Privacy Policy

Blue Briar Consulting OPC Pvt. Ltd. (“BlueAI Chat”, “we”) operates the BlueAI Chat platform. This policy explains what we collect, why we collect it, and what control you have over it. It is written to meet India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who this policy covers

Two different groups of people:

• Our customers — businesses that hold a BlueAI Chat account.
• Their customers — people who call, message or chat with an AI employee that one of our customers operates.

For the second group, our customer is the Data Fiduciary and decides why the data is processed. We act as a Data Processor on that customer's instructions. If you spoke to an AI employee and want your data removed, contact the business you were dealing with; we will support them in actioning it.

2. What we collect

Account data

Name, business name, email address, phone number, billing address and GST details.

Business content you upload

Knowledge bases, product and price lists, contact and lead lists, calendars, and message templates.

Conversation data

Call audio where recording is enabled, transcripts, WhatsApp, Instagram, Facebook and website chat messages, plus metadata such as timestamps, phone numbers and channel.

Derived data

Lead scores, intent labels, booking records and campaign outcomes generated by the platform.

Technical data

IP address, browser and device type, and session and error logs.

3. Why we process it

To route and answer calls and messages; to generate AI responses; to book appointments against your calendar; to score and route leads; to bill accurately; to provide support; to detect abuse and fraud; and to meet our legal obligations.

4. Where your data lives

All customer data is hosted on Microsoft Azure in the Central India region. Data is encrypted in transit using TLS 1.2 or above, and at rest using AES-256. Selected sensitive fields — including credentials for the channels you connect — carry an additional layer of application-level encryption. Accounts are isolated from one another by row-level security in the database.

5. Sub-processors

We use the providers below to deliver the service. Each receives only the data its function requires.

We do not sell personal data. We do not use your conversations to train foundation models.

6. Call recording

Call recording is off by default and is a paid add-on. When you switch it on, you are responsible for making whatever disclosure the law requires of you, and for having a lawful basis to record. The platform can announce that a call is being recorded at the start of the call.

7. Cookies

This website uses only cookies and local storage that are necessary to keep you signed in and to remember your preferences. We do not run third-party advertising or cross-site tracking cookies on this site.

8. How long we keep it

Account and billing records are kept for as long as the account is open and for eight years afterwards, as Indian tax law requires. Conversation data and recordings are kept for the period you select in your dashboard. When an account closes, business content and conversation data are deleted after a 30-day grace period during which you can export it.

9. Your rights under the DPDP Act

• Access — a summary of the personal data we hold about you and how it is processed.
• Correction and erasure — correct inaccurate data or ask for it to be deleted.
• Grievance redressal — raise a complaint with our Grievance Officer.
• Nomination — nominate someone to exercise your rights if you are unable to.
• Withdraw consent — as easily as you gave it.

10. Grievance Officer

If you are not satisfied with how we have handled your personal data, you may raise a grievance with our Grievance Officer:

Grievance Officer
Blue Briar Consulting OPC Pvt. Ltd.
privacy@blueaichat.com

We acknowledge grievances within 72 hours and aim to resolve them within 30 days, as the DPDP Act requires.

11. Changes

If we change this policy we will update the date at the top of this page and, for material changes, notify account holders by email.