Need custom software or website that drives revenue?Boldally Studio

Privacy Policy

Last Updated: April 6, 2026

1. Introduction

Boldally Solutions Private Limited (“Boldally”, “we”, “us”, “our”) operates a suite of business tools including Boldally Chat. This Privacy Policy explains how we collect, use, store, and protect your information when you use any Boldally product — including boldally.com and all its subdomains (such as chat.boldally.com).

By using our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: When you sign up, we collect your name, email address, phone number, and business details (name, industry, website).

Team Member Information: When you invite team members, we collect their name and email to facilitate invitations.

Payment Information: Payments are processed by third-party payment processors (currently Razorpay). We do not store credit card, debit card, or bank account details. Our payment partners handle payment data per PCI-DSS standards.

Product-Specific Data (Boldally Chat): When you connect your WhatsApp number through Meta’s Embedded Signup, we receive and store your WABA ID, phone number ID, Meta Business ID, and an encrypted access token.

2.2 Information Generated Through Use

Customer Contact Data: Contacts you import or auto-created from inbound messages — phone numbers, names, emails, tags, custom fields.

Message Data: Messages sent and received, including text, media files, template data, and delivery status.

Conversation Data: Timestamps, assignment history, internal notes, resolution status.

Campaign Data: Audience selection, templates used, scheduling, per-recipient tracking.

Usage Data: Pages visited, features used, clicks, session duration, browser/device info.

2.3 Information Collected Automatically

Log Data: IP addresses, browser type, OS, referring URLs, timestamps.

Analytics: We use self-hosted Plausible Analytics on boldally.com (no cookies, no personal data). We may also use third-party analytics and advertising tools that collect data such as pages visited, actions taken, and browser/device information. Within products, we may collect usage analytics.

3. How We Use Your Information

We use collected information to:

  • Provide and operate Boldally products
  • Process messages through third-party APIs (e.g., Meta’s Cloud API for Boldally Chat)
  • Manage subscriptions and billing
  • Send transactional emails (verification, password reset, invoices)
  • Provide customer support
  • Improve features based on usage patterns
  • Detect and prevent fraud
  • Analyze website traffic and measure advertising effectiveness
  • Comply with legal obligations

We do not sell or rent personal information. Data shared with third-party analytics and advertising providers (as described in Sections 4 and 10) is governed by those providers’ own privacy policies.

4. How We Share Your Information

With Meta (for Boldally Chat): Message content, phone numbers, and template data transmitted to Meta’s WhatsApp Cloud API.

With Payment Processors: Business name and email for payment processing (currently Razorpay).

With Service Providers: Third parties for email delivery, error monitoring, and hosting — processing data solely on our behalf.

For Legal Compliance: If required by law, regulation, or government request.

With Analytics and Advertising Providers: Data such as pages visited, actions taken, and browser/device information may be shared with third-party analytics and advertising tools (such as Meta Pixel, Google Analytics, or similar services) for traffic analysis and ad measurement.

Business Transfer: In a merger, acquisition, or asset sale, with prior notice.

5. Data Processor and Controller Roles

When Boldally provides its platform to business customers, it acts as a data processor for end-user data (WhatsApp contacts, messages, conversation data) on behalf of the business customer, who is the data controller.

For account registration, billing, and platform usage data, Boldally acts as a data controller.

Business customers are responsible for ensuring they have appropriate legal basis to collect and process their end-users’ data through the Boldally platform.

6. Sensitive Personal Data or Information

Boldally does not directly collect Sensitive Personal Data or Information (“SPDI”) as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

  • Passwords are managed through secure authentication systems and are not stored in plain text.
  • Financial and payment data is handled entirely by PCI-DSS compliant payment processors.
  • If any SPDI is incidentally transmitted through WhatsApp messages by end-users, Boldally processes it solely as a data processor on behalf of the business customer.

7. Data Storage and Security

  • Location: Primary servers in India. Where data is transferred to service providers outside India, we ensure they maintain the same level of data protection as required under applicable Indian law.
  • Encryption: TLS in transit. Sensitive fields (API tokens) encrypted at rest.
  • Access Control: Restricted to authorized personnel. Multi-tenant isolation per business.
  • Backups: Regular encrypted backups.
  • Compliance: We implement reasonable security practices and procedures in line with IS/ISO/IEC 27001 standards as required under Section 43A of the Information Technology Act, 2000.
  • Breach Notification: We will notify affected users as soon as reasonably practicable via email if personal data is compromised.

8. Data Retention

  • Active Accounts: Data retained while account is active.
  • After Cancellation: Data may be retained in read-only mode for up to 30 days, after which it is scheduled for deletion.
  • Full Deletion: Removed from primary systems within a reasonable period, and from backups in due course. Deletion may be delayed where required by law or legitimate business needs.

9. Your Rights

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion (subject to legal retention).
  • Data Portability: Export contacts and reports via built-in tools.
  • Withdraw Consent: Contact us atlegal@boldally.com. May affect ability to use the Platform.
  • Grievance Redressal: Contact our Grievance Officer (details below).

We will acknowledge rights requests within 24 hours and endeavour to resolve them within 15 days.

10. Cookies and Tracking

boldally.com: We use self-hosted Plausible Analytics (no cookies, no personal data). We may also use third-party analytics and advertising tools (such as Meta Pixel, Google Analytics, or similar services) that may set cookies and collect data such as pages visited, actions taken, and browser/device information. This data may be shared with the respective providers for analytics and ad measurement.

Product subdomains: Essential cookies for authentication, sessions, and security. We may also use cookies or similar technologies to understand how you use our products and improve your experience. No cross-site tracking cookies.

11. Third-Party Links

Our sites may link to third-party services. We are not responsible for their privacy practices.

12. Children’s Privacy

Our products are not for individuals under 18. We do not knowingly collect data from children.

13. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Panipat, Haryana, India.

14. Changes to This Policy

We will notify you of material changes via email or Platform notice with reasonable advance notice. Urgent changes required for security or legal compliance may take effect immediately.

15. Grievance Officer

Per the Information Technology Act, 2000:

  • Name: Gagandeep Singh
  • Designation: Founder and CEO
  • Email: legal@boldally.com
  • Address: C/o Sukvinder Singh, Preet Bihar, Panipat, Haryana 132103, India
  • CIN: U72200HR2023PTC108918

Complaints will be acknowledged within 24 hours and resolved within 15 days, in accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

16. Contact

For general inquiries, please visit our Contact page.