Last updated: 26 July 2026
This policy explains what data Blurfield collects, why we collect it, and the choices you have. In short: we store what the product needs to run your business chats, orders and payments — nothing is sold, and your customers' conversations belong to you.
Account data: your name, email address, phone number, business name and billing details when you register for Blurfield.
Business content: your catalog, prices, images, settings, templates and any content you create inside the product.
Customer data processed on your behalf: when your customers message your connected WhatsApp, Instagram or Messenger accounts, we store those conversations, orders, bookings and delivery addresses so the product can work. For this data you are the data controller and Blurfield is a processor acting on your instructions.
Usage data: device, browser and log information used for security, debugging and improving the product.
To provide the service: routing messages, generating AI replies, processing orders and payments, sending notifications and showing analytics.
AI features: conversation content is sent to our AI providers only to generate the replies and media you request. We do not sell your data or your customers' data, and we do not use it to advertise to anyone.
Transactional email and SMS/WhatsApp messages are sent only for the product to function (OTPs, receipts, alerts you enable).
Blurfield connects to services you choose to enable: Meta (WhatsApp Cloud API, Instagram and Messenger platforms), payment gateways (for example Razorpay, Cashfree, PayU, Paytm, BillDesk, Stripe), courier partners, and AI model providers. Each receives only the data needed for the feature you use, under their own privacy terms.
We use infrastructure providers (hosting, database, email delivery) bound by data-processing agreements.
Data is stored on servers located in India and encrypted in transit. Access inside the company is role-restricted and audit-logged.
Media you upload is stored on our infrastructure and served only through your account or your public store pages.
We keep your data while your account is active. You can export a backup and permanently delete your account from Settings → Account at any time; deletion removes your business data from live systems within 30 days, except records we must keep by law (for example tax invoices).
If your customers ask you to delete their data, you can remove their conversations and contact records from the product, and we honour that deletion.
You may access, correct, export or delete your personal data, and object to processing, by using the in-product tools or contacting us. We answer verified requests within 30 days.
This policy is governed by Indian law, including the Digital Personal Data Protection Act, 2023, to the extent applicable.
Privacy questions: use the Contact page or write to our support address — we route privacy requests to the responsible person. If we change this policy materially we will notify you in-product before the change takes effect.