Legal

Privacy Policy

Effective date: August 19, 2026

This policy explains how Bitleap Technologies Pvt. Ltd. (“Bitleap,” “we,” “us,” or “our”) handles information when businesses use Sahaj Inbox.

1. About Sahaj Inbox

Sahaj Inbox is a multi-tenant customer-support platform that lets businesses connect supported messaging accounts, including Facebook Pages, Instagram professional accounts, WhatsApp Business accounts and TikTok Business Accounts, and manage customer conversations in a shared workspace.

2. Information we collect

Account and workspace information

We collect information used to create and operate an account, such as name, email address, login details, business name, workspace membership and role.

Connected-channel information

When a business authorizes a channel, we may receive account identifiers, Page or professional-account names, usernames, profile pictures, phone-number identifiers, business-account identifiers, access tokens, granted permissions and connection status.

Messaging information

We process messages, attachments, sender identifiers, available profile information, timestamps, delivery status and related conversation metadata required to provide the inbox. This information is provided by the connected business, its customers and the relevant messaging platform.

Technical information

We may collect IP address, browser and device information, request logs, error logs, security events and product-usage information needed to secure, troubleshoot and improve the service.

3. How we use information

Provide and operate connected channels, shared inboxes and customer-support features.
Route messages to the correct business workspace and authorized team members.
Authenticate users, protect accounts and prevent abuse.
Maintain, troubleshoot and improve reliability and performance.
Comply with applicable law and platform policies.

We do not sell personal information or use private message content to create unrelated advertising audiences.

4. Meta platform data

When a business connects Meta products, we process available data in accordance with Meta’s Platform Terms and Developer Policies. We use granted permissions only to provide features requested by the connected business, such as identifying its authorized professional account, receiving customer-initiated messages and allowing authorized agents to respond.

5. How information is shared

We may share information with infrastructure, hosting, security and communications providers that process data on our behalf; with connected platforms as required to send or receive messages; with the business that controls the relevant workspace; or when required by law, security or protection of rights. Service providers are permitted to use information only for the services they provide to us.

6. Tenant separation and security

Business workspaces are logically separated. Access is restricted according to workspace membership and role. We use safeguards appropriate to the nature of the data, including encrypted storage for supported channel access tokens, HTTPS transport, authorization controls and signed-webhook verification. No security system is guaranteed to be completely secure.

7. Retention and deletion

We retain information while it is needed to provide the service, meet contractual or legal obligations, resolve disputes and protect the service. A business may disconnect a channel to stop future channel access. Authorized users may request account or associated-data deletion by contacting us. We may retain limited records where required for security, fraud prevention, legal compliance or backup integrity.

8. Your choices and rights

Depending on applicable law, individuals may request access, correction or deletion of their personal information, or object to certain processing. Requests may require identity verification. Messaging-platform permissions may also be reviewed or revoked through the relevant Facebook, Instagram, WhatsApp or TikTok settings.

9. Children

Sahaj Inbox is a business service and is not directed to children. We do not knowingly create service accounts for children.

10. International processing

Information may be processed in countries where we or our service providers operate. Where required, we use appropriate measures for cross-border data processing.

11. Changes to this policy

We may update this policy as the service, law or platform requirements change. The effective date above will be updated when changes are published.

12. Contact

Questions or privacy requests may be sent to Bitleap Technologies Pvt. Ltd. through the contact details published on our official website. Please include “Sahaj Inbox Privacy Request” in the subject of your request.