1. Who We Are
BusinessClaw AI ("BusinessClaw", "we", "us", "our") is operated by SJ25 Digital, a company registered in India. Our registered office is in Pune, Maharashtra, India.
BusinessClaw AI is a multi-tenant AI agent platform that provides communication automation, CRM, campaign management, voice AI, WhatsApp Business API services, and related business tools.
Data Protection Contact: privacy@businessclawai.com
2. Information We Collect
2.1 Account Information
When you create an account, we collect: name, email address, phone number, company name, industry, and role. This information is required to provision your tenant and provide the service.
2.2 WhatsApp Business Data
When you connect a WhatsApp Business Account (WABA) through our platform, we process:
- WhatsApp Business Account ID and phone number(s)
- Message templates and their approval status
- Inbound and outbound message content (text, media, documents)
- Delivery and read receipts
- Contact information of message recipients (phone numbers)
- Conversation metadata (timestamps, message types, channels)
This data is processed on behalf of your business (you are the Data Controller). We act as a Data Processor for WhatsApp message data.
2.3 Voice & Call Data
When you use our Voice AI or telephony features, we process: call recordings (with consent), call transcriptions, call metadata (duration, timestamps, caller/callee numbers), and emotion analytics data (sentiment scores, frustration indicators).
2.4 CRM & Business Data
Leads, contacts, companies, deals, activities, notes, and pipeline data you create or import into BusinessClaw CRM.
2.5 Billing & Payment Data
Transaction history, wallet balance, invoice details. Payment card details are processed by Razorpay (our payment processor) and are never stored on our servers.
2.6 Usage & Analytics Data
Pages visited, features used, session duration, device type, browser, IP address, and general location (city/country level). Collected via Google Analytics 4.
2.7 Cookies & Tracking
We use essential cookies for authentication and session management. Analytics cookies (Google Analytics) are used to understand usage patterns. You can disable analytics cookies in your browser settings.
3. How We Use Your Information
- Service delivery: To provide, maintain, and improve BusinessClaw AI features
- Communication: To send service notifications, billing alerts, and support responses
- WhatsApp messaging: To send and receive WhatsApp messages on your behalf via the WhatsApp Business API
- AI processing: To generate AI agent responses, lead scoring, sentiment analysis, and content recommendations within your tenant scope
- Billing: To process payments, generate invoices, and track usage-based costs
- Security: To detect fraud, prevent abuse, and maintain platform integrity
- Legal compliance: To comply with applicable laws, regulations, and legal processes
We do not sell your personal data. We do not use your business data to train AI models shared with other tenants.
4. Data Sharing & Third Parties
We share data with the following categories of service providers, solely to provide the service:
- WhatsApp / Meta: Message content and recipient phone numbers are sent to Meta via the WhatsApp Business API to deliver messages. Subject to WhatsApp Business Policy.
- Communication vendors: SMS providers (MSG91, Twilio, etc.), email providers (SendGrid, etc.), and voice providers (ElevenLabs, Sarvam AI, etc.) receive message content and recipient identifiers to deliver communications.
- AI model providers: Conversation text is sent to LLM providers via OpenRouter (which routes to Anthropic Claude, Google Gemini, or OpenAI GPT) to generate AI responses. These providers process data per their own privacy policies and do not retain your data for training.
- Payment processor: Razorpay processes payment transactions. Subject to Razorpay Privacy Policy.
- Cloud infrastructure: Google Cloud Platform (Mumbai region) hosts our databases, storage, and compute. Subject to Google Cloud DPA.
- Analytics: Google Analytics 4 receives anonymized usage data.
We do not share your data with any other third parties without your explicit consent, unless required by law.
5. Data Security & Multi-Tenant Isolation
We implement industry-standard security measures:
- Encryption in transit: TLS 1.3 for all data transmission
- Encryption at rest: AES-256 encryption via Google Cloud KMS
- Tenant isolation: Every database read/write is scoped by tenant_id. Cross-tenant data access is architecturally impossible. Vector search uses tenant-specific namespaces.
- Access control: Role-based access control (RBAC) with 6 role levels
- Audit logging: All administrative actions are logged with timestamps and actor identity
- Webhook security: Opaque webhook tokens prevent tenant_id exposure in vendor callbacks
6. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account termination.
- Message data: Retained per your tenant's storage lifecycle policy (configurable: Standard → Nearline → Coldline → Archive). Default: 365 days active, then archived.
- Call recordings: Retained per your storage lifecycle policy. Default: 90 days active, then archived.
- Billing records: Retained for 7 years as required by Indian tax law (GST Act).
- Audit logs: Retained for 3 years.
- Analytics data: Aggregated and anonymized after 26 months (Google Analytics default).
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of all personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Export: Export your data in machine-readable format (JSON/CSV)
- Objection: Object to processing of your data for specific purposes
- Withdraw consent: Withdraw consent for optional data processing at any time
To exercise any of these rights, email privacy@businessclawai.com. We will respond within 30 days.
8. WhatsApp Business API Compliance
As a Meta Technology Partner using the WhatsApp Business API, we comply with:
WhatsApp message data is used exclusively to provide the messaging service you have requested. We do not use WhatsApp data for advertising, profiling, or any purpose other than delivering your messages and enabling AI agent responses within your tenant.
9. Legal Basis for Processing
Under the Information Technology Act, 2000 (India) and GDPR (where applicable):
- Contract: Processing necessary to provide the service you signed up for
- Consent: Processing based on your explicit consent (e.g., analytics cookies, marketing emails)
- Legitimate interest: Processing necessary for security, fraud prevention, and service improvement
- Legal obligation: Processing required by Indian tax law, IT Act, or court orders
10. International Data Transfers
Your data is primarily stored in Google Cloud's Mumbai (asia-south1) region. AI model processing may occur in US/EU data centers (via OpenRouter). We ensure appropriate safeguards for any cross-border transfers.
11. Children's Privacy
BusinessClaw AI is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at privacy@businessclawai.com.
12. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be notified via email and/or a prominent notice on our website at least 30 days before they take effect.
13. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are:
Name: Swapnil Jain
Email: grievance@businessclawai.com
Response time: Within 30 days of receipt of complaint