Privacy Policy
Effective 16 September 2026
Bukka Labs, a sole proprietorship of Shivaram Reddy Bukka, at 9-10, Bukka Labs, Ground Floor, Balaji Nagar, Kodangal, Vikarabad, Telangana 509338, operates Bukka — a WhatsApp and voice AI assistant platform for businesses (“Bukka”, “we”, “us”). This policy explains what we collect, why, how long we keep it, and what you can ask us to do about it.
1. Two kinds of data, two different roles
This distinction matters, so it comes first.
Business account data — we are the Data Fiduciary. When a business signs up, we collect and decide how to use its account information: the business name, the owner’s and staff members’ names, email addresses and phone numbers, billing details, and how the business uses the dashboard.
Customer conversation data — we are a Data Processor. When a customer messages a business that uses Bukka, we process that conversation on behalf of that business. The business decides why the data is collected and what happens to it; we act on its instructions. If you are a customer who messaged a business and you want your data removed, the fastest route is to ask that business — they can action it directly, and we support them in doing so. You may also contact us (§8) and we will route it.
2. What we collect
From businesses using Bukka: name, contact details and role of the owner and invited staff; the business’s own details (name, address, services, prices, working hours, FAQs) as entered during onboarding; billing information; WhatsApp Business Account identifiers and access tokens issued by Meta; dashboard usage and technical logs (IP address, browser, timestamps).
From customers who message a business using Bukka: the WhatsApp phone number, WhatsApp profile name, the content of messages sent to or from the business, any media sent, appointment and booking details, and — where the business uses our voice feature — call recordings and transcripts.
We do not buy contact lists, and we do not use conversation content to train AI models.
3. WhatsApp Business Platform
Each business connects its own WhatsApp Business Account through Meta’s Embedded Signup; the business — not Bukka — owns that account and is billed by Meta directly for messaging.
Messages sent through WhatsApp are also processed by Meta under its own terms and privacy policy. Businesses using Bukka must comply with the WhatsApp Business Messaging Policy, including obtaining opt-in before sending marketing messages.
4. Why we process it
| Purpose | Data used |
|---|---|
| Delivering the service — replying to customers, booking appointments, sending reminders | Conversation data, business facts |
| Account management, support and security | Account data, technical logs |
| Billing and statutory invoicing | Account and billing data |
| Improving reliability and performance | Aggregated, non-identifying usage data |
| Meeting legal and tax obligations | Account, billing and invoice data |
We rely on the business’s consent and on the necessity of processing to provide a service it has asked for.
5. Sub-processors
We use these providers. Each is bound to confidentiality and security obligations, and each processes only what its function requires.
| Sub-processor | What it does | Where it processes |
|---|---|---|
| Meta Platforms | WhatsApp Business Platform message delivery | Global |
| Anthropic | AI model that generates replies | United States |
| Supabase | Authentication for dashboard logins | Global |
| Cloudflare | DNS, network protection, this website, and media and backup storage (R2) | Global |
| Oracle Cloud / Hetzner | Application, dashboard and database hosting | India / EU |
| Razorpay | Subscription payments and invoicing | India |
| Resend | Transactional email | Global |
| Google (Workspace) | Business email — the support and grievance mailboxes | Global |
| Exotel (voice features) | Telephone numbers and call handling | India |
| Sarvam AI, Deepgram, ElevenLabs (voice features) | Speech recognition and synthesis | India / United States |
Some of these process data outside India. Where that happens we rely on contractual protections with the provider. We will update this list before adding any new sub-processor.
6. How long we keep it
Conversation data is retained for 12 months by default. A business can configure a shorter period for its own account. Raw platform event logs are kept for 30 days. Billing records are kept as long as tax law requires. When a business closes its account, its data — including stored media — is deleted, and backups containing it age out within 30 days.
7. How we protect it
Access tokens and security PINs are encrypted. Each business’s data is isolated at the database level, not only in the application, so one business cannot access another’s records. Administrative access to customer data requires multi-factor authentication and is logged. Message content is never written to our application logs. Backups are encrypted and restore procedures are tested.
No system is perfectly secure, but these are the measures we consider minimum for handling health and financial enquiries.
8. Your rights, and how to use them
You may ask us to give you a copy of your data, correct it, delete it, or tell you who we shared it with. You may withdraw consent at any time; where consent is what allows us to provide the service, withdrawing it ends the service.
Write to our Grievance Officer:
Shivaram Reddy Bukka, Grievance Officer, Bukka
9-10, Bukka Labs, Ground Floor, Balaji Nagar, Kodangal, Vikarabad, Telangana 509338
ram@bukka.in
We acknowledge within 72 hours and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
To stop receiving marketing messages from a business using Bukka, reply STOP to that business’s WhatsApp conversation. This takes effect immediately.
9. Children
Bukka is for businesses. We do not knowingly collect data from anyone under 18 through the dashboard. Where a business’s own customers include minors, that business is responsible for the lawful basis on which it collects their information.
10. Changes
We will post changes here and update the date above. Material changes are emailed to account owners at least 14 days before they take effect.
Questions: support@bukka.in