1 · What we collect
When you create an account we store your name, your email address, and the name of your business. When you connect a WhatsApp number we store the credentials Meta issues for that connection, encrypted at rest, and the messages your customers send — so that your team can read and answer them.
If you bring your own AI key, we store the key encrypted at rest and use it only to generate replies inside your workspace. We do not use your conversations to train models.
2 · Where it is stored
Conversation data lives in our production database, isolated per workspace. Channel credentials and AI keys are encrypted with keys we rotate; backups are encrypted in transit and at rest.
We keep data for as long as your account exists. Delete a workspace and its conversations, knowledge and credentials are removed from production within 30 days.
3 · What Meta sees
WhatsApp messages travel through the WhatsApp Business Platform, which is operated by Meta. Meta processes message delivery according to its own terms; Bzzip does not send Meta anything beyond what delivering your messages requires.
Bzzip never posts on your behalf, never messages your customers except when your team or your AI agent replies, and never sells conversation data to anyone.
4 · Your rights
You can export your conversations and knowledge base at any time, and you can ask us to delete your account and everything in it. For accounts in Brazil we follow the LGPD; in the EU, the GDPR.
Requests go to privacy@bzzip.com and are answered by a person within a day. Deletion is completed within 30 days and confirmed by email.
5 · Contact
The data controller is Bzzip. For anything in this policy — questions, exports, deletion — write to privacy@bzzip.com.
If we change this policy we will say so on this page, with the date above updated, and email account owners about any material change before it takes effect.