Privacy Policy

Blitsee ('we', 'our', 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. This policy applies to: • Company owners and administrators • Employees using the platform • End customers communicating through WhatsApp By using Blitsee, you consent to the data practices described in this policy.

For the purposes of data protection laws: • Blitsee is the data processor • You (the business) are the data controller for your customer data • We process data on your behalf to provide the Service Contact our Data Protection Officer: • Email: privacy@blitsee.com • Address: [Your Address]

We collect several types of information: Account Information: • Company name and business details • Contact information (email, phone) • Payment information (processed by third-party providers) • User credentials and authentication data Usage Data: • WhatsApp messages and conversations • Customer information you provide • Order and transaction data • Platform usage analytics • Device and browser information • IP addresses and location data Automatically Collected: • Log data and error reports • Cookies and tracking technologies • Performance metrics

We use collected information to: Provide Services: • Process and respond to WhatsApp messages • Enable AI-powered automation • Manage orders and deliveries • Generate analytics and insights Improve Services: • Train and improve AI models • Analyze usage patterns • Develop new features • Fix bugs and optimize performance Communications: • Send service updates and notifications • Respond to support requests • Send marketing communications (with consent) Legal and Security: • Comply with legal obligations • Prevent fraud and abuse • Protect our rights and property • Ensure platform security

We share information only in limited circumstances: Service Providers: • Cloud hosting (AWS, Google Cloud, etc.) • Payment processors (Stripe, PayPal, etc.) • Analytics providers • Customer support tools Third-Party Integrations: • WhatsApp (Meta Platforms) • Delivery partners (Sappress, etc.) • Other services you connect Legal Requirements: • When required by law • To protect rights and safety • In connection with legal proceedings Business Transfers: • In case of merger, acquisition, or sale We NEVER sell your personal data to third parties.

When you connect WhatsApp to Blitsee: • We access messages through WhatsApp Business API • Messages are encrypted in transit • We store message data to provide the Service • WhatsApp's own Privacy Policy also applies • Meta (WhatsApp's owner) may have access to data You should: • Review WhatsApp's Business Policy • Inform customers about automated responses • Obtain necessary consents for data processing

Our AI features: • Process messages to generate responses • Learn from interactions to improve accuracy • May use anonymized data for model training • Do not share your specific data with other users You can: • Control AI behavior through settings • Review AI-generated responses • Opt out of data usage for model improvement • Request deletion of AI training data

We retain data for as long as necessary: Active Accounts: • Account data: Duration of subscription + 90 days • Message history: Configurable (30-365 days) • Analytics data: Up to 2 years Closed Accounts: • Deletion within 30 days of termination • Backup retention: Up to 90 days • Legal/compliance data: As required by law You may request earlier deletion subject to legal requirements.

We implement industry-standard security: Technical Measures: • Encryption in transit (TLS/SSL) • Encryption at rest (AES-256) • Secure authentication (OAuth, 2FA) • Regular security audits • Firewall and DDoS protection Organizational Measures: • Employee training • Access controls and monitoring • Incident response procedures • Regular backups Your Responsibilities: • Use strong passwords • Enable two-factor authentication • Keep credentials confidential • Report security incidents promptly

Under GDPR and other laws, you have the right to: Access: Request copies of your data Rectification: Correct inaccurate data Erasure: Request deletion of your data Restriction: Limit how we use your data Portability: Export your data in a standard format Objection: Object to certain data processing Withdraw Consent: For consent-based processing To exercise these rights: • Email: privacy@blitsee.com • In-app: Settings > Privacy & Data • Response time: Within 30 days

For Morocco-based users, we comply with Law 09-08: • Data processing is lawful and transparent • Data collected for specified purposes • You have rights to access and rectify data • We implement appropriate security measures • Cross-border transfers comply with legal requirements Contact Morocco's CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel) for data protection questions.

Your data may be transferred to and processed in: • European Union (GDPR-compliant infrastructure) • United States (with appropriate safeguards) • Other countries where our service providers operate We ensure transfers comply with applicable laws through: • Standard Contractual Clauses • Privacy Shield (where applicable) • Adequacy decisions • Your explicit consent

Blitsee is not intended for children under 18. We do not knowingly collect data from children. If you become aware that a child has provided us with personal information: • Contact us immediately at privacy@blitsee.com • We will delete such information promptly Parents/guardians have the right to review and request deletion of their child's data.

We use cookies and similar technologies for: Essential: Service functionality Analytics: Usage statistics Preferences: Your settings Marketing: Ad performance (with consent) You can: • Control cookies through browser settings • Opt out of analytics tracking • Manage preferences in your account See our Cookie Policy for detailed information.

We may update this Privacy Policy periodically. We will: • Notify you of material changes via email • Post updated policy with new effective date • Give you opportunity to review changes • Obtain consent for material changes (where required) Continued use after changes indicates acceptance.

For privacy questions or requests: Email: privacy@blitsee.com Response time: Within 5 business days for general inquiries, 30 days for data rights requests.