone number, email of a business’s owner and staff | Creating and securing the account, support, billing |
| WhatsApp number and profile name of a customer | Identifying the conversation and replying to it |
| Message content, appointment details, and — where voice is enabled — call recordings and transcripts | Answering the customer, booking appointments, sending reminders, handing over to a human |
| Billing details | Payment and statutory invoicing |
| Technical logs | Security and reliability |
We do not use conversation content to train AI models, and we do not sell personal data.
Consent, and taking it back
Where we rely on your consent, you may withdraw it at any time — it is as easy to withdraw as it was to give. Email ram@bukka.in, or reply STOP in a WhatsApp conversation to end marketing messages from that business immediately.
Withdrawing consent does not undo processing that already happened lawfully. If consent is what allows us to provide the service, withdrawing it ends the service.
Your rights as a Data Principal
- Access — a summary of the personal data we process about you and who we shared it with.
- Correction and completion — have inaccurate or incomplete data fixed.
- Erasure — have your data deleted, unless law requires us to keep it.
- Nomination — nominate someone to exercise these rights if you die or become incapacitated.
- Grievance redressal — the route below, before approaching the Board.
How long we keep it
Conversation data: 12 months by default, and shorter where the business has configured it that way. Platform event logs: 30 days. Billing records: as long as tax law requires. After a business closes its account, its data is deleted and backups age out within 30 days.
Your duties
The Act also asks Data Principals not to impersonate anyone, not to suppress material information, and not to file false or frivolous complaints. Doing so can attract a penalty.
Grievance Officer
Shivaram Reddy Bukka, Grievance Officer, Bukka
9-10, Bukka Labs, Ground Floor, Balaji Nagar, Kodangal, Vikarabad, Telangana 509338
ram@bukka.in
Acknowledged within 72 hours, resolved within 30 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.