Privacy Policy

1. Who We Are

BigTick is a WhatsApp marketing platform operated by Bracecodes Software Solutions Pvt Ltd at bigtick.in ("BigTick", "we", "our", or "us"). We provide businesses with tools to send WhatsApp campaigns, manage contacts, and run customer conversations using the official WhatsApp Business Cloud API provided by Meta Platforms, Inc.

For privacy matters, you may contact us at: privacy@bigtick.in

2. Information We Collect

2.1 Account & Tenant Information

• Full name and business name
• Email address
• Password (stored as a one-way bcrypt hash — never readable)
• WhatsApp Business Account (WABA) ID and phone number(s) you connect via Meta's Embedded Signup

2.2 Contact Data You Upload

When you import or create contacts inside BigTick, you provide us with data such as:

• Contact name and WhatsApp phone number
• Custom tags, groups, and attributes you define

You are responsible for ensuring that you have the legal right to store and message these contacts under applicable law and WhatsApp Business Policy.

2.3 Message & Campaign Data

• Template messages you create and submit to Meta for approval
• Campaign details (name, audience, schedule, delivery status)
• Inbound and outbound message content relayed through the WhatsApp Cloud API

2.4 Usage & Technical Data

• IP address and browser user-agent
• Session data stored in our database
• Log data (errors, webhook events from Meta)

2.5 Billing Data

We maintain a wallet balance and transaction history for your account. Payment processing (if applicable) is handled by third-party processors; we do not store raw card numbers.

3. How We Use Your Information

• Service delivery — to operate BigTick, process campaigns, relay messages via WhatsApp Cloud API, and display analytics.
• Account management — to authenticate you, manage your subscription tier, and process wallet credits/debits.
• Security & fraud prevention — to detect abuse, apply rate limits, and protect the platform.
• Legal compliance — to fulfill obligations under Indian law, Meta's platform policies, and applicable data-protection regulations.
• Platform communications — to send you transactional emails (account verification, billing receipts, critical security notices). We do not send marketing emails unless you explicitly opt in.

4. Sharing of Information

We do not sell your personal data. We share data only in the following limited circumstances:

• Meta Platforms, Inc. — Message content and WABA configuration are transmitted to Meta's WhatsApp Cloud API to deliver or receive messages. Meta's own Privacy Policy applies to that data.
• Infrastructure providers — We use cloud hosting and database services to run BigTick. These providers process data on our behalf under data-processing agreements.
• Legal obligations — We may disclose information if required by court order, government authority, or to protect the rights and safety of BigTick or its users.
• Business transfers — In the event of a merger or acquisition, user data may be transferred with prior notice to affected users.

5. Data Retention

• Account data is retained for as long as your account is active.
• Message and campaign data is retained for as long as your account exists, then deleted within 90 days of account termination.
• Webhook event logs are retained for 14 days by default (configurable by platform operators).
• Backups may persist for up to 30 additional days after deletion.

6. Your Rights

Depending on your location and applicable law (including India's Digital Personal Data Protection Act, 2023 and the GDPR if you are in the European Economic Area), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent where processing is consent-based

To exercise any of these rights, email us at privacy@bigtick.in. We will respond within 30 days.

7. Cookies & Session Storage

BigTick uses a single session cookie (bigtick_session) to maintain your authenticated session. This cookie is HTTP-only, same-site, and is not used for advertising or cross-site tracking. We do not use third-party analytics cookies or advertising pixels on our platform.

8. Security

We apply industry-standard security practices including encrypted connections (TLS), hashed passwords (bcrypt), CSRF protection, and rate limiting on sensitive actions. No system is completely immune to breaches; in the event of a data breach affecting your personal data, we will notify you as required by applicable law.

9. Children's Privacy

BigTick is a business-to-business service and is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

10. International Data Transfers

BigTick is operated in India. Your data may be transmitted to and stored on servers located in India or, when relayed through Meta's infrastructure, in data centers operated by Meta globally. By using BigTick, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify you by email or an in-app notice. Continued use of BigTick after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related queries, complaints, or requests: