1. Who we are
Pipebit Converse (“the Service”, “we”, “us”) is operated by Kairav Bhatia, sole proprietor trading as Pipebit, located at New Delhi, India. We are the data fiduciary / data controller for personal data processed about visitors to this website and administrators of our customer accounts.
For personal data that our business customers process about their end-customers through the Service (for example, WhatsApp conversation content), our customer is the data fiduciary / controller and we act as a data processor on their behalf under our customer agreement.
2. Scope
This policy covers our marketing website and the Pipebit Converse product. It applies to personal data governed by India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”).
3. Information we collect
You provide to us
- Account and contact details (name, business email, phone, company).
- Billing information processed by our payment providers.
- Content you upload to train or configure your AI agent.
- Communications you send to our sales or support teams.
Collected automatically
- Device, browser, and usage data via standard logs and analytics.
- Cookies and similar technologies (see “Cookies” below).
Processed on behalf of customers
- WhatsApp message content, phone numbers, and metadata that flow through a customer's connected WhatsApp Business account, plus data synced to the customer's CRM and tools.
4. How we use personal data
- To provide, operate, secure, and improve the Service.
- To set up accounts, process payments, and provide support.
- To communicate about your account, updates, and (with consent) marketing.
- To comply with legal obligations and enforce our terms.
5. Legal bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract; our legitimate interests in operating and improving the Service; your consent (which you may withdraw at any time); and compliance with legal obligations.
6. WhatsApp and Meta
The Service is built on the official WhatsApp Business Platform. When you connect a WhatsApp Business account, your and your end-customers' data is also subject to Meta's and WhatsApp's terms and policies. We are an independent product and are not affiliated with or endorsed by WhatsApp LLC or Meta Platforms, Inc. (see the trademark notice in our footer).
7. Sharing and sub-processors
We do not sell personal data. We share it only with: service providers and sub-processors (e.g. cloud hosting, AI model providers, payment and analytics providers) under appropriate contracts; the integrations you enable (such as your CRM); and authorities where required by law. A current list of sub-processors is available on request at privacy@pipebit.dev.
8. International transfers & data residency
We may process data in India and other countries. Where data is transferred internationally, we use appropriate safeguards (such as Standard Contractual Clauses). Enterprise customers can request options to keep customer data resident in India to support DPDP and internal compliance requirements.
9. Retention
We retain personal data for as long as needed to provide the Service and for legitimate business or legal purposes, after which it is deleted or anonymised. Customer-controlled data is retained and deleted according to the customer's settings and our agreement with them.
10. Your rights
Subject to the DPDP Act and/or GDPR, you may have rights to access, correct, update, erase, or port your personal data, to withdraw consent, to nominate (DPDP), and to object to or restrict certain processing. To exercise these rights, contact us at privacy@pipebit.dev. If we process your data on behalf of a business customer, we will refer your request to that customer.
11. Cookies
We use essential cookies to run the site and, with your consent where required, analytics cookies to understand usage. You can control cookies through your browser settings.
12. Security
We use administrative, technical, and organisational measures including encryption in transit and at rest, access controls, and SSO to protect personal data. No method of transmission or storage is completely secure.
13. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children as defined by applicable law.
14. Changes
We may update this policy from time to time. Material changes will be posted here with a revised “last updated” date.
15. Contact & grievances
For any questions, or to reach our Grievance Officer / Data Protection Contact as required under the DPDP Act, contact our Grievance Officer, Kairav Bhatia, at privacy@pipebit.dev, or write to Kairav Bhatia, sole proprietor trading as Pipebit, New Delhi, India.